rbpaycore.redbus.com

- IBIBO GROUP PRIVATE LIMITED -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 04:c9:61:df:73:79:0a:ef:55:44:d0:af:56:44:8f:80 was issued on by DigiCert Inc.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IBIBO GROUP PRIVATE LIMITED

Organization: IBIBO GROUP PRIVATE LIMITED
State / Province: Karnataka
Locality: Bengaluru
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c9:61:df:73:79:0a:ef:55:44:d0:af:56:44:8f:80
Serial Number (int): 6362548749054066530137244836619915136
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 22:ee:98:a8:7f:25:bd:e6:d9:bb:3c:5a:66:7b:b2:66:f9:da:36:30
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 74:e4:51:0a:05:b4:f3:af:08:30:67:81:16:95:4b:3a:f9:9e:b2:2c
Fingerprint (sha256): 45:bf:d7:80:40:84:32:24:3a:02:98:7e:82:07:46:6f:67:d2:fb:9d:75:0f:e6:5f:1b:35:41:d3:43:91:d0:93

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate rbpaycore.redbus.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rbpaycore.redbus.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rbpaycore.redbus.com
rbpayutils.redbus.com
rbpaypgrelay.redbus.com
loco.redbus.com
www.rydepro.in
app-yono.redbus.in
app-airtel.redbus.in
app-xiaomi.redbus.in
app-phonepe.redbus.in
app-gpay.redbus.in
app-shopback.redbus.my
app-boost.redbus.my
app-bfl.redbus.in
origin-loco.redbus.com
cabs.rydepro.in
cabsapi.rydepro.in
cabsadmin.rydepro.in
mriapps.redbus.com
mri.redbus.com
ppmri.redbus.com
ryde-obd-api.rydepro.in
dispatchtracking.rydepro.in
incabsugc.rydepro.in
in3.seatseller.travel

Other certificates including the domain name redbus.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for rbpaycore.redbus.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY/MkOSjM5IsDYllR8Jj
GRkT2t6ZKss2iYETie84AjNnODOdsAdEhifs+Os/h2I9RHGK1+Ll0xJxpY8N1TQ4
Vea6KXxXxpitVuddrYhg2EmxROKECDfdCSQJZ8FwcGvhj06DqJGFJ7O70tFqpNNW
tOOZWr1QZxiUSt/9g7qDBjZfrZRhGQqpXiiddnXd9KUuBkDTCcbXhYhNyZvVCDOK
gmlPYTzf1NNRPmkomdjmNZVwvYDtYm1SzqnQ5ydFsbOf0HYodIJt6K0JRfDWkHWx
x0MJXY9UfIpnxCbIgGx/9vB3jcVA7Iar2S2hDVt6LLRYn3lCKgj2EeWXarEVFL4s
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6362548749054066530137244836619915136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Karnataka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bengaluru'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IBIBO GROUP PRIVATE LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rbpaycore.redbus.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23929949610690008819363525115879630165266770051907308155905278691536754536551311744237673939237345133015348768672883981532208168518087824626858891598437315927464078837677267896604636174268321588073387301552785457714803906724568061991551029531940086087049256863276406131606019065757523066107658320680155561649630880742226676411896200400572491031358893111189515397096691968451927435399842014600301694651182170166379757454883475642573843167249221467797973577730033754920623995217268428600405569679658135673531253760152376461358336631795131805806685952087421297245038870932580269609549247742551234824736556300069519633589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22ee98a87f25bde6d9bb3c5a667bb266f9da3630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (514 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpaycore.redbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpayutils.redbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpaypgrelay.redbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loco.redbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rydepro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-yono.redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-airtel.redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-xiaomi.redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-phonepe.redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-gpay.redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-shopback.redbus.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-boost.redbus.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-bfl.redbus.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-loco.redbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabs.rydepro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabsapi.rydepro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabsadmin.rydepro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriapps.redbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mri.redbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmri.redbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryde-obd-api.rydepro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dispatchtracking.rydepro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incabsugc.rydepro.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in3.seatseller.travel'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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