acquiatestau.flitech.net

Issued by R3

About this certificate

This digital certificate with serial number 03:46:5d:1e:72:65:6a:9a:24:6b:a1:7b:9e:3f:22:8e:e1:30 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acquiatestau.flitech.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:5d:1e:72:65:6a:9a:24:6b:a1:7b:9e:3f:22:8e:e1:30
Serial Number (int): 285280399772489916591155871723680418423088
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:aa:36:35:6c:d7:00:4d:4e:7b:d4:7d:e1:c3:11:b4:0f:ad:dd:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:91:f7:80:77:d7:43:1a:c5:fd:20:a9:2e:3d:f9:32:bd:73:44:c0
Fingerprint (sha256): 14:c5:a1:17:db:99:42:6d:e4:39:8f:bd:cc:13:20:78:ce:3d:c2:90:2a:16:29:fe:65:6c:a5:ca:f2:93:bf:d6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate acquiatestau.flitech.net

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquiatestau.flitech.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.testau.acquia.fcl.cloud
acquiatestau.cruiseabout.com.au
acquiatestau.fclmedia.com
acquiatestau.flightcentre.com.au
acquiatestau.flitech.net
acquiatestau.infinityholidays.co.nz
acquiatestau.infinityholidays.com.au
acquiatestau.platform.fclmedia.com
acquiatestau.services.fclmedia.com
acquiatestau.travel-associates.com.au
acquiatestau.travelassociates.com

Other certificates including the domain name flitech.net

(limited to 100 certificates)
acquiaprod.flitech.net
redirect.aws.fclweb.net
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
receiptgate-global-stage.au.flitech.net
profilegate.au.flitech.net
acquiaprod.flitech.net
*.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiadev.flitech.net
hrauinfo.au.flitech.net
acquiaprod.flitech.net
acquiaprod.flitech.net
acquiadev.flitech.net
graham.au.flitech.net
acquiaprod.flitech.net
api-customerprofile-uat.au.flitech.net
receiptgate-global.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
*.nz.flitech.net
engineering.flitech.net
api-sabre-tst.au.flitech.net
acquiaprod.flitech.net
jira.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
au.cruise.flitech.net
redirect.aws.fclweb.net
travellerlocator.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
portal.au.flitech.net
redirect.aws.fclweb.net
acquiaprod.flitech.net
profilegate-stg.au.flitech.net
redirect.aws.fclweb.net
graham.au.flitech.net
acquiatestau.flitech.net
prd-esb-sabre-notification-gateway.au.flitech.net
acquiaprod.flitech.net
approveplus.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
*.nz.flitech.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
internal-api-tst.au.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
receiptgate-global.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
splunk-hf-elb-aws.au.flitech.net
redirect.aws.fclweb.net
ece.au.flitech.net
acquiatest.flitech.net
acquiaprod.flitech.net
corp-invoice-printer-stg.au.flitech.net
*.nz.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
internal-api-tst.au.flitech.net
receiptgate-global.au.flitech.net
engineering.flitech.net
acquiastagecf.flitech.net
crystal.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
jira.au.flitech.net
confluence.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
engineering.flitech.net
redirect.aws.fclweb.net
fx.au.flitech.net
ece.au.flitech.net
acquiatestau.flitech.net
engineering.flitech.net
api-external.au.flitech.net

Certificate

The complete raw certificate details for acquiatestau.flitech.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiKQFw94IhS009ZQC7E6
olDUftieecJk64Z3c8zKpMlsQ3h4Z/cdZycI+2KLH5zKkT8lisZuEXNtqaU7tAbw
d5hAqMkAHyGbL+ZjYZsiZzjoH0kWanre4Hh0gJLObMwCXiNM6sATGfpBDYu6nps/
0fruUCxna+KUPcgF343eMi+0pHPPUbuTfsFmKgJNwXubPOY/Ttpmr/M6tO6qhvfA
xwnxwN0FpIu6KfufaLBBZ9QgRR6k4k7+mxgQq0ZiVtzOt8JsPik7cqgjXBCVSlnn
k9g9gGZIVwe3AyaDkwgub6kZQ2Ai9xuPnVJVyOSu78uQjiZket9+vzObutRoDqUU
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285280399772489916591155871723680418423088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-11 05:23:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-11 05:23:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquiatestau.flitech.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25012227960761601562169327265049505172058851235176051863648964025553757855863601518342303357858700177116006971409711866543301739540095623273445673244647776091357683326134606024246940175009129401320851791198384068937885152010695569496836743738811912203168067389220975450291144063685002111555689594960710300432227174809087751368307025882006032273557409817478430990852730862310209433185886212725933561188461973350169226030932432788545349422979550041782675223579691041227699418638353434703300711999462626622382499988456959129674529643269462634630608172212533443940696160916372236218652953555867432661237424666669977244899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0daa36356cd7004d4e7bd47de1c311b40faddd68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (372 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testau.acquia.fcl.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.cruiseabout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.flitech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.infinityholidays.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.infinityholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.platform.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.services.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatestau.travelassociates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000176f01cf54600000403004730450220304e633ba184bb3c7d6e6434dd32e704057e7acca5563ccd9ad1fc8f71c4df9d022100a01c7a97c71a936b5feb0b709c61a96c6f24c25c2bbf93b4638b5f3880fd3c1a007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000176f01cf54b0000040300483046022100cca0c9712a5d7fdfb51f8033d353eb34166e0fd2796a508cb9cf6d2f621de260022100f6270b77c192022681a03475018de060ada53e52efc950e3d128a464a244bcdf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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