www.spicejet.com

- SpiceJet Ltd. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:3b:d2:4e:39:41:f9:21:56:0f:69:65:fc:79:6a:91 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SpiceJet Ltd.

Organization: SpiceJet Ltd.
State / Province: Haryana
Locality: Gurgaou
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:3b:d2:4e:39:41:f9:21:56:0f:69:65:fc:79:6a:91
Serial Number (int): 18919802959176222236433659232949725841
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8c:5e:d0:95:be:dc:d4:04:eb:a2:a7:08:51:7c:3b:41:12:9f:37:b2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d9:6a:90:05:b4:a2:94:98:2e:dd:a7:6a:5c:c5:b2:72:9d:2b:07:58
Fingerprint (sha256): 28:59:70:0c:2b:90:c0:a4:ec:c7:e2:74:e0:64:0c:01:a8:c1:7d:1f:2c:91:51:e9:af:1f:6b:b1:1e:f7:36:81

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.spicejet.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.spicejet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.spicejet.com
spicejet.com
test-book.spicejet.com
book.spicejet.com
test-www.spicejet.com
m.spicejet.com

Other certificates including the domain name spicejet.com

(limited to 100 certificates)
ssl375303.cloudflaressl.com
junglebook.langoor.com
ssl375304.cloudflaressl.com
track.spicejet.com
ssl375303.cloudflaressl.com
ssl375304.cloudflaressl.com
hr.spicejet.com
staging.cms.spicejet.com
junglebook.langoor.com
track.spicejet.com
www.spicejet.com
groups.spicejet.com
track.spicejet.com
mobileapi.spicejet.com
ssl375302.cloudflaressl.com
ssl375302.cloudflaressl.com
track.spicejet.com
ess.spicejet.com
track.spicejet.com
sni.cloudflaressl.com
blog.spicejet.com
track.spicejet.com
junglebook.langoor.com
people.marketingbroker.com.au
track.spicejet.com
track.spicejet.com
www.spicejet.com
sni.cloudflaressl.com
junglebook.langoor.com
ssl375302.cloudflaressl.com
track.spicejet.com
blog.spicejet.com
ssl375302.cloudflaressl.com
ssl375303.cloudflaressl.com
track.spicejet.com
track.spicejet.com
hrportal.prconsulting.net
book.spicejet.com
junglebook.langoor.com
staging.cms.spicejet.com
turmeric.spicejet.com
book2.spicejet.com
track.spicejet.com
ssl375302.cloudflaressl.com
ssl375304.cloudflaressl.com
blog.spicejet.com
junglebook.langoor.com
ssl375303.cloudflaressl.com
ssl375302.cloudflaressl.com
junglebook.langoor.com
junglebook.langoor.com
ssl375304.cloudflaressl.com
m.spicejet.com
ssl375303.cloudflaressl.com
hr.spicejet.com
*.spicejet.com
ssl375304.cloudflaressl.com
sme.spicejet.com
track.spicejet.com
ssl375304.cloudflaressl.com
track.spicejet.com
junglebook.langoor.com
ssl375302.cloudflaressl.com
ssl375302.cloudflaressl.com
agentplus.spicejet.com
track.spicejet.com
junglebook.langoor.com
cms.spicejet.com
employee.fxview.com
ssl375302.cloudflaressl.com
ssl375303.cloudflaressl.com
ssl375302.cloudflaressl.com
groups.spicejet.com
track.spicejet.com
mobileapi.spicejet.com
book.spicejet.com
www.spicejet.com
blog.spicejet.com
junglebook.langoor.com
www.spicejet.com
book.spicejet.com
staging.cms.spicejet.com
track.spicejet.com
track.spicejet.com
zoho.liftscbc.com
track.spicejet.com
mobileapi.spicejet.com
ssl375302.cloudflaressl.com
gitlab.spicejet.com
junglebook.langoor.com
*.spicejet.com
*.yana.volantio.com
junglebook.langoor.com
blog.spicejet.com
track.spicejet.com
ssl375302.cloudflaressl.com
hrportal.prconsulting.net
*.spicejet.com
humanresources.rayhillmedia.com
book.spicejet.com

Certificate

The complete raw certificate details for www.spicejet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CTcSv0OOe1AM0CCr9GW
mwjFFjwWAEhTvi5Dhdgw2GAU7n3NmzsHs+r0ceYuVjPLgU25xfDKcV4vlUSXreoD
kGlZYEw+8bvtrjp/jc8wBP+e8oxMDKULvGuIEDOjqVQMDVwtsg1EGWuAbGVgEm5B
lPRepIPOCpYcMQxO3iRs76z5xFJvF/fHxH086psjW3lD418lPdLe9GGOgJJh5o+8
Ld3mSWg53O6P+JTQIHrzJx/nO8Bs5nDAGBtLVHTDZJwNwwH0o1c2OILkKhYjn0Dy
fobtNZxXgN88TbyQ7mGDTHsMFM2Ul6e8qTGCCGEzvYjhm0Cl1Xk98Vm/8Lee/M5X
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18919802959176222236433659232949725841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Haryana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gurgaou'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SpiceJet Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.spicejet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26780697252289694800570685316070053542308350111875794431537871839152675789631370262208679607131197032143920984772300868519612015188534994408668996695618953367623745508176907753465286878959501709701051234911911580289390138040430176025049789032010784914448727646392932496692365416019801340001500974459345047907425780748086043242098321090064492463617774305048188797699978596421138294456267512509688326951565601637553703600665194246417628999260675002358301567319589045376604266970498684963801249485175317780973262418164555309102198970393997928655456861266515663721873394591800096891119787945092729641935231105305750165377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c5ed095bedcd404eba2a708517c3b41129f37b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spicejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-book.spicejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.spicejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.spicejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.spicejet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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