hms.airasia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:76:40:a8:e6:eb:52:cd:a9:6e:d7:c3:c2:8f:df:7c:97:99 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hms.airasia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:76:40:a8:e6:eb:52:cd:a9:6e:d7:c3:c2:8f:df:7c:97:99
Serial Number (int): 388688410604912647173540551536627309909913
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c4:4d:da:27:a2:0d:33:be:78:68:c4:65:11:8d:1b:cb:81:5a:2a:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:87:1e:4c:ed:02:63:6d:07:de:96:68:69:0f:79:d6:b2:02:0c:3c
Fingerprint (sha256): 1b:59:43:de:77:1f:8d:eb:4e:20:0a:35:95:dd:d7:f0:d2:1c:5a:42:b5:90:c6:e8:62:a2:12:7c:de:fc:2a:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hms.airasia.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hms.airasia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hms-internal.apiairasia.com
hms.airasia.com
hms.apiairasia.com

Other certificates including the domain name airasia.com

(limited to 100 certificates)
flights-elasticsearch.airasia.com
iss.airasia.com
stgrps.airasia.com
d.d8u.com
redappmiddleware.airasia.com
acefare.airasia.com
hercules.airasia.com
aimsws.airasia.com
firebaseapp.com
auth.facesvbmobilecloud2-stg.airasia.com
neogbs.airasia.com
firebaseapp.com
flights-apm.airasia.com
incapsula.com
firebaseapp.com
booking11.airasia.com
thvpn.airasia.com
pcissl001.insnw.net
firebaseapp.com
t.airasia.com
support.airasia.com
incapsula.com
firebaseapp.com
tag.airasia.com
pcissl001.insnw.net
firebaseapp.com
extranet.airasia.com
feedback.airasia.com
stgevoucher.airasia.com
redbuzzl2.airasia.com
tour.gateway.airasia.com
redapp-service.airasia.com
uatdotrez.airasia.com
firebaseapp.com
firebaseapp.com
k.airasia.com
skyiq-stg.airasia.com
wifi.airasia.com
firebaseapp.com
stgtaxinvoice.airasia.com
firebaseapp.com
stgaimsapingvj22.airasia.com
holidays.apiairasia.com
aacefb.airasia.com
holidays.apiairasia.com
sd.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
firebaseapp.com
firebaseapp.com
promotion.airasia.com
fahotelbooking.airasia.com
www.twinpeaks.dev
app.airasia.com
www.twinpeaks.dev
storage.services.ota.airasia.com
xtraction.airasia.com
stg-gomchatbotadmin.airasia.com
firebaseapp.com
api.gateway.airasia.com
airasia.com
appdelivery01.airasia.com
wifi.airasia.com
paygate.airasia.com
www.optiontown.com
aimsportal.airasia.com
mimir.search.ota.airasia.com
stgnewmember.airasia.com
firebaseapp.com
mimir.services.ota.airasia.com
museum.airasia.com
stgprebookmeal.airasia.com
hms.airasia.com
firebaseapp.com
firebaseapp.com
app1.ftrans01.com
xpress.airasia.com
throughthelens.airasia.com
bo.facesvbmobilecloud-stg.airasia.com
stg-redwebsocket.airasia.com
api.facesvbmobilecloud.airasia.com
firebaseapp.com
booking2.airasia.com
zodiac.airasia.com
thvpn.airasia.com
redtix.airasia.com
life.airasia.com
firebaseapp.com
life.airasia.com
firebaseapp.com
oms.airasia.com
www.optiontown.com
newsroom.airasia.com
sec-logs.airasia.com
mars.data.airasia.com
d.d8u.com
firebaseapp.com
eps.airasia.com
firebaseapp.com
subscription.airasia.com

Certificate

The complete raw certificate details for hms.airasia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UaIRieQkhCLiAX3ZE9u
6m8kxVgbpkyMLH9u19NPZ1BKt52LkiUnfmbo7MjCAuyy353Mxo0j50vejWHaJTbw
553due62T1GggVt9C/P31/sNx3yjcCzyWLXwLNjHbqVlCDwkETefEAIr8ktYfbwt
QpJKlS9z93eIlUGrwzDctdxJFm3r08XroEL1mP5wmm7up8IZQHLlZNzCqACliv4x
Idra64UJNjVjj04OZ5zDnJCh9KNHEjeyK+bJ61xguein6qJviOAOkYg7X4aFzYzI
dzLOOyAaTWQfjvDLXB9Jrji3SYAvGUwNB+hGmq/bC+NG2qzFsqZl4TNfBJgpYgPo
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388688410604912647173540551536627309909913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 05:17:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 05:17:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hms.airasia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30458212280343153126482360007204948999644192418146773490726608432193334566233844829012313020955111044097413568760366953415138915942251137017279167430738511612358019189582005297481335478792974130678199829005395275408425348247947328287622472442016275274491647890267077868628846503845641578864617001197662700406293451914770708523257989715284517514173324876598855648339011213163758544299578225948219991984509748144341823912433240460325922301982729696703300170958103831383076845051825431738387703249677528851144482272462406833702557571347510225076720431184178295692032738217884920062342077760504848735927171358500667517121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c44dda27a20d33be7868c465118d1bcb815a2aa3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms-internal.apiairasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.airasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.apiairasia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab662ecbd0000040300473045022063a658a1a4bb5ce06f6b2043858189d249b0180bc65202fda42104f13ce62c03022100b453e89c79935b86ca7234505ef61186b1aa2857758926fbf15cbf19191c0df0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ab662ece800000403004730450220604ec6a3ef6fdf087ec2240eb6c4158978d0da7c0112622513b935759da24d6b022100fa8952be2aacc0025d970f3a54798b6591244685a221b7742c5ca058351889a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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