www.flyingblue.com

- SOCIETE AIR FRANCE -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 4b:cc:8a:02:30:9c:30:a4:62:73:a5:8e:7e:1a:49:1a was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SOCIETE AIR FRANCE

Organization: SOCIETE AIR FRANCE
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:cc:8a:02:30:9c:30:a4:62:73:a5:8e:7e:1a:49:1a
Serial Number (int): 100754127389035526868288777830790744346
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 64:09:39:ab:59:36:b2:c6:07:eb:a2:0d:2c:7e:d5:f2:d0:63:24:57
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 40:c1:45:49:98:45:d8:32:b1:54:9a:59:d5:53:de:eb:b1:03:dc:e5
Fingerprint (sha256): 39:1e:db:0e:13:0e:fa:b1:92:60:db:42:0b:c2:b4:06:7e:e3:9b:2b:51:2a:17:9b:c4:fa:2a:6c:66:69:15:02

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.flyingblue.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.flyingblue.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.flyingblue.com
flyingblue.com

Other certificates including the domain name flyingblue.com

(limited to 100 certificates)
events-uat.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
explorefurther.flyingblue.com
link-shopformiles.flyingblue.com
san1.klmonline.com
www.klm.com
earnonline.flyingblue.com
www.flyingblue.com
shopformiles.flyingblue.com
events-uat.flyingblue.com
static-shopandmiles.flyingblue.com
san-17-s51.tlsprovisioning.exacttarget.com
san-8-s10.tlsprovisioning.exacttarget.com
guide.flyingblue.com
static-shopandmiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
klm.com
guide.flyingblue.com
san1.klmonline.com
shopformiles.flyingblue.com
san1.klmonline.com
guide.flyingblue.com
san1.klmonline.com
events.flyingblue.com
mcprod.reward4d.com
mcprod.reward4d.com
flyingblue.com
ui.uat.lifestylesolutionsteam.com
shopformiles.flyingblue.com
mcprod.reward4d.com
mcprod.reward4d.com
shopformiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
san1.klmonline.com
*.rewardsmap.flyingblue.com
events.flyingblue.com
shopformiles.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
events-uat.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
shapedbytravel.flyingblue.com
www.klm.com
shopandmiles.flyingblue.com
brix.flyingblue.com
*.rewardsmap.flyingblue.com
shopandmiles.flyingblue.com
beta.flyingblue.com
mcprod.reward4d.com
static-shopandmiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
static-shopandmiles.flyingblue.com
events.flyingblue.com
shopformiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
events.flyingblue.com
mcprod.reward4d.com
brix.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
points-storefront.flyingblue.com
static-shopandmiles.flyingblue.com
points-storefront.flyingblue.com
levelcheck.flyingblue.com
www.flyingblue.us
mcprod.reward4d.com
san-8-s10.tlsprovisioning.exacttarget.com
events.flyingblue.com
cloud.shoponline.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
earnonline.flyingblue.com
ui.uat.lifestylesolutionsteam.com
san-8-s10.tlsprovisioning.exacttarget.com
shopformiles.flyingblue.com
mcprod.reward4d.com
san-8-s10.tlsprovisioning.exacttarget.com
mcprod.reward4d.com
airfrance.com
www.flyingblue.com
shopformiles.flyingblue.com
san1.klmonline.com
mcprod.reward4d.com
shopformiles.flyingblue.com
www.klm.com
cdn-test.klm.com
www.flyingblue.com
static-shopandmiles.flyingblue.com
*.rewardsmap.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
click.shoponline.flyingblue.com
link-shopformiles.flyingblue.com
hotelsformiles.flyingblue.com
shopandmiles.flyingblue.com
beta.flyingblue.com
klm.com
events.flyingblue.com
events.flyingblue.com
www.flyingblue.us

Certificate

The complete raw certificate details for www.flyingblue.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlisvxaiLs5XbNFly7ViA
RumGN1O/YGhuL0iS/U/4ezVVM/8hxImFjdavWGsrhI470GEwDUE3NeWXHNdrju8I
olaqXihIvoPK9j1BQFlToC6U6qkaWKvAfvqbFsNpgjuVzJfMMNWbNpZTkcBbWagM
LyN9yPb9ayRiuOGuB9ttT2utPP+53eth6H5hMt+viklJJnSFOcvIiUzh1tQj+NCB
nwCTm8SCBVoAVIWPAmIz4qahQFaOGPRzTV45BU+J3Xa1CsiHqiZ231TZnYkxTroH
O1BjRHXo3DtcABQMDwlAeWAo8yCshFm6YFg3HZYjzNWGUzbvVbCt9WZxm72wWBOO
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100754127389035526868288777830790744346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOCIETE AIR FRANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.flyingblue.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18957041855907030966412580457859893870878609369416501022603437709430420948483291098775576500443686104345915364190262444668861565336253064812087988076290704523078567507862840414735858156483368846714498155302546005434687520687422718104229242557270461077234819411320517801138541029424167029080059046498569668797603604266286565063444692144797018986796602631700254872297886145764948395964010076551689176161540562693259394811535109552415416608558416897115670381629910523464649185514160084223571379561860798255876820821489708608899252967436130813803597197491946803402402185248385263562729701190401056231342323015568445378159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							640939ab5936b2c607eba20d2c7ed5f2d0632457
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyingblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingblue.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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