ondemand.descartes.com

- The Descartes Systems Group Inc. -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 04:cd:0e:45:2f:0e:da:10:fd:05:54:c9:39:fa:8c:39 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

The Descartes Systems Group Inc.

Organization: The Descartes Systems Group Inc.
State / Province: Ontario
Locality: Waterloo
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:cd:0e:45:2f:0e:da:10:fd:05:54:c9:39:fa:8c:39
Serial Number (int): 6381622274180717975440274894899285049
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: bf:c4:fa:f8:5b:16:0f:04:94:58:1a:5a:3e:54:b5:97:4e:87:f1:1a
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 3c:9a:21:0f:cf:63:e8:b8:7a:0c:c1:9c:f0:0c:ce:11:b1:41:2b:b5
Fingerprint (sha256): 0b:7b:4e:2c:65:da:5d:cf:fa:ae:4e:24:3d:8e:d9:4e:0b:45:5d:af:30:f5:7c:5d:b3:53:8c:0c:94:a3:09:b0

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate ondemand.descartes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ondemand.descartes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ondemand.descartes.com

Other certificates including the domain name descartes.com

(limited to 100 certificates)
status.pipeimob.com.br
adfs.descartes.com
smartcompliance.descartes.com
fseuc-1a.freshservice.com
ecomm.descartes.com
status.markiiieb.com
status.sandsiv.com
status.ngxnetworks.com
foxtrot.status.descartes.com
*.testportal.descartes.com
shw.rmt.status.descartes.com
go-secure.descartes.com
shw.rmt.status.descartes.com
servicedesk.descartes.com
iq.syncd.tech
fmtracks.fmsend.net
*.gct.descartes.com
*.uk-updates.descartes.com
uca.descartes.com
newweb.na.descartes.com
status.us.premium.salusconnect.io
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
custom.mindflash.com
status.quarklink.io
*.e-customs.descartes.com
*.uk-updates.descartes.com
status.5starcoms.net
globalcompliance.asia.descartes.com
webdgn.descartes.com
shw.rmt.status.descartes.com
taric.descartes.com
status.anywhere.asolvi.app
crm.descartes.com
globalcompliancetest.descartes.com
desktop.descartes.com
ondemand.descartes.com
shipmentwarehouse.descartes.com
status.sandsiv.com
fmtracks.fmsend.net
status.skynetexpress.com
*.podirect.descartes.com
fseuc-1a.freshservice.com
uca.descartes.com
TILES.APAC.DESCARTES.COM
firstspiritstatus.crownpeak.com
globalcompliancetest.descartes.com
servicedesk.helpforheroes.org.uk
globalcompliance.descartes.com
*.ap.descartes.com
status.mapworks.io
shw.rmt.status.descartes.com
itmtest.descartes.com
status.pipeimob.com.br
status.doccle.be
www.123.descartes.com
status.lenderdock.com
shw.rmt.status.descartes.com
www.descartes.com
status.sandsiv.com
shw.rmt.status.descartes.com
osm-tile.descartes.com
iq.syncd.tech
web.emea.descartes.com
webgc-stg.descartes.com
EDITRADEPREPROD.DESCARTES.COM
globalcompliance.descartes.com
ess.descartes.com
www.descartes.com
fmtracks.fmsend.net
SHIPMENTWAREHOUSE.DESCARTES.COM
status.nwtc.edu
telogis.descartes.com
ssp.descartes.com
status.5starcoms.net
www.descartes.com
webmail.descartes.com
smartcompliance.descartes.com
essqa.descartes.com
lp.descartes.com
iq.syncd.tech
fseuc-1a.freshservice.com
*.testportal.descartes.com
status.skynetexpress.com
shw.rmt.status.descartes.com
services.content.descartes.com
businesscompliance.descartes.com
*.myvan.descartes.com
statuspage.e2open.com
fmtracks.fmsend.net
fseuc-1a.freshservice.com
status.prokurio.com
*.routeplanner.descartes.com
staging.routing-and-scheduling.descartes.com
fseuc-1a.freshservice.com
status.sandsiv.com
status.zoho.uk
go-webedi.descartes.com
lp.descartes.com
webmail.descartes.com

Certificate

The complete raw certificate details for ondemand.descartes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBjn19osFZVvFmu1Z0KJ
ZLq0SwpmO6NMIc5GihDXR7IT1wjYNUgjk3iH2p6igWyfjSKFowI6WPC2k2MRTQ7N
rCk8MNgR7T2kQhQQqLC9nyhjJ5TiFL7mXrOa9qnGXmZ1EKyOGo6YWrpYpe3Y/bbr
SblWk9jcb+lSmlO4zaF4hI9VoMb0zpd0L7O8qbHMhz9wbL1rdEFS3BpzXe+7yjOH
N1Tp0n1cYo40t8gBT7VzTBYphr8xw7/9cp76pdYEuUIdDyQgL7ttAKidSamf/I5g
KhRCWDVOn6td3CcBFbFRulkPwjGf/74RpI/y57KGyHkCHKLEauaY19Mh9QlwJdF1
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6381622274180717975440274894899285049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Descartes Systems Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ondemand.descartes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23240129541288705061262389388653100045116131787749136565755943953292622689777461683181695197000784834957108036389861880995457031352564249522467363581459654490941921629845403997120223378950969874720371206608363995720328007508159914104787767640407543390206617435629101977232766616210050520281586381110450146394815658788451512377004151178931494662091357981520987030886009567947139603020981783092223650415187525917593519143044922050277062038030567016260159704442817574312694637581917858889525722476913746232925545092304465892755690599266925657700647237819753251493486785013313392220880709648108492205883018728304580588883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfc4faf85b160f0494581a5a3e54b5974e87f11a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondemand.descartes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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