book2.spicejet.com

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 09:76:ca:4b:fe:7b:9a:da:a0:d9:7e:ff:eb:95:73:24 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=book2.spicejet.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:76:ca:4b:fe:7b:9a:da:a0:d9:7e:ff:eb:95:73:24
Serial Number (int): 12579846058982100371405070562204414756
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 65:af:88:96:c7:69:1f:64:56:47:47:56:09:8a:7f:d3:16:eb:32:9e
Fingerprint (sha256): 19:27:81:e8:39:1f:98:6e:6c:bb:d1:e2:c5:35:b1:2d:7d:0e:60:4d:a1:37:30:c5:2c:0e:a2:3b:dc:2f:3e:8c

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate book2.spicejet.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for book2.spicejet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

book2.spicejet.com

Other certificates including the domain name spicejet.com

(limited to 100 certificates)
ssl375303.cloudflaressl.com
junglebook.langoor.com
ssl375304.cloudflaressl.com
track.spicejet.com
ssl375303.cloudflaressl.com
ssl375304.cloudflaressl.com
hr.spicejet.com
staging.cms.spicejet.com
junglebook.langoor.com
track.spicejet.com
www.spicejet.com
groups.spicejet.com
track.spicejet.com
mobileapi.spicejet.com
ssl375302.cloudflaressl.com
ssl375302.cloudflaressl.com
track.spicejet.com
ess.spicejet.com
track.spicejet.com
sni.cloudflaressl.com
blog.spicejet.com
track.spicejet.com
junglebook.langoor.com
people.marketingbroker.com.au
track.spicejet.com
track.spicejet.com
www.spicejet.com
sni.cloudflaressl.com
junglebook.langoor.com
ssl375302.cloudflaressl.com
track.spicejet.com
blog.spicejet.com
ssl375302.cloudflaressl.com
ssl375303.cloudflaressl.com
track.spicejet.com
track.spicejet.com
hrportal.prconsulting.net
book.spicejet.com
junglebook.langoor.com
staging.cms.spicejet.com
turmeric.spicejet.com
book2.spicejet.com
track.spicejet.com
ssl375302.cloudflaressl.com
ssl375304.cloudflaressl.com
blog.spicejet.com
junglebook.langoor.com
ssl375303.cloudflaressl.com
ssl375302.cloudflaressl.com
junglebook.langoor.com
junglebook.langoor.com
ssl375304.cloudflaressl.com
m.spicejet.com
ssl375303.cloudflaressl.com
hr.spicejet.com
*.spicejet.com
ssl375304.cloudflaressl.com
sme.spicejet.com
track.spicejet.com
ssl375304.cloudflaressl.com
track.spicejet.com
junglebook.langoor.com
ssl375302.cloudflaressl.com
ssl375302.cloudflaressl.com
agentplus.spicejet.com
track.spicejet.com
junglebook.langoor.com
cms.spicejet.com
employee.fxview.com
ssl375302.cloudflaressl.com
ssl375303.cloudflaressl.com
ssl375302.cloudflaressl.com
groups.spicejet.com
track.spicejet.com
mobileapi.spicejet.com
book.spicejet.com
www.spicejet.com
blog.spicejet.com
junglebook.langoor.com
www.spicejet.com
book.spicejet.com
staging.cms.spicejet.com
track.spicejet.com
track.spicejet.com
zoho.liftscbc.com
track.spicejet.com
mobileapi.spicejet.com
ssl375302.cloudflaressl.com
gitlab.spicejet.com
junglebook.langoor.com
*.spicejet.com
*.yana.volantio.com
junglebook.langoor.com
blog.spicejet.com
track.spicejet.com
ssl375302.cloudflaressl.com
hrportal.prconsulting.net
*.spicejet.com
humanresources.rayhillmedia.com
book.spicejet.com

Certificate

The complete raw certificate details for book2.spicejet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrBTwzE3WoeT9VnhmsuR
Cvbxos0tngbt8CyT0sayRnYB/ryupWcQUNfnZTX6X3p6iGyV66827ljgnA7+PorE
tKUk0wbUpC1INBOOCfe/wdcNwWo+wwktwza0zJjTXsfXkRFQ2R/YYJZsb9OsH/ow
XOSsk3sn+YF9pB47X8X9swM88psCgpH8oRotMrWa387g2/AU49SUCMcBRQHo56td
YNmwJiS7UbGwxBhOc/chOZx9GIG3Ik/W6JTu4Wd6iFAKX6Z+aJ68y+18F2lKagpQ
AK0Kwgfde/ak2l1GKvMhIlTt7IRrLiKXKYYXHB9f+oLUPINV21CySqv2F7d3kLun
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12579846058982100371405070562204414756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'book2.spicejet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22052415245685222353787613066272801819642872469633240531180508719277157329576793790478442570888569729741744005882168892298280369940308504535300303272984011944176587408013957621198197686074285193694753554903507999187227133657637569750702937287506088550357173922609275607345073768209348347710691489701501001379329177577518423334484882060426072541468556275573110407291635013204908432887697971457022842232986608420795679514350223181639037029334398664698089159844145674487635986420677706727043912192495752682917455467165563090408044969214986197042529487006831153180682527306699980129480585196859421350221143381807170562043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book2.spicejet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001553906d75f0000040300483046022100bcb6310979bde51d63fcf57ea0930f4469c12b8414fc77d474a1eaa0e27789eb022100b0453c114ee3458245cbc7ae391dc1771f45b5f583e2245ae53708dc200fb993007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001553906d77b0000040300463044022033e37599b8351c4ab3aae1137b99662544c78b36a24a2ef6f6cdb1e1cec56a2f022072529d3d1e6581658a47bd6406dfff9ce145ffd9ddf290d1e88bf0302739b357
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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