yana-acceptance-client-placeholder.volantio.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:62:d2:bd:89:b5:47:95:51:ed:70:5e:a8:2f:74:65 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yana-acceptance-client-placeholder.volantio.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:62:d2:bd:89:b5:47:95:51:ed:70:5e:a8:2f:74:65
Serial Number (int): 8488487389603990353130836366376006757
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 53:94:51:56:47:94:0e:93:3b:41:98:6e:09:35:31:59:1a:ec:57:e2
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): ac:62:3c:17:fe:bf:0a:d3:b5:f1:80:c6:70:6d:8f:7f:1e:66:98:b3
Fingerprint (sha256): 6c:67:34:8f:d7:08:c0:cb:8b:26:b2:a1:37:c9:3e:6c:21:36:65:30:70:5e:92:31:d1:50:52:cf:67:54:03:45

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate yana-acceptance-client-placeholder.volantio.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yana-acceptance-client-placeholder.volantio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yana-acceptance-client-placeholder.volantio.com
*.yana.volantio.com
*.v.airvistara.com
*.v.flyscoot.com
*.v.iberiaexpress.com
*.v.spicejet.com
*.v.avianca.com
*.flight.icelandair.is
*.v.flybreeze.com
*.v.alaskaair.com
voluntaryflightchange.goindigo.in
6evolantio.goindigo.in
innolab.vueling.com
*.v.vueling.com
flight.icelandair.is
*.v.iberia.com
*.v.volaris.com

Other certificates including the domain name volantio.com

(limited to 100 certificates)
*.v.volaris.com
*.volantio.com
bacon.jumpseat.volantio.com
*.sunexpress.yana.volantio.com
jumpseat-prod-au.volantio.com
*.volantio.com
sandbox-yana.volantio.com
view-online.jumpseat-loadtest.volantio.com
*.us.yana.volantio.com
volantio.com
*.scoot.yana.volantio.com
jumpseat-prod-au-cdn.volantio.com
*.spicejet.yana.volantio.com
volantio.com
*.sunexpress.yana.volantio.com
*.volantio.com
acceptance-client.demo-prime.sandbox.volantio.com
staging.jumpseat.volantio.com
*.yana.volantio.com
jumpseat-prod-au-cdn.volantio.com
jumpseat-sandbox-cdn.volantio.com
*.yana.volantio.com
*.us.yana.volantio.com
*.scoot.yana.volantio.com
*.v.volaris.com
*.uat.yana.volantio.com
cdn.staging.jumpseat.volantio.com
jumpseat-staging-cdn.volantio.com
yana-uat.volantio.com
volantio.com
*.sandbox.yana.volantio.com
production-yana.volantio.com
jumpseat-prod-au-cdn.volantio.com
cdn.sandbox.jumpseat.volantio.com
volantio.com
*.iberia.yana.volantio.com
www.volantio.com
*.uat.yana.volantio.com
*.us.yana.volantio.com
www.volantio.com
*.yana.volantio.com
*.icelandair.yana.volantio.com
*.iberia.yana.volantio.com
acceptance-client.demo-prime.sandbox.volantio.com
*.yana.volantio.com
*.uat.yana.volantio.com
*.uat.yana.volantio.com
jumpseat-prod-au.volantio.com
toolbox.alaska.yana.volantio.com
yana-acceptance-client-placeholder.volantio.com
toolbox.uat.yana.volantio.com
uat-yana.volantio.com
toolbox-alaska.volantio.com
jumpseat-staging-cdn.volantio.com
jumpseat-prod-au.volantio.com
jumpseat-staging.volantio.com
jumpseat-prod-au.volantio.com
jumpseat-sandbox.volantio.com
*.v.volaris.com
*.avianca.yana.volantio.com
*.volantio.com
cdn.staging.jumpseat.volantio.com
uat-yana.volantio.com
yana-disruption-client-sandbox.volantio.com
*.yana.volantio.com
yana-acceptance-client-placeholder.volantio.com
*.sandbox.yana.volantio.com
*.volantio.com
*.yana.volantio.com
*.yana.volantio.com
*.scoot.yana.volantio.com
jumpseat-staging.volantio.com
*.yana.volantio.com
*.yana.volantio.com
jumpseat-staging-cdn.volantio.com
sandbox.jumpseat.volantio.com
jumpseat-prod-au.volantio.com
jumpseat-prod-au.volantio.com
www.volantio.com
*.yana.volantio.com
yana-disruption-client-uat.volantio.com
toolbox.yana.volantio.com
cdn.au.prod.jumpseat.volantio.com
jumpseat-staging.volantio.com
sandbox-yana.volantio.com
acceptance-client.demo-prime.sandbox.volantio.com
*.sunexpress.yana.volantio.com
*.uat.yana.volantio.com
view-online.jumpseat.volantio.com
*.yana.volantio.com
*.yana.volantio.com
*.yana.volantio.com
toolbox.sandbox.yana.volantio.com
jumpseat-loadtest.volantio.com
view-online.jumpseat-loadtest.volantio.com
yana-acceptance-client-placeholder.volantio.com
*.sunexpress.yana.volantio.com
jumpseat-staging.volantio.com
yana-acceptance-client-placeholder.volantio.com
*.volantio.com

Certificate

The complete raw certificate details for yana-acceptance-client-placeholder.volantio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIonqmoAL40bXV8lIjE5
Ob6BVIleUpdeyVdzfS98rsPz+QPh/eWNC6z3up/7R66LcEMZGXUcvGExALRGwhTs
opxsTzKIk2XeZwmSb+VpV49vOiqRu0mxWzCbVw+YkUggktkPSq8lYeUI880quxZc
I5QgZ/uhV4dD83PFkg1habpKt3/OVSdvLYXGt6JQtglHqBT6B5O9bYeUo7gEoiB6
M3SN1t+8dqVX/ScPj335MR+xF4OW6j7YlZxQZVJ9RlbEkP0VRwjpEek3OEUJNEXF
xpQ6kGiLvkOiJWlxfl8M+lGNsKBecjYC/xV5JI4kSxue9Z5+hvlBFLKluuNYZtdO
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8488487389603990353130836366376006757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yana-acceptance-client-placeholder.volantio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21276161976333404772170346027246493644729255885844350659379907770155034176154388883376848934173791265462892846709555902170315688164785273385929669455257289264325446501780348976701429278010330127940577233829382470319770228522093176188284606999097163179435668812084652724518900897270417333956687050517762988099565016213286158698401599619659377558481243217145409250510611843701731672280986670760660440456812257091103207772264550492114392334569643419157767744819016216356337374477675499548182084851662374682303334638228574514282096928429729950231790359834336274189597217930833791469877622035242004227456277173641066008211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5394515647940e933b41986e093531591aec57e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yana-acceptance-client-placeholder.volantio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yana.volantio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.airvistara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.flyscoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.iberiaexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.spicejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.avianca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flight.icelandair.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.flybreeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.alaskaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voluntaryflightchange.goindigo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6evolantio.goindigo.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innolab.vueling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.vueling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flight.icelandair.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.iberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v.volaris.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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