www.fly.travel

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:ed:e2:a6:49:52:33:f6:94:20:3d:3c:d8:11:3e:6e:45 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fly.travel

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:ed:e2:a6:49:52:33:f6:94:20:3d:3c:d8:11:3e:6e:45
Serial Number (int): 320862193506304177175596464016201493671493
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:cd:6d:d4:bc:14:bd:89:24:d9:55:2f:07:76:45:e5:e2:93:b2:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:ec:29:90:25:27:c1:7e:7b:b8:b2:ae:b2:08:54:cb:ae:a0:f6:fd
Fingerprint (sha256): 43:5c:4d:da:cb:cb:e0:8a:91:69:35:b8:01:b4:01:2c:88:2e:11:29:69:ac:fc:1a:cc:dd:1a:d7:b6:0f:96:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fly.travel

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fly.travel

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fly.travel

Other certificates including the domain name fly.travel

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fly.travel in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320862193506304177175596464016201493671493
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 21:42:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 21:42:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fly.travel'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 652857428982248659436600163196571837684680193006837098968283088688218089374751917743050760978855633090969724959026432089386184959917450128925724044877404791096654410620413664260613457853884814600852755189713624424477797342726326295188679097937034264243571127245522501522080073007231037263044187692037247063122980971674566029025557067637191617211237597730179553206400917270056440777564705381311833784414411622581139007139121241260415176590960991840204680117638759451315160107207933157842702489440049120756986435471238526477448598917877384502841790559638762225244669608382829327527743170716757568571220074923985588097441830501865354642414802299320273277395928148222025492851549868958011332578935666342372862564128406115588624319118374501691812492781233658415513207865649836054498407249861061500303650563294288325400300816225341954433868712413122599721446523591970500274855019419478363422499305752083639208375793687573335379900415192385254662117233082171391783721667203192533876198879455160221620077454883551883778171424437519001176316311532458844767641593409502857431496236608670471130819163340247794730547788706963299186878318433268247944224424285442355549786930324119040513040730712705939780700864878805305576644299717640467768290361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0cd6dd4bc14bd8924d9552f077645e5e293b2f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fly.travel'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001705a7723a4000004030047304502201a45e0e67da887ac5cec0b0ecfecc4561d7c1d28e4d8dd0c0fe7eb09b799ae36022100bb3b3bae8ee90d7354315d81d32f23070a579a377e9b6276e00b26932db5e06100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001705a7723d200000403004730450221008aa4a3f943e45ff5e4ae965ea815b6eca64c22ed96b1b86ead980019db53f35802207a422f4bc18e39ee7fe9f82b3caf6f481f782bfa89258341cb88e5e8355362b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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