account.flightcentre.com.au

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 09:72:12:f5:2e:22:b8:6a:80:e6:19:6d:bd:13:14:79 was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=account.flightcentre.com.au

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:72:12:f5:2e:22:b8:6a:80:e6:19:6d:bd:13:14:79
Serial Number (int): 12555358312488179740341711214669403257
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:f8:12:ea:35:75:17:de:80:fb:11:53:58:f0:43:09:80:ce:45:f2
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): a6:b8:e3:a3:88:0a:07:78:28:e6:97:5a:a3:65:06:2a:16:2e:f4:6c
Fingerprint (sha256): 25:f2:27:35:22:bf:28:fa:27:49:d1:b0:98:ae:05:00:d3:95:96:89:62:12:4e:77:55:75:45:9b:f9:c7:0c:cb

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate account.flightcentre.com.au

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for account.flightcentre.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.flightcentre.com.au
account-api.flightcentre.com
account.flightcentre.co.nz
profile-api.flightcentre.co.za
account-sdk.flightcentre.co.uk
account.flightcentre.co.za
account-sdk.flightcentre.ca
profile-api.flightcentre.ca
profile-api.flightcentre.co.uk
account.flightcentre.ca
account-sdk.flightcentre.com.au
profile-api.flightcentre.co.nz
account-sdk.flightcentre.co.za
profile-api.flightcentre.com.au
account-sdk.flightcentre.co.nz
account.flightcentre.co.uk

Other certificates including the domain name flightcentre.com.au

(limited to 100 certificates)
customer.stg.eca.fcl.cloud
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
redirect.aws.fclweb.net
acquiastage.flightcentre.com.au
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
cruises.flightcentre.com.au
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiatestau.flitech.net
acquiadev.flitech.net
alerts.flightcentre.com.au
www.studentflights.com.au
acquiadev.flightcentre.com.au
flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
stg-packages.flightcentre.com.au
acquiastage.flightcentre.com.au
acquiaprod.flitech.net
dev-account.flightcentre.com.au
www.studentflights.com.au
acquiadev.flitech.net
acquiaprod.flitech.net
acquiatestau.flitech.net
partner.flightcentre.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
acquiatest.4dconsulting.com.au
acquiaprod.flitech.net
www.studentflights.com.au
flightcentre.com.hk
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.studentflights.com.au
www.studentflights.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
pages.travel.flightcentre.com.au
acquiatestau.flitech.net
stg-account.flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
acquiadev.flitech.net
giftcards.flightcentre.com.au
giftcards.flightcentre.com.au
*.flightcentre.com.au
redirect.aws.fclweb.net
acquiadev.4dconsulting.com.au
www.cievents.com.au
www.studentflights.com.au
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
flightcentre.com.hk
www.studentflights.com.au
acquiatestau.flitech.net
account.flightcentre.com.au
www.flightcentre.com
acquiatest.flitech.net
akamai-san60.exacttarget.com
giftcards.flightcentre.com.au
prod.31.slot.cdn.salesforce-communities.com
giftcards.flightcentre.com.au
redirect.aws.fclweb.net
flightcentre.com.hk
acquiatest.4dconsulting.com.au
redirect.aws.fclweb.net
alerts.flightcentre.com.au
redirect.aws.fclweb.net
acquiatest.flitech.net
www.studentflights.com.au
redirect.aws.fclweb.net
www.studentflights.com.au
acquiaprod.flitech.net
www.studentflights.com.au
www.studentflights.com.au
click.travel.flightcentre.com.au

Certificate

The complete raw certificate details for account.flightcentre.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P1lIpikfv+0XD9NYSVH
ikipAufISMRygOzkFDnIOWScmoxbPj7a0wsO2LbP7ogry6XByzGWaIjZxeENOoYZ
wr5v4DjmsYpOEDRJvoA8yR6Lw7q4jY4QzNHE11rt34jdDn8YpN2sKt7RGjccwgNH
f/dRoKcss/o+jxYN/r7qTdEXbe6X+c//2K4fntcC4E/GO+WzoFsOs7P3FsMdBx3g
8IIXIp4i4s/KOhaGziAkcpd51LkLKHB3LkVZGkloFtEy6xhG7npRnZhcswhQFh4G
nW9eVsASgM/7v9Ef2euZYl20iEcNNf0ugiUWt3Ba/k6S64Jq2JWHwXS86FLIbNu1
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12555358312488179740341711214669403257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'account.flightcentre.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26887474413560270588862183541031665039686581107656157060499635078672061494450759629254158991109049598819472509763645388302368802117220049708005594188969896136606834120662933836783820900415414370743334995601075652188213037202408352239854750057006443268751351716370851830290401919399719785715591362971221089487897252335629051427652815393123508091678743590607463282971646903149207785835656103664022232980074030411588653318826706069981471144001717278573927176755532582548230705669521432744040483039488219775889886437053474671420091476728640709871208036098334866897159869717868628388443121772422014424679154717050632123843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13f812ea357517de80fb115358f0430980ce45f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-api.flightcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile-api.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-sdk.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-sdk.flightcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile-api.flightcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile-api.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.flightcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-sdk.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile-api.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-sdk.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile-api.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-sdk.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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