holidays.stg-apiairasia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ea:8b:a8:6c:a0:9d:5e:ac:1f:d7:ce:62:e5:97:99:52:2c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holidays.stg-apiairasia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:8b:a8:6c:a0:9d:5e:ac:1f:d7:ce:62:e5:97:99:52:2c
Serial Number (int): 428260854787052370989366607801294631031340
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:8a:c4:61:17:6f:80:ce:1d:2b:34:aa:f5:66:13:f4:5a:58:d3:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:53:20:0e:0e:ec:be:f3:4b:3c:c7:e6:0e:a7:7c:e8:a6:3c:d1:a4
Fingerprint (sha256): 0f:96:6b:bd:3d:95:82:83:d5:6f:d9:e9:c1:48:5b:c2:5d:66:c0:25:75:a6:7e:50:d9:88:3b:a3:b8:27:d5:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate holidays.stg-apiairasia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holidays.stg-apiairasia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aahol.apps.ota.stgairasia.com
holidays.stg-apiairasia.com

Other certificates including the domain name stg-apiairasia.com

(limited to 100 certificates)
id.ride.stg-apiairasia.com
homepage.stg-apiairasia.com
lemon.stgairasia.com
flights-auth.stg-apiairasia.com
chat.stg-apiairasia.com
flights-auth.stg-apiairasia.com
navitaire.stg-apiairasia.com
my.ride.stg-apiairasia.com
chatbot.stg-apiairasia.com
payment.stg-apiairasia.com
recommend.stg-apiairasia.com
id.ride.stg-apiairasia.com
dutytravel.stg-apiairasia.com
navitaire.stg-apiairasia.com
lemon.stg-apiairasia.com
ikhlas.stg-apiairasia.com
lemon.stg-apiairasia.com
chat.stg-apiairasia.com
hotelsbe.stg-apiairasia.com
id.ride.stg-apiairasia.com
hotels.stg-apiairasia.com
holidays.stg-apiairasia.com
lookup.stg-apiairasia.com
lemon.stgairasia.com
flights-auth.stg-apiairasia.com
id.ride.stg-apiairasia.com
lemon.stg-apiairasia.com
chatbot.stg-apiairasia.com
hotelsbe.stg-apiairasia.com
nmqp.stg-apiairasia.com
lemon.stg-apiairasia.com
chat.stg-apiairasia.com
th.ride.stg-apiairasia.com
k.stg-apiairasia.com
food.stg-apiairasia.com
my.ride.stg-apiairasia.com
my.ride.stg-apiairasia.com
iac.hotelsbe.stg-apiairasia.com
k.stg-apiairasia.com
th.ride.stg-apiairasia.com
ava-dashboard.stg-apiairasia.com
xpress.stg-apiairasia.com
holidays.stg-apiairasia.com
lookup.stg-apiairasia.com
lemon.stg-apiairasia.com
my.ridepartner.stg-apiairasia.com
nmqp.stg-apiairasia.com
homepage.stg-apiairasia.com
navitaire.stg-apiairasia.com
nmqp.stg-apiairasia.com
lemon.stgairasia.com
checkin.stg-apiairasia.com
hotelsbe-auth.stg-apiairasia.com
hotelsbe.stg-apiairasia.com
chat.stg-apiairasia.com
flights-auth.stg-apiairasia.com
navitaire.stg-apiairasia.com
food-id.stg-apiairasia.com
lemon.stg-apiairasia.com
lookup.stg-apiairasia.com
widget.stg-apiairasia.com
lemon.stg-apiairasia.com
payment.stg-apiairasia.com
navitaire.stg-apiairasia.com
navitaire.stg-apiairasia.com
stg-apiairasia.com
lemon.stgairasia.com
hotels.stg-apiairasia.com
my.ride.stg-apiairasia.com
lemon.stgairasia.com
lemon.stg-apiairasia.com
hotelsbe-auth.stg-apiairasia.com
hotelsbe.stg-apiairasia.com
ikhlas.stg-apiairasia.com
hotels.stg-apiairasia.com
ava-dashboard.stg-apiairasia.com
holidays.stg-apiairasia.com
lemon.stgairasia.com
lemon.stg-apiairasia.com
navitaire.stg-apiairasia.com
nmqp.stg-apiairasia.com
lemon.stg-apiairasia.com
hotelsbe.stg-apiairasia.com
th.ride.stg-apiairasia.com
tst-nudge.stg-apiairasia.com
hotels.stg-apiairasia.com
lookup.stg-apiairasia.com
widget-api.stg-apiairasia.com
lemon.stgairasia.com
nmqp.stg-apiairasia.com
nmqp.stg-apiairasia.com
holidays.stg-apiairasia.com
lookup.stg-apiairasia.com
*.ride.stg-apiairasia.com
lookup.stg-apiairasia.com
navitaire.stg-apiairasia.com
lookup.stg-apiairasia.com
flights-auth.stg-apiairasia.com
holidays.stg-apiairasia.com
navitaire.stg-apiairasia.com

Certificate

The complete raw certificate details for holidays.stg-apiairasia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMDCa9M7ZsAz9iP5jhQs
MTP/+3VjAC+FODUkJeAWSUq8yxrHobTwTg3YSYM/WlDCMZ0FEJuwrPFk8KbjAvzg
gasaop2OHSCywH/vhuUIfYM2F4jXy2QabsmrbVzehq2Rf906uRRjww/rbGZ/vV62
XQrHXDzHYEsOSm/CVS9yJqx1Sok07IMeA01tCQE1l/1tyZCnXKJfiw5hoDwRS1H3
DHryd77mEfnht5f8mmV2qf1S0ucJOtVpJuF9PETPWxch8xz6rsTBQZzYJnOaX2wK
ndRqDjK0hOYtNyEoq7g6sKjLvZe/jAqSgAQlxXAYEmYYWPZ717WDnrt3GDCO8I6G
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428260854787052370989366607801294631031340
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-20 14:45:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-18 14:45:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holidays.stg-apiairasia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25342714224525903383555070727024061961046266755382214879071323730700583632063283443644898981682670192234442719816613320078534995208495899247104243790896894020161203314948275636235237013457971616372872488300745189896158624508109950737362089186486627003324819791790283644763811391595878459033233253618402389125723833425001960678385326494278239888154616618432492952219188363057847610433470605941833827280038690475027038665030400696975169649366951839011196690984433192495058430590806280264285546948004952550082871778239342597210232689044257944761447683816883099013364098638385855832753090519306858975521426146095566587537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c98ac461176f80ce1d2b34aaf56613f45a58d32d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aahol.apps.ota.stgairasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidays.stg-apiairasia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000018181ca2aff000004030046304402200af287c08ea6ac04b650f775829107fa5c78e03efe42e2ba99132ee382344f1f02206a1e7092cf3510ba5570a228e954f2bbdc3a5e5c1b1a1d1fb658e8265967e0f6007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000018181ca2c670000040300473045022043622efbc3819e451c7a5db5b0f4751081fdb1fb1545888fe6da8bfb5ab08593022100ef2cf7c29540ef2bb42c94cef23727bc5a2f74632ce4f209e3dcea3e83fb3cdc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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