dev.coreapi.fcm.travel

- Microsoft Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:6d:04:ef:00:d4:73:46:e3:71:1d:88:ac:b3:e9:99 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:6d:04:ef:00:d4:73:46:e3:71:1d:88:ac:b3:e9:99
Serial Number (int): 11199884389285715364163490773871094169
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:e5:50:c1:e3:db:cb:fd:77:63:9d:e9:f8:02:87:27:58:70:cd:5d
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ee:61:c5:e3:71:aa:b3:e9:de:81:83:bb:ac:2b:59:b8:97:9a:2f:0f
Fingerprint (sha256): 17:fc:20:5f:66:78:e5:10:2e:b1:a4:13:05:d4:cd:65:2f:d2:59:fa:5d:10:b3:34:a5:70:e8:5e:70:45:04:8b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate dev.coreapi.fcm.travel

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.coreapi.fcm.travel

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.coreapi.fcm.travel

Other certificates including the domain name fcm.travel

(limited to 100 certificates)
mail.mailalivetravel.com
*.fcm.travel
admin.4dconsulting.com.au
redirect.aws.fclweb.net
acquiadev.flitech.net
procim.uk.fcm.travel
fdus-18.freshdesk.com
bi-us-dev-hoteltrendapi.fcm.travel
redirect.aws.fclweb.net
activ-travel.net
emissionapi.fcm.travel
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
activ-travel.net
easycare.ch.fcm.travel
redirect.aws.fclweb.net
www.cievents.com.au
activ-travel.net
hn.fcm.travel
www.cievents.com.au
www.cievents.com.au
img.sib.fr.fcm.travel
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.cievents.com.au
api.cdstraveltrans.dev.fcm.travel
adyenwebhooks.tina.jp.fcm.travel
mail.bo.fcm.travel
activ-travel.net
ma.fcm.travel
paymentapi.fcm.travel
www.flightcentre.com
activ-travel.net
activ-travel.net
easycare.ch.fcm.travel
agentporttest.us.fcm.travel
mail.mailalivetravel.com
activ-travel.net
acquiadev.flitech.net
activ-travel.net
tina.jp.fcm.travel
acquiaprod.flitech.net
fdus-18.freshdesk.com
easycare.ch.fcm.travel
mail.activ-travel.net
www.flightcentre.com
activ-travel.net
acquiaprod.flitech.net
activ-travel.net
serko.campustravel.com.au
redirect.aws.fclweb.net
fdus-19.freshdesk.com
activ-travel.net
fdus-18.freshdesk.com
activ-travel.net
activ-travel.net
www.fcm.travel
clientbankconnect.fcm.travel
acquiatest.4dconsulting.com.au
acquiaprod.flitech.net
activ-travel.net
activ-travel.net
activ-travel.net
tinauat.jp.fcm.travel
booking.cn.fcm.travel
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.cievents.com.au
cbdittest.us.fcm.travel
acquiaprod.flitech.net
easycare.fr.fcm.travel
easycare.ch.fcm.travel
www.flightcentre.com
redirect.aws.fclweb.net
easycare.ch.fcm.travel
easycare.ch.fcm.travel
easycare.ch.fcm.travel
activ-travel.net
www.fcm.travel
redirect.aws.fclweb.net
activ-travel.net
activ-travel.net
dev.coreapi.fcm.travel
redirect.aws.fclweb.net
id.fcm.travel
*.us.fcm.travel
fdus-18.freshdesk.com
acquiaprod.flitech.net
tz.fcm.travel
easycare.dk.fcm.travel
redirect.aws.fclweb.net
acquiastage.ao.fclmedia.com
activ-travel.net
fdus-18.freshdesk.com
acquiaprod.flitech.net
easycare.ie.fcm.travel
fdus-18.freshdesk.com
acquiadev.flitech.net
apac.fcm.travel

Certificate

The complete raw certificate details for dev.coreapi.fcm.travel in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEOWYjhsU75+VmQjMmqP
szPbkk9+SOXX9VHUkGJEwxpqD+Y+/vsvj1Dx25JoieXMkOflaLuZP2ZIVMqV4te1
YezjZ7q/gFsBzgp4zBuWGXbjJp6/eZYJN+qqOJgZvi+T21Xsaaeh7gmTcMO+5vVN
5HNxN3KU5hOP+mZPX1Is3npl5hzoRk46yNAXHPj4WIRgG/gR5aKn7Zs7e3/fpWsb
TSdmgrvp0pH7Y50FCKBlsfgdSu6y1TOUtUwRxlgusx9n3NfZl/u1GF3mOz5s4E36
hdkeh8Cco7p/BeRKNiVNo3z96a7iD+z/+M7ifFzXz2dVsZ/t3PQlaq9u/0gjKQZz
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11199884389285715364163490773871094169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.coreapi.fcm.travel'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23261176720731236188014440303299910918787412168800393556557694694628775970476081644899813550795729252494923979481945947047108082802240967024358940430084760569401547945870123027072141134584947899210901818179892069497408173973981963830700042388656120526302686556976477983743356006100197165225167609799940325288768949319795167531394291511426878551195553494585670459737218888211459248011593311300561982653535744050431528889262765183254673205983226931791337509419182423396291807226160562463311381360056201171867947988579619986069436822136701109001117944559717346149615907562957811088346009169279735667911917561175582601993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1e550c1e3dbcbfd77639de9f80287275870cd5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.coreapi.fcm.travel'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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