*.icelandair.is

- Icelandair ehf. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:c2:f2:1a:13:90:f6:f6:c1:49:b0:63:a4:13:4a:ba was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Icelandair ehf.

Organization: Icelandair ehf.
Locality: Reykjavik
Country: IS

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:c2:f2:1a:13:90:f6:f6:c1:49:b0:63:a4:13:4a:ba
Serial Number (int): 7658355978592111758181072493046090426
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 56:b1:35:6c:5c:ec:05:ab:96:c0:10:d9:3f:22:0f:bd:28:df:29:c4
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ae:d0:5e:46:18:7d:ca:ec:5a:85:64:54:00:37:f2:52:db:ab:28:92
Fingerprint (sha256): 70:a5:f3:2b:71:46:41:d1:c6:79:2c:6d:0f:37:69:94:50:68:2a:a7:19:0f:5d:fe:d1:e7:05:f0:b7:6a:76:69

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.icelandair.is

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.icelandair.is

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.icelandair.is

Other certificates including the domain name icelandair.is

(limited to 100 certificates)
m.icelandair.is
www.icelandair.ca
www.icelandair.ca
*.icelandair.is
webmail.icelandairgroup.is
www.icelandair.ca
www.icelandair.ca
icelandair.is
www.icelandair.ca
www.icelandair.ca
icelandair.is
icelandair.is
lyncweb.icelandair.is
www.icelandair.ca
careers.icelandair.is
icelandair.is
*.icelandair.is
www.icelandair.ca
m.ca.icelandair.com
book.icelandair.is
m.ca.icelandair.com
icelandair.is
icelandair.is
pmpinternal.icelandair.is
m.icelandair.is
m.ca.icelandair.com
click.email.icelandair.is
yana-acceptance-client-placeholder.volantio.com
www.icelandair.ca
m.ca.icelandair.com
m.icelandair.ca
icelandair.is
icelandair.is
m.icelandair.is
akamai-san25.exacttarget.com
*.icelandair.is
book.icelandair.is
*.icelandair.is
yana-acceptance-client-placeholder.volantio.com
view.email.icelandair.is
www.icelandair.ca
akamai-san25.exacttarget.com
click.email.icelandair.is
packages.icelandair.is
brand.icelandair.is
m.icelandair.is
view.email.icelandair.is
icelandair.is
icelandair.ca
www.icelandair.ca
*.icelandair.is
icelandair.is
*.icelandair.is
www.icelandair.ca
lyncweb.icelandair.is
m.icelandair.ca
webmail.icelandairgroup.is
icelandair.ca
icelandair.is
book.icelandair.is
yana-acceptance-client-placeholder.volantio.com
book.icelandair.is
icelandair.ca
*.icelandair.is
careers.icelandair.is
yana-acceptance-client-placeholder.volantio.com
webmail.icelandairgroup.is
icelandair.is
*.icelandair.is
bc.icelandair.is
www.icelandair.ca
*.icelandair.is
brand.icelandair.is
lyncweb.icelandair.is
akamai-san25.exacttarget.com
webmail.icelandairgroup.is
pmpinternal.icelandair.is
*.icelandair.is
yana-acceptance-client-placeholder.volantio.com
www.icelandair.ca
www.icelandair.ca
akamai-san25.exacttarget.com
click.email.icelandair.is
book.icelandair.is
*.icelandair.is
sip.icelandair.is
*.icelandair.is
brand.icelandair.is
icelandair.is
yana-acceptance-client-placeholder.volantio.com
m.icelandair.ca
icelandair.is
m.icelandair.is
www.icelandair.ca
icelandair.is
icelandair.ca
m.icelandair.ca
www.icelandair.ca
www.icelandair.is
www.icelandair.ca

Certificate

The complete raw certificate details for *.icelandair.is in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7DNue/fV0ib+XYKNGiU
d5cQMqwyOnsLz8/R+cCqTEcKCoZgENT7yQjg73QnG5JjBnQ/QJCnu2nhz0IB/gdo
8lKmRqtRFwkaayW2u8SMd95bvONrkz1yGYAcz8Td5AZfeu4HCF8IIRwm4kLPWNHi
o+ph27Si62oagah4BRvF+brqbFFqe9bi+L7uOuTfyQqelCg05ALBP0fnVJosUMBC
w7qii+RokdYDSAR/T34o9a31/9rJ/zfoy4D6AlB4cTwcMVtalFKvEgpr/ROLYWmt
KcFrgWJSkqFJVfAgmr5DpckiB46GnResJ773CGroLlK0yq/dzMnODQoJC9tsPmw6
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7658355978592111758181072493046090426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reykjavik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Icelandair ehf.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.icelandair.is'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20664028823145863430493209155145963886939528778961671524373561309537645568485305097152062460958184685834581325236946360305437133435077682690961084083049607895716289274911225031274964002868743797046060315324239026683505461246718209672080526522307073019555517703955063913003545105619476046226845866393113838827235511401166859663837330164071610968360897139051628003565402759616776840661230583620392640503949618404184203910212589595504383312284322537079279137718715699120140459942234732684363182139394006131519025967716542779357516626482655440062754074782641692924954006223044067769038546519026211207061157275755279563329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56b1356c5cec05ab96c010d93f220fbd28df29c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icelandair.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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