acquiatest.flitech.net

Issued by R3

About this certificate

This digital certificate with serial number 04:9f:3d:b9:9a:dc:72:eb:9a:f7:0b:5d:8d:9b:6c:b5:98:c0 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acquiatest.flitech.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9f:3d:b9:9a:dc:72:eb:9a:f7:0b:5d:8d:9b:6c:b5:98:c0
Serial Number (int): 402636086691088751924514816412964405745856
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 16:bf:ee:39:56:49:b2:5f:f2:27:66:50:18:f5:ed:2f:bd:f3:b3:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b7:77:00:63:ea:7b:fb:70:66:ad:27:61:ad:f0:20:52:5d:13:0e:86
Fingerprint (sha256): 22:31:ba:bc:95:34:ef:5b:f7:cf:ef:3e:7d:64:41:3d:45:3f:d6:54:44:e6:f9:8f:55:8c:d8:21:f6:43:0f:3b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate acquiatest.flitech.net

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquiatest.flitech.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.acquia.fcl.cloud
acquiatest.fcfoundation.org.au
acquiatest.flightcentre.com.au
acquiatest.flitech.net
acquiatest.travelassociates.com
acquiatest.travelmoney.co.nz
acquiatest.travelmoneyoz.com
acquiatest.v0.flightcentre.co.nz
acquiatest.v0.travel-associates.com.au
acquiatest.v0.travelmoneyoz.com
acquiatest.v1.flightcentre.co.nz
acquiatest.v1.travel-associates.com.au
acquiatest.v1.travelmoneyoz.com

Other certificates including the domain name flitech.net

(limited to 100 certificates)
acquiaprod.flitech.net
redirect.aws.fclweb.net
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
receiptgate-global-stage.au.flitech.net
profilegate.au.flitech.net
acquiaprod.flitech.net
*.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiadev.flitech.net
hrauinfo.au.flitech.net
acquiaprod.flitech.net
acquiaprod.flitech.net
acquiadev.flitech.net
graham.au.flitech.net
acquiaprod.flitech.net
api-customerprofile-uat.au.flitech.net
receiptgate-global.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
*.nz.flitech.net
engineering.flitech.net
api-sabre-tst.au.flitech.net
acquiaprod.flitech.net
jira.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
au.cruise.flitech.net
redirect.aws.fclweb.net
travellerlocator.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
portal.au.flitech.net
redirect.aws.fclweb.net
acquiaprod.flitech.net
profilegate-stg.au.flitech.net
redirect.aws.fclweb.net
graham.au.flitech.net
acquiatestau.flitech.net
prd-esb-sabre-notification-gateway.au.flitech.net
acquiaprod.flitech.net
approveplus.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
*.nz.flitech.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
internal-api-tst.au.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
receiptgate-global.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
splunk-hf-elb-aws.au.flitech.net
redirect.aws.fclweb.net
ece.au.flitech.net
acquiatest.flitech.net
acquiaprod.flitech.net
corp-invoice-printer-stg.au.flitech.net
*.nz.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
internal-api-tst.au.flitech.net
receiptgate-global.au.flitech.net
engineering.flitech.net
acquiastagecf.flitech.net
crystal.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
jira.au.flitech.net
confluence.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
engineering.flitech.net
redirect.aws.fclweb.net
fx.au.flitech.net
ece.au.flitech.net
acquiatestau.flitech.net
engineering.flitech.net
api-external.au.flitech.net

Certificate

The complete raw certificate details for acquiatest.flitech.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRyn0fJSotu9huQKrtbs
oI54ujoJmH3y/Mf3KeFMXAfCLsLwn0CdjUekLFmm28rwkVmRXZN4FpXJswyT4KK+
samOaj5pPLyolaz7GmwWLpkmNzSXFeRgbIA3j+OlRAu0gPpgCt/4rc+dlzhSJrVu
MBnYR1QPg90r7+6/ln6ITI9nX1PYq9A6K2UQ1mYqga58MpuBWplTEelkl+npxTIf
otytTkPg7j3ktsZbMJmDUQeo7GndnaqdxfCRkVzKWVV1uFXKA8Il+geSRXMWn6QW
2Sbn0G+d9TkXG3xFsBeefMQL/uk/+tGD6NdwLeobCZdWpUP8jQqNLtWxMNexflBd
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402636086691088751924514816412964405745856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-11 04:43:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-11 04:43:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquiatest.flitech.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24378123435467135719606529703768436770455790649851371302517084732571341463100245467721014259348724277453218413012789170303838194896706739173988900007108555942978117797743174404755660126189720173002421658249906257179931036820988226587073842058808193426454483791076263482436479680726690839009739985945758609590093294627644663901357650601593192531786463902890209367914435760762200227770479468528375615321049996702575878929724771955119623583535519427606389687546756722880086952924650791780777688559880918537387903300487379401645556413871769572059675858009764480886630877216016116084134977400052852310743913931528903613909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16bfee395649b25ff227665018f5ed2fbdf3b332
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (424 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.acquia.fcl.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fcfoundation.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flitech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoney.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v0.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v0.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v0.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v1.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v1.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v1.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030722e1bc945af0c116975b426ee6e6e5d11c6476b88eee50b59f8095786f5532555a7ca96b62c215dede0a768a5f7bcda8b973927fcee7193ab456b767b4f3ad98caf3e476b3791ef3b8062748817289be12d46943f07c95958df92fea6bfa3c5a9f4177be67b1b747e95e3f2d0597f824451e066b5d535a2a01162962e496d1ee0c92382dfccdebdd378f8e626a9279cec50060ea5ca4cfb073bdcc323d208492ee517874fc584bee58e39d3f5456fb2b7ba2b816071ef12fd411c6d89499245197f9534d7c949359db4b3214ba1f15e2261091e3cc772a999a86b4f143f7616fdd5a00a0535b756faeaaae8988305dc6827036efccb858cbb626758d9533c