*.cebupacificair.com

- Cebu Air, Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 49:07:40:a4:64:12:7a:2b:84:60:fa:97 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cebu Air, Inc.

Organization: Cebu Air, Inc.
State / Province: Metro Manila
Locality: Pasay
Country: PH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 49:07:40:a4:64:12:7a:2b:84:60:fa:97
Serial Number (int): 22601173461627384447488817815
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b6:eb:ca:99:1a:f5:03:3f:ea:9b:ab:30:f7:55:96:38:a9:c5:a0:27
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 8c:99:24:5c:71:49:38:2c:e0:b2:f0:54:ee:b6:94:26:88:0f:43:d2
Fingerprint (sha256): 2c:1d:72:ac:fb:c6:fb:f8:3f:f5:9d:46:6f:61:c9:f3:e5:bc:a2:6c:2c:b5:6c:c0:45:ed:82:20:69:57:0b:22

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.cebupacificair.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cebupacificair.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cebupacificair.com
cebupacificair.com

Other certificates including the domain name cebupacificair.com

(limited to 100 certificates)
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
book.cebupacificair.com
*.cebupacificair.com
facilities.nchmd.org
cebhelpdeskportal.cebupacificair.com
partners.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
soar.cebupacificair.com
*.cebupacificair.com
tickets.dtradebox.com
itdesk.tropicknitsindia.com
*.cebupacificair.com
ecrew.cebupacificair.com
facilities.nchmd.org
cebupacificair.com
learning.cebupacificair.com
*.cebupacificair.com
tickets.dtradebox.com
*.cebupacificair.com
waytogo.cebupacificair.com
cebupacificair.com
groups.cebupacificair.com
cebupacificair.com
*.cebupacificair.com
*.sap.cebupacificair.com
groups.cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
itdesk.tropicknitsindia.com
*.cebupacificair.com
funtours.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
cebupacificair.com
tickets.dtradebox.com
*.cebupacificair.com
cebupacificair.com
*.cebupacificair.com
connect.cebupacificair.com
www.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
test-groups.cebupacificair.com
*.cebupacificair.com
book.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
cebgoreceipt.cebupacificair.com
checkin.cebupacificair.com
deal-broker.com
book.cebupacificair.com
*.cebupacificair.com
ent-soar-tp.cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
deal-broker.com
cebupacificair.com
baggageservice.cebupacificair.com
helpdesk.elrey.com.co
book.cebupacificair.com
*.cebupacificair.com
5jwebapps.cebupacificair.com
*.cebupacificair.com
www.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
documents.cebupacificair.com
*.cebupacificair.com
cebupacificair.com
waytogo.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
*.cebupacificair.com
itdesk.tropicknitsindia.com
mobile-api.cebupacificair.com
secured.cebupacificair.com
groups.cebupacificair.com
*.sap.cebupacificair.com
test-groups.cebupacificair.com
helpdesk.dalycity.org
*.cebupacificair.com
*.cebupacificair.com
ekp.cebupacificair.com
*.cebupacificair.com
waytogo.cebupacificair.com
waytogo.cebupacificair.com
cebupacificair.com

Certificate

The complete raw certificate details for *.cebupacificair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUG4vILIPDoIM6FSBxc1
i8eSvdersgmOWU91te/jGwYFZGeQAb2GiDPUA6Pj9BsROT8IN6ST8xDx62U60gpf
zC80f1ZoiTfgpszUz7hWVplGm/cAdxycHXMphiOJPZj8ANrq0FdswT3NwqGIhHMg
bKQNlLM+LauE0nJ3JEedMxk3LSYzGE6zydoy8yRe+HXCKkaWUhskl48wk601amus
L7pAVziGmWyywlL7yY3p/TH6IYOwVOUED0uK8l3o0cGIUF75mmLQcsrczpbeWzeS
VDtkdmwF72wCilgZv9muoLdUNIvxAUGNO60mGX6svM8pNLyxut/O8f1Xys+IweeT
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22601173461627384447488817815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 01:36:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-19 09:16:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Metro Manila'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pasay'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cebu Air, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cebupacificair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25911261059926211053914764913260542427457184325919135525154992648810844211369456112562769202526526016842281123963297097427480952404135567501060366496847679865308716653906651237739976744705719167941798096992138849147982881169820233653460029077343600568221937011278493555767748711987529444182666601242793984133175909522561414507695325335328308653185374166840384571321942366216089896477753066724046243284354153296208269211633956920468004870770718398963204477555097924539852595712244410693955520987732821710297322232992132309733813429419059713055554786453147206026947481555541630802349571633007526028408724701652594430881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cebupacificair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cebupacificair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6ebca991af5033fea9bab30f7559638a9c5a027
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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