owp.iotqa.ual.com

- United Airlines, Inc. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0b:34:1a:1a:2c:90:ab:f1:f7:10:dd:01:55:2d:e5:91 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United Airlines, Inc.

Organization: United Airlines, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:34:1a:1a:2c:90:ab:f1:f7:10:dd:01:55:2d:e5:91
Serial Number (int): 14892036806652043691229817956050265489
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fb:0b:2d:b0:c0:51:83:af:13:9a:8a:9f:fd:d6:9a:20:7d:b4:2a:45
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 53:73:73:0b:f3:80:47:34:1a:63:a5:e3:da:91:d2:85:c1:5f:ca:65
Fingerprint (sha256): 01:95:b8:c3:4a:6d:6c:90:f7:f6:16:cb:96:d8:77:55:d9:0f:bf:aa:cf:9f:4c:33:3d:d9:d2:4f:b2:11:df:0e

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate owp.iotqa.ual.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owp.iotqa.ual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owp.iotqa.ual.com
thales.owp.iotqa.ual.com

Other certificates including the domain name ual.com

(limited to 100 certificates)
ndccorpdpsvcauth-qa.ual.com
?.ual.com
artifactory.ual.com
usourceqa.ual.com
pilotrecords.ual.com
smtptul.ual.com
sndcapiauth.ual.com
ctmp.ual.com
unitedservices.ual.com
eserviceaerobeta.ual.com
stage.css.ual.com
unitedcargobilling.ual.com
customerwebcid.ual.com
svcgw.qa.aws.united.com
owp.iotqa.ual.com
*.ual.com
aasp-dp-qa.ual.com
cateringportalstage.ual.com
logbook-stg.ual.com
unitedtax.ual.com
ANDCDCXSACSPRI01.ual.com
unitedaccountinquiry.ual.com
resctx.ual.com
collabapiauth.ual.com
unitedclubaims-authsvc.ual.com
rfp.ual.com
vpninp.ual.com
HotelHub.ual.com
Cargo360.ual.com
ndccorpdpsvcauth.ual.com
ebso.ual.com
skyviewtng.stg.cvu.aws.ual.com
insight-mobile.ual.com
ccs-stage.ual.com
ivr-qa.ual.com
lyncdiscover.united.com
*.ual.com
gstarmac.ual.com
iom2-odev.ual.com
ucbadm.preprod.ual.com
stagendc.css.ual.com
prendcapiauth.ual.com
esftpcd.ual.com
cargoivr-sdp.auth.ual.com
mobileres.ual.com
vopcwlf5d3.opc.ual.com
apiportal-qa.ual.com
vpn3.ual.com
owp.msg.ual.com
cargoivr-pdp.auth.ual.com
K2.ual.com
xml.united.com
ustlsttpm001.ual.com
atw.prod.aws.ual.com
ocpmaster.cslaws-nonprod.ual.com
uatpadmin.ual.com
eservicetest.united.com
solace.stg.duz.aws.ual.com
geofence-api-dev.uia.ual.com
mail.ual.com
unitedperksplus.united.com
cargoivr-sdp.auth.ual.com
gndcqadpxdmz01m01.ual.com
svcgw.prd.aws.united.com
agentui2dev.ual.com
unitedservicestools.ual.com
owp.msg.ual.com
turnmetrics-dp.ual.com
wysectx.ual.com
esftwtc.ual.com
usourceqa.ual.com
airporthubops-qa-authsvc.ual.com
vpninp.ual.com
api-qa.united.com
unitedservices.ual.com
techopsservices-gateway.ual.com
vawsstgdpnvaza1m01.ual.com
cargo-iot.dev.ual.com
ccsplus-stg.ual.com
itspeech.ual.com
pinetdpweb.ual.com
ndc-prdfe-ejabberd-f5.ual.com
api.prd.aws.united.com
proderp.ual.com
mdm.ual.com
sndceapiauth1.ual.com
PUALAPISVC2.UAL.COM
pars.ual.com
vawssdpnvaza1m01.ual.com
dp-mobile.ual.com
ebt.dev.ual.com
?.ual.com
*.ual.com
ghpages.ual.com
curbside-dp.ual.com
prodqm.global.ual.com
raven-ext.pdpgw.ual.com
*.ual.com
vpn2.ual.com
svcgw.dev.aws.united.com

Certificate

The complete raw certificate details for owp.iotqa.ual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo+3jhUE/5V4k8iw53Y1
DBqFTJa3b45HZ/1jWfTOtzTYgj1ZpwIU+Y2EvfUi7PuOpEt9bOB3HVK/LfeGE/l+
XGTHkshl1H6DXq0UnSvGJ2DkUgCs/kvm9ulNZZNj3RDZawwtDL/AhUEPMcG2RZ7Y
2jNPnX42/ElndMSOzP2kMvMOF4Xfl9qTftDXErunqo0AlA4y84eZigLSjdyoPtb3
3mX8CEpAetXGrD0Xgn3JJjF2uLYmM7PTr420clAmGV760fY1kYf6MhV1aUUKU4rX
uIfvT6rNn5rKuS7DR8wQ5GhMJm7iSzE3yhmKOqgdLJbJprLdPu87B9RC4kckiH7P
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14892036806652043691229817956050265489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Airlines, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owp.iotqa.ual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25571007102980645521416721462243046576046733296151679731868158848735037907895636287707096932238849872233217032158851193674053118314747930133578498887591549256350490213867063982725756505211716380778720115161052013556594486354925879160938858111095360931707755536448715559205324882355981479613880479914775675568118201018509827212944163598736260839567654601298380414114974917267909704461323499220377354585108756590238326339578623147576742088280643148229144915374907189824576391689992277701377712324300714176681996653200532146823619604745091979124831167628233590512872864070413486243829264882771622729949686596863472357177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb0b2db0c05183af139a8a9ffdd69a207db42a45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owp.iotqa.ual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thales.owp.iotqa.ual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009088b50b2199433c1001f2994589ff7c5cc17409b2b45a405b3870743bd3f4e55e7b98a74a3ba057dd9d758552fb1f5adfe3da8a253aedea1c5822589e2c16520f02d9c3df1c655b8b10e0c71dd8ca629b412df6d4a9aa3945bf1e25723df94979272af3cb471245c94cd7b86f76bbb6b934090be5bbf983eac7e4f59ca4b27784eba44e44e1fc31bd30d42c55436d2f2a54f53f3b9e7b93b0cdd30b91cfd2cf027728173d2fdedfd8adf9f5212018929e446c50bb532ae971cc717afa10e3ea2f4d127fc0637992880c2067d7a7c90adb5c8da5e31d82f11828ee9281477596d95aeb760ed36cabd112e1553d91bffa86760a8f7d51111c43c8928f8f46632c