*.cebupacificair.com

- Cebu Air, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 14:29:78:68:dd:cf:00:c5:3b:f9:c7:a9 was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cebu Air, Inc.

Organization: Cebu Air, Inc.
State / Province: Metro Manila
Locality: Pasay
Country: PH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 14:29:78:68:dd:cf:00:c5:3b:f9:c7:a9
Serial Number (int): 6239834773453423643553548201
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: a3:d3:ac:83:5c:4f:8d:23:d3:b4:b4:2b:a9:cc:fb:d0:ef:aa:a4:22
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): fe:8b:19:f2:c7:4e:d8:97:49:53:05:fe:bc:05:5c:06:8f:8a:e6:03
Fingerprint (sha256): 25:81:50:19:5b:24:37:be:86:fc:e5:cb:e1:f0:a6:fb:26:2b:ca:af:ac:4c:5b:85:ae:6b:d2:a9:90:88:6a:bc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2

Check the revocation status for certificate *.cebupacificair.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cebupacificair.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cebupacificair.com
www.cebupacificair.com
cebupacificair.com

Other certificates including the domain name cebupacificair.com

(limited to 100 certificates)
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
book.cebupacificair.com
*.cebupacificair.com
facilities.nchmd.org
cebhelpdeskportal.cebupacificair.com
partners.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
soar.cebupacificair.com
*.cebupacificair.com
tickets.dtradebox.com
itdesk.tropicknitsindia.com
*.cebupacificair.com
ecrew.cebupacificair.com
facilities.nchmd.org
cebupacificair.com
learning.cebupacificair.com
*.cebupacificair.com
tickets.dtradebox.com
*.cebupacificair.com
waytogo.cebupacificair.com
cebupacificair.com
groups.cebupacificair.com
cebupacificair.com
*.cebupacificair.com
*.sap.cebupacificair.com
groups.cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
itdesk.tropicknitsindia.com
*.cebupacificair.com
funtours.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
cebupacificair.com
tickets.dtradebox.com
*.cebupacificair.com
cebupacificair.com
*.cebupacificair.com
connect.cebupacificair.com
www.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
test-groups.cebupacificair.com
*.cebupacificair.com
book.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
cebgoreceipt.cebupacificair.com
checkin.cebupacificair.com
deal-broker.com
book.cebupacificair.com
*.cebupacificair.com
ent-soar-tp.cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
deal-broker.com
cebupacificair.com
baggageservice.cebupacificair.com
helpdesk.elrey.com.co
book.cebupacificair.com
*.cebupacificair.com
5jwebapps.cebupacificair.com
*.cebupacificair.com
www.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
documents.cebupacificair.com
*.cebupacificair.com
cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
itdesk.tropicknitsindia.com
mobile-api.cebupacificair.com
secured.cebupacificair.com
groups.cebupacificair.com
*.sap.cebupacificair.com
test-groups.cebupacificair.com
helpdesk.dalycity.org
*.cebupacificair.com
*.cebupacificair.com
ekp.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
waytogo.cebupacificair.com
cebupacificair.com

Certificate

The complete raw certificate details for *.cebupacificair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uIbBqqq1BEj70VBI7f5
CCEjUiaGLHo1kjdh+OPlTxHhIY2wf5In04N5yUoSSSqIIidLFpy76ZTFM0KsJym2
GK9WClhK+PSit6FEVUKAfYLmBFA2X+D8j2qgOU04wfzAePdKekFxkRAWAeL0Ww5H
yJTxBXZNGWKdSPv1dkGYdlfHmBVI6E+gQBph+DcLe9qLdSAhgX5v9+vIe/vvmM/o
UbNBxqMEXom9/2NAFZErLG7VtQH92j6cEiG+aKgUqmEva8SOn3qe4F0VWTDHXXOw
o5rZTKttu31GKRhElS6y82eqaJ+1Lu5Wc9xXW82XLg0r7L9fXkY+GQIs8RFBXuPi
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6239834773453423643553548201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-03 01:02:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 09:16:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Metro Manila'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pasay'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cebu Air, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cebupacificair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27631447294945253631675212963520003520640808038854470054309661438229531704162601996804995910138639229132331987684589064954800117255016923501232333535556669698572295723535935014374211527589652163848669760808076118713400057459720645299575992447856697020253346117726699040523633360530840667091928390808503940455973738823285044396956329315295053438009303244728727821915216659051468338109688809505057343519556433177406131464432921493915849324359063419264755872707948894015506680598709442388505954765318593013634811928524664364291521331935047745672432589885804189291242727662722193868290183503583041612502116910667810464283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cebupacificair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cebupacificair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cebupacificair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3d3ac835c4f8d23d3b4b42ba9ccfbd0efaaa422
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001645da9293b0000040300473045022100e82801f6015a6ffb1d62d46d78232db144acabde0cf36a9abb55717ce2f3d45d0220257315c0a6732fde2d1c07a9ee410ae4f70260d10ef17b882bc98978fd680dc9007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001645da92a8e000004030046304402207807c21d8a337f6e4ec3e164747aa519f089ff11fef07fdc6238874c6b5b35d6022036b765f4b0f415a69ce8a22e2c8c8e56de158d9eb8c633bc373ba273844f29be0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001645da929e600000403004630440220663dbdc38aebd9bc27851cd9a7b2a51ea07cb39b13cb835ac483b0a00b16b65a02201ce3e1e0c5e19744de7442c58e82ff0e1c740b0d855df14d59b339a8b4b79cf0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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