*.flightcentre.com.sg

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 11:1a:c5 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=9kgIPHdht6VQUTkYLl2d09PAEmvrcsqG,CN=*.flightcentre.com.sg,OU=GT54140874+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:1a:c5
Serial Number (int): 1120965
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 27:a8:56:16:62:49:6a:8a:8f:61:98:b3:d8:84:f3:91:0b:e2:73:f2
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 80:2a:20:79:bd:04:d8:c5:8b:e0:42:6a:32:df:34:48:b6:1d:37:fe
Fingerprint (sha256): 46:3f:e9:29:f4:2c:bd:28:39:a2:3c:79:84:16:d5:21:95:12:0c:fd:9a:b5:42:fb:1d:d6:c7:d9:fa:c4:a7:ac

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate *.flightcentre.com.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.flightcentre.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.flightcentre.com.sg
flightcentre.com.sg

Other certificates including the domain name flightcentre.com.sg

(limited to 100 certificates)
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
redirect.aws.fclweb.net
acquiastage.flightcentre.com.au
acquiadev.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
acquiadev.flitech.net
www.flightcentre.com
www.studentflights.com.au
webmail.flightcentre.com.sg
www.studentflights.com.au
www.studentflights.com.au
acquiadev.flitech.net
www.flightcentre.com
redirect.aws.fclweb.net
www.studentflights.com.au
acquiatest.4dconsulting.com.au
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.flightcentre.com
redirect.aws.fclweb.net
www.studentflights.com.au
redirect.aws.fclweb.net
webmail.flightcentre.com.sg
redirect.aws.fclweb.net
www.studentflights.com.au
www.studentflights.com.au
redirect.aws.fclweb.net
acquiaprod.flitech.net
www.studentflights.com.au
acquiadev.flitech.net
www.flightcentre.com
redirect.aws.fclweb.net
acquiadev.4dconsulting.com.au
www.studentflights.com.au
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.flightcentre.com
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.studentflights.com.au
redirect.aws.fclweb.net
acquiatest.4dconsulting.com.au
redirect.aws.fclweb.net
www.flightcentre.com
redirect.aws.fclweb.net
acquiatest.flitech.net
www.studentflights.com.au
www.studentflights.com.au
acquiaprod.flitech.net
www.studentflights.com.au
www.studentflights.com.au
www.studentflights.com.au
www.flightcentre.com
hotels.flightcentre.com.sg
www.flightcentre.com
redirect.aws.fclweb.net
www.studentflights.com.au
admin.4dconsulting.com.au
redirect.aws.fclweb.net
www.studentflights.com.au
www.link.flightcentre.com.sg
acquiadev.4dconsulting.com.au
acquiadev.flitech.net
webmail.flightcentre.com.sg
admin.4dconsulting.com.au
redirect.aws.fclweb.net
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
www.studentflights.com.au
www.flightcentre.com
www.flightcentre.com
www.studentflights.com.au
www.flightcentre.com
www.studentflights.com.au
fcbt.flightcentre.com.sg
www.flightcentre.com
redirect.aws.fclweb.net
*.flightcentre.com.sg
acquiadev.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
dev-secure.flightcentre.com.au
acquiadev.4dconsulting.com.au
redirect.aws.fclweb.net
www.flightcentre.com
redirect.aws.fclweb.net
fcbt.flightcentre.com.sg
acquiadev.flitech.net
www.flightcentre.com
www.studentflights.com.au
redirect.aws.fclweb.net
www.studentflights.com.au

Certificate

The complete raw certificate details for *.flightcentre.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBrHH8m8St94OrF1toGJ
p3g0HMHtTrRestXvvwx3NxN1g974QIqnMbsJ0M/4piNX4w9StEGeWy6TNfSHFGgn
fs6rfkrzM7HA4urWAWncUT82MqRWgDONUFtPo05gBsPUhT45MHbyCCRjDRbyUre+
ad2KvDEEQJpy/vpZGZCZ3eQjLy+565dz0MJYncovrZMSpA1bGk34SPGVWUJUzdI6
l9q3pXuzDpUkbh4vC72xCvmFupb0WuT0vxMsjXwHDD0n9KwnNHhDiiSmTBiWNctf
vIYg03IWWqBwYhE5K4+wcGZPbAR5Y6C5B0nVgV/Eykwe4nyKrLGBryJRCX9XhIR9
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1120965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-05 21:26:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-07 15:01:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '9kgIPHdht6VQUTkYLl2d09PAEmvrcsqG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT54140874'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.flightcentre.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25260865632735098428176344657682097243621366462187203369877917850339400842216719650915920745171689993454285609762629216544971694672928546675290014098721714473035024846211837418712492415297829629380870792933537773458049914088716630450632326346471434105999843755119071713014740630763852161020675203162596685251098084518704133037643762235576998368743877970683169666131630299844781860098936063550723153313623593223853424031806705576490593678715860159039004248733202553085866055870098966797249904865701838516541530033413218040278242965658749782035174181475129221118142566368967691952387841368357763719954346768551635090711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flightcentre.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightcentre.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27a8561662496a8a8f6198b3d884f3910be273f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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