yana-acceptance-client-placeholder.volantio.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:04:b1:bb:7e:68:41:6a:33:8b:ac:04:72:9b:86:30 was issued on by Amazon.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yana-acceptance-client-placeholder.volantio.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:04:b1:bb:7e:68:41:6a:33:8b:ac:04:72:9b:86:30
Serial Number (int): 14645881982355598861172078191039972912
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cb:75:bb:b9:f0:f9:10:1a:95:90:23:b0:f0:10:5b:79:44:63:da:87
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 65:63:b7:03:a6:63:6a:92:71:2c:3a:87:9d:8f:84:aa:90:0c:2c:6f
Fingerprint (sha256): 34:3d:31:e8:91:04:fc:36:e8:f5:ca:67:5a:b6:c9:89:56:fc:f8:bd:82:45:fc:a1:84:b1:6a:8b:78:31:40:3d

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate yana-acceptance-client-placeholder.volantio.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yana-acceptance-client-placeholder.volantio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yana-acceptance-client-placeholder.volantio.com
*.yana.volantio.com
*.v.airvistara.com
*.v.flyscoot.com
*.v.iberiaexpress.com
*.v.spicejet.com
*.v.avianca.com
*.flight.icelandair.is
*.v.alaskaair.com
6evolantio.goindigo.in
voluntaryflightchange.goindigo.in
innolab.vueling.com
*.v.vueling.com
*.v.iberia.com
*.v.volaris.com

Other certificates including the domain name volantio.com

(limited to 100 certificates)
*.v.volaris.com
*.volantio.com
bacon.jumpseat.volantio.com
*.sunexpress.yana.volantio.com
jumpseat-prod-au.volantio.com
*.volantio.com
sandbox-yana.volantio.com
view-online.jumpseat-loadtest.volantio.com
*.us.yana.volantio.com
volantio.com
*.scoot.yana.volantio.com
jumpseat-prod-au-cdn.volantio.com
*.spicejet.yana.volantio.com
volantio.com
*.sunexpress.yana.volantio.com
*.volantio.com
acceptance-client.demo-prime.sandbox.volantio.com
staging.jumpseat.volantio.com
*.yana.volantio.com
jumpseat-prod-au-cdn.volantio.com
jumpseat-sandbox-cdn.volantio.com
*.yana.volantio.com
*.us.yana.volantio.com
*.scoot.yana.volantio.com
*.v.volaris.com
*.uat.yana.volantio.com
cdn.staging.jumpseat.volantio.com
jumpseat-staging-cdn.volantio.com
yana-uat.volantio.com
volantio.com
*.sandbox.yana.volantio.com
production-yana.volantio.com
jumpseat-prod-au-cdn.volantio.com
cdn.sandbox.jumpseat.volantio.com
volantio.com
*.iberia.yana.volantio.com
www.volantio.com
*.uat.yana.volantio.com
*.us.yana.volantio.com
www.volantio.com
*.yana.volantio.com
*.icelandair.yana.volantio.com
*.iberia.yana.volantio.com
acceptance-client.demo-prime.sandbox.volantio.com
*.yana.volantio.com
*.uat.yana.volantio.com
*.uat.yana.volantio.com
jumpseat-prod-au.volantio.com
toolbox.alaska.yana.volantio.com
yana-acceptance-client-placeholder.volantio.com
toolbox.uat.yana.volantio.com
uat-yana.volantio.com
toolbox-alaska.volantio.com
jumpseat-staging-cdn.volantio.com
jumpseat-prod-au.volantio.com
jumpseat-staging.volantio.com
jumpseat-prod-au.volantio.com
jumpseat-sandbox.volantio.com
*.v.volaris.com
*.avianca.yana.volantio.com
*.volantio.com
cdn.staging.jumpseat.volantio.com
uat-yana.volantio.com
yana-disruption-client-sandbox.volantio.com
*.yana.volantio.com
yana-acceptance-client-placeholder.volantio.com
*.sandbox.yana.volantio.com
*.volantio.com
*.yana.volantio.com
*.yana.volantio.com
*.scoot.yana.volantio.com
jumpseat-staging.volantio.com
*.yana.volantio.com
*.yana.volantio.com
jumpseat-staging-cdn.volantio.com
sandbox.jumpseat.volantio.com
jumpseat-prod-au.volantio.com
jumpseat-prod-au.volantio.com
www.volantio.com
*.yana.volantio.com
yana-disruption-client-uat.volantio.com
toolbox.yana.volantio.com
cdn.au.prod.jumpseat.volantio.com
jumpseat-staging.volantio.com
sandbox-yana.volantio.com
acceptance-client.demo-prime.sandbox.volantio.com
*.sunexpress.yana.volantio.com
*.uat.yana.volantio.com
view-online.jumpseat.volantio.com
*.yana.volantio.com
*.yana.volantio.com
*.yana.volantio.com
toolbox.sandbox.yana.volantio.com
jumpseat-loadtest.volantio.com
view-online.jumpseat-loadtest.volantio.com
yana-acceptance-client-placeholder.volantio.com
*.sunexpress.yana.volantio.com
jumpseat-staging.volantio.com
yana-acceptance-client-placeholder.volantio.com
*.volantio.com

Certificate

The complete raw certificate details for yana-acceptance-client-placeholder.volantio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l9iAyX/WZQZF6RgbeKx
hfJpUFcmFVJMowGh2BqhIbKkxa1Dm6U6guOI8ty350jsXogRq2y1x3TIqWJPkAQk
YPqt3DXakD41bccxL/iF4c+nKb31XgNdG4SvjQuuDhy5iniXmDRikkgkdKFemNV5
L1iTyL34UHr6hN2CG1Y/SQhWqBjOpsnthjzaLG6Mfn+fZfeTZ54v0TBGroZUjZlO
yCLXIi4N7FkkKTFFW7ol6SWTTxlHaOiytn+mRN9q7W+YYgVQNKHtqvLo68fsMJmp
oniKC9Fa8VMJgBkm9L5TbEvoYkZDQ7i24u1YO41M3GT6umJXAP/T9UnLRZDt2d2I
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14645881982355598861172078191039972912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yana-acceptance-client-placeholder.volantio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27062032304289412652379899729668290172614724984289607371830565477895590211730743611232422849524400312217582713073148063736411325824807008624326628722026547414506127510543455460306218205541144670557943591027078154011570291774702906624684047793482636031775002177967781764064745435318142831477902447596715979032292143724338598533971363270815645103409093710636182563523609948802797362751084954200827530780006529002580536579953177702942438437029713408225057308285122685686267668414715336751865631528605308563555717039773005717446378419976636089185449935319996874227634948048078335916889151596851604116827285201174998649013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb75bbb9f0f9101a959023b0f0105b794463da87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (343 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yana-acceptance-client-placeholder.volantio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yana.volantio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.airvistara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.flyscoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.iberiaexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.spicejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.avianca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flight.icelandair.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.alaskaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6evolantio.goindigo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voluntaryflightchange.goindigo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innolab.vueling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.vueling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.iberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.volaris.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005aea5b981ab84020d8d44b88216a3edf7200cdeee67eda00355ad270b651958aba9303ba87f0e1e3c5a627b5a86d9bd17b38ae4b0c8a638c0b994b9381d0752954ef7d7e55723ef02a864aed791887ac6ed9593d8820df91773ab9a41e04e920e809b20f5b0ef01142ac306683f13f5ec244ec1abf088b21cbb0bfd542d27f2d9d28a27540fce79d198e79e617e3b6797b286d739d0af8bebd67524b9eacb01759d19ee6dc743e2f20122b8e92f58d9215687d3d4b8bc07054bb2924ca2dc1f314ba0d375e2a657d2417754d5895d2a87c2525e89b1ea27703b7f543887f2833de598cacd8dc2820403381d1b3b2c2d807ed6e4f4366830fc17b3c28a8c01708