click.travel.flightcentre.com.au

- SALESFORCE.COM, INC. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:84:5d:fe:2d:4f:21:23:a0:43:98:f0:c7:64:a6:0c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:84:5d:fe:2d:4f:21:23:a0:43:98:f0:c7:64:a6:0c
Serial Number (int): 17967253532599408900194996258590729740
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0f:df:4e:13:11:10:fd:59:a1:69:93:a0:a0:55:04:e5:84:9c:34:fc
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a8:50:3d:e8:31:6f:1f:ce:9a:c4:59:d8:04:40:cf:28:07:71:e0:cf
Fingerprint (sha256): 2e:58:1a:b8:d9:01:ea:bf:c8:47:8a:93:c7:5f:40:dd:1a:ed:ad:1f:07:6b:82:5f:b7:0b:3a:fc:8c:7c:4e:13

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate click.travel.flightcentre.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for click.travel.flightcentre.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

click.travel.flightcentre.com.au

Other certificates including the domain name flightcentre.com.au

(limited to 100 certificates)
customer.stg.eca.fcl.cloud
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
redirect.aws.fclweb.net
acquiastage.flightcentre.com.au
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
cruises.flightcentre.com.au
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiatestau.flitech.net
acquiadev.flitech.net
alerts.flightcentre.com.au
www.studentflights.com.au
acquiadev.flightcentre.com.au
flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
stg-packages.flightcentre.com.au
acquiastage.flightcentre.com.au
acquiaprod.flitech.net
dev-account.flightcentre.com.au
www.studentflights.com.au
acquiadev.flitech.net
acquiaprod.flitech.net
acquiatestau.flitech.net
partner.flightcentre.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
acquiatest.4dconsulting.com.au
acquiaprod.flitech.net
www.studentflights.com.au
flightcentre.com.hk
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.studentflights.com.au
www.studentflights.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
pages.travel.flightcentre.com.au
acquiatestau.flitech.net
stg-account.flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
acquiadev.flitech.net
giftcards.flightcentre.com.au
giftcards.flightcentre.com.au
*.flightcentre.com.au
redirect.aws.fclweb.net
acquiadev.4dconsulting.com.au
www.cievents.com.au
www.studentflights.com.au
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
flightcentre.com.hk
www.studentflights.com.au
acquiatestau.flitech.net
account.flightcentre.com.au
www.flightcentre.com
acquiatest.flitech.net
akamai-san60.exacttarget.com
giftcards.flightcentre.com.au
prod.31.slot.cdn.salesforce-communities.com
giftcards.flightcentre.com.au
redirect.aws.fclweb.net
flightcentre.com.hk
acquiatest.4dconsulting.com.au
redirect.aws.fclweb.net
alerts.flightcentre.com.au
redirect.aws.fclweb.net
acquiatest.flitech.net
www.studentflights.com.au
redirect.aws.fclweb.net
www.studentflights.com.au
acquiaprod.flitech.net
www.studentflights.com.au
www.studentflights.com.au
click.travel.flightcentre.com.au

Certificate

The complete raw certificate details for click.travel.flightcentre.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6YP39OxirV7f0J2EiAR
vhw1ZceT0tFqEkwf7jC6gcNgC2kGPYu3S3t8LIERzH+fvP2mHb2VDII2fr85Pxim
pLSCZI1StAbHlxQa5pGp8xQnhVaW23aMvwcSmmkXKqn5qiGJkC3xwL5hgVVA658t
m9Y7RNifEkuHR0/wPExlyXz4I+zB0dVR/0TbjUJvKPSCUXfiRjd8aQ8HzmCKPgEl
DNqb9f75dxQQ7e6yYEtUe/IsT4ecPWOQux8UDt8udnEZJXWk/BHRCQYsR7NeJym2
7r/OZg+BwPNULjh0BQI2TiFjbsN01U37XyP1BCCaUDXIglbcf0+/6Jd036DtoJwN
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17967253532599408900194996258590729740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'click.travel.flightcentre.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21163685158024171086990648649040478688661139243546304958921586193425062067425826703892213167810965712903621524674008792511140217111326211905223887460347413238090444211421249087840125716132522319814461961724277982080647895084414163646168811980437081480566941909509602281885491307541200051952697666092470295966781000681565546330435083123240063467548286957271375387872689680334068563952210710587286404049490314346602043334932447803327677939318525035289136290437234224711066669045661473957867197395110572194233482665083656132375009059120759533078780254682833863011757811581974955144588666854316237982425163229402431753657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fdf4e131110fd59a16993a0a05504e5849c34fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.travel.flightcentre.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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