that.majidalfuttaim.com

Issued by R3

About this certificate

This digital certificate with serial number 03:22:bf:c0:92:59:ae:25:0b:ca:3b:65:88:b3:bb:8e:49:20 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=that.majidalfuttaim.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:bf:c0:92:59:ae:25:0b:ca:3b:65:88:b3:bb:8e:49:20
Serial Number (int): 273161340707121409090809941481230376519968
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:6c:a4:ff:fa:4f:67:9f:82:42:ff:0a:b9:b0:5f:c0:bc:31:9b:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cd:5c:08:b2:ff:2d:f0:2b:4e:b9:65:73:d6:bd:78:a7:1c:30:bc:e6
Fingerprint (sha256): 0d:77:b0:72:ba:a2:b7:d6:c1:fd:cc:60:d3:8d:66:e0:a7:a8:86:22:bf:b1:ad:ab:c0:06:55:a5:ce:99:23:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate that.majidalfuttaim.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for that.majidalfuttaim.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ablink.carrefour-uzb.majidalfuttaim.com
ablink.share-rewards.majidalfuttaim.com
iamai.uae.majidalfuttaim.com
that.majidalfuttaim.com

Other certificates including the domain name majidalfuttaim.com

(limited to 100 certificates)
www.majidalfuttaim.com
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com
xid.almouj.com
www.majidalfuttaim.com
xid.almouj.com
www.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com
xid.alzahia.ae
that.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com
xid.alzahia.ae
that.majidalfuttaim.com
that.majidalfuttaim.com
mallofoman.net
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
xid.voxcinemas.com
www.majidalfuttaim.com
that.majidalfuttaim.com
identity.majidalfuttaim.com
www.majidalfuttaim.com
privacy-center.majidalfuttaim.com
api-fintech-prod.majidalfuttaim.com
that.majidalfuttaim.com
ssl714520.cloudflaressl.com
tracking.share.majidalfuttaim.com
xid.alzahia.ae
that.majidalfuttaim.com
www.majidalfuttaim.com
that.majidalfuttaim.com
mafid-sandbox.majidalfuttaim.com
dev-progressive.majidalfuttaim.com
tracking.notify.majidalfuttaim.com
that.majidalfuttaim.com
mafid-sit.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
super7.majidalfuttaim.com
that.majidalfuttaim.com
sni.cloudflaressl.com
that.majidalfuttaim.com
ssl714520.cloudflaressl.com
mallofoman.net
tracking.privacy.majidalfuttaim.com
www.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com
sni.cloudflaressl.com
share-etihad.majidalfuttaim.com
identity.majidalfuttaim.com
that.majidalfuttaim.com
tracking.share.majidalfuttaim.com
ssl714518.cloudflaressl.com
tracking.notify.majidalfuttaim.com
identity.majidalfuttaim.com
that.majidalfuttaim.com
ssl714519.cloudflaressl.com
www.majidalfuttaim.com
www.majidalfuttaim.com
privacy-center.majidalfuttaim.com
majidalfuttaim.com
mafid-sit.majidalfuttaim.com
ssl714518.cloudflaressl.com
that.majidalfuttaim.com
ssl714519.cloudflaressl.com
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
ssl714520.cloudflaressl.com
identity.majidalfuttaim.com
that.majidalfuttaim.com
tracking.privacy.majidalfuttaim.com
mafid-uat.majidalfuttaim.com
xid.alzahia.ae
careers.majidalfuttaim.com
notify.majidalfuttaim.com
mafid-sandbox.majidalfuttaim.com
majidalfuttaim.com
that.majidalfuttaim.com
www.majidalfuttaim.com
xid.almouj.com
www.majidalfuttaim.com
identity.majidalfuttaim.com
mafid-sandbox.majidalfuttaim.com
notify.majidalfuttaim.com
www.majidalfuttaim.com
mafid-sandbox.majidalfuttaim.com
www.majidalfuttaim.com
mafid-uat.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com

Certificate

The complete raw certificate details for that.majidalfuttaim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZIJqsGg+5vEp1IqcVyE
ciL2QkQhzf/WIICQ3gqX8NZRJ3dv8R7hhIKslreHtkyBSb8vHm43G+xBlB68j7fs
l/N5CYnuFerOpo7r4J7b/Wc4B4MUTc9jAUewlK6iTqTK2CVKPhPbdec2DtfUUJ3h
LCf3op2OqTLqx55B4R+SOk81Bb/K1vC79DSJcQGmJDUSx1xgUS9YGXZrMJOxKmsN
DjHd0p0POsMyD03M1I7fGPa564EtNMx/pTjEiV/KvLEArYtAZYXbIBrAwz9A+oJ1
FYrNJLsyyzmjRuRflWkTURquNp8WP9cqDhgXK4dPtuTtjZbByE6RwqbLN+zc38tV
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273161340707121409090809941481230376519968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-09 06:06:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-07 06:06:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'that.majidalfuttaim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24436006762780625414773710404080491440400227587366653003637507157911414334417515848735955648798790650708238978846422361588352790056109564244861276891908640818338114660484508266735359964949142160031927644746640082927398855744552947138491399581722884472404748030399935537108577011181784206252557468743607914552574570459230308649025906909075781908143945887514466461052931151293350293002696967643865703611495409462367003496913111676280502184533468813325616822741366945142605074145380557340998077202811392677385691876112147464368924970905094244869789934780956872222621987191014413188176536173480014472440720860523417785759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c6ca4fffa4f679f8242ff0ab9b05fc0bc319b12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.carrefour-uzb.majidalfuttaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.share-rewards.majidalfuttaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamai.uae.majidalfuttaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'that.majidalfuttaim.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017815ce9d4800000403004830460221008a66d339c9c71619cfd7b1d6004d9efd9abe51841651a53e52956c2cfbad09b6022100f7e68cbdd95dbfc1dfcf6f5ef3481c15fc0f80b36fcafaaa03884a23fa9a984c007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017815ce9d1a0000040300483046022100e7b392fb665b2d1843e9b58c6f78d0e8237f885c4a0cd2bae1f490bd4f1d7826022100cfd0e128c3d84f32eb23ea7e9de25f9d439e2639a8858a8378497bf11e40b92f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f707f573726ce1aa3f2815a7352d6729325bafe7be4832ad265729d367f793b9fe813de2f622037a2db93381b2d6797c6f8c8935fc7208cd9253594fd5224601cc9e96a355d10b1e6c4eae7496031c5ca764b61da4adf7ccb1eb77bae1f445fc6100198236ddcebc0d83f996e3088dc4c07e7b45419e8b44b38b7047179a0a8f75fa952787e7ed06913bef6cfc255d028a0df7a0bd30821134bc6119345dd814d35076fbd2c490cfe8937c6e2cb2340f9f30037853ec12908022be125ac1adfc25ed00bfe5c039c49e67452cca16da8ee981ddf13f88bc9ee1f274836811a985b652708802fc7d2ed03c914987ffcb7e4256fb536cb02c4eeffb9eda0bba8ed