community.champ.aero

- Champ Cargosystems SA -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:f9:5c:01:13:f2:6a:6f:40:95:f2:da:a7:4f:81:09 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Champ Cargosystems SA

Organization: Champ Cargosystems SA
Locality: Contern
Country: LU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:f9:5c:01:13:f2:6a:6f:40:95:f2:da:a7:4f:81:09
Serial Number (int): 13257799946924391261623663610244858121
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cb:f7:8a:90:b6:c3:bd:9e:e5:cf:62:1d:19:99:1d:6a:c3:28:82:00
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): c4:13:99:8a:7f:62:da:a7:e3:a9:50:66:f2:64:b5:db:44:a8:79:ba
Fingerprint (sha256): 10:2a:c8:32:84:0d:2a:43:5b:74:eb:6e:88:98:c0:7d:15:ab:f4:b6:00:30:a6:e4:79:ef:f4:26:6a:f1:fb:fb

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate community.champ.aero

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for community.champ.aero

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

community.champ.aero

Other certificates including the domain name champ.aero

(limited to 100 certificates)
champ.aero
champ.aero
api-gateway.champ.aero
ocp.champ.aero
pay-prod.champ.aero
cx.cargospot.champ.aero
ocp.champ.aero
info.champ.aero
Sv.cargospot-training.champ.aero
community.champ.aero
champ.aero
Sv.cargospot-training.champ.aero
info.champ.aero
champ.aero
cargohub.champ.aero
developer.champ.aero
community.champ.aero
cargomax2.champ.aero
az.cargospot.champ.aero
www.champ.aero
ar.cargospot-training.champ.aero
ctxfarmc.customers.champ.aero
sip.champ.aero
*.customers.champ.aero
champ.aero
champ.aero
*.champ.aero
az.cargospot.champ.aero
info.champ.aero
ocp.champ.aero
champ.aero
az.cargospot.champ.aero
cx.cargospot.champ.aero
*.jalportal-domestic.champ.aero
info.champ.aero
*.champ.aero
cargotracke.champ.aero
cargohub.champ.aero
info.champ.aero
info.champ.aero
cx.cargospot-uat.champ.aero
Sv.cargospot-training.champ.aero
*.champ.aero
*.jal-ocp.champ.aero
ctxfarmc.customers.champ.aero
*.cscloud.champ.aero
cxportal.customers.champ.aero
*.champ.aero
cx.cargospot-uat.champ.aero
www.champ.aero
sync.champ.aero
ctxfarmc.customers.champ.aero
ocp-uat.champ.aero
sip.champ.aero
ocp-uat.champ.aero
champ.aero
*.jal-ocp.champ.aero
*.champ.aero
az.cargospot-training.champ.aero
*.champ.aero
az.cargospot.champ.aero
cargotrake.champ.aero
champdev.champ.aero
az.cargospot.champ.aero
*.ccsjapan.champ.aero
Sv.cargospot-training.champ.aero
az.cargospot-training.champ.aero
cx.internet-portal.champ.aero
webswing-poc-proxy.champ.aero
*.jalportal-domestic.champ.aero
sip.champ.aero
champ.aero
champ.aero
api-gateway-dev.champ.aero
*.champ.aero
cargomax.champ.aero
api-gateway.champ.aero
cx.cargospot.champ.aero
*.ccsjapan.champ.aero
info.champ.aero
sip.champ.aero
ocp-uat.champ.aero
ctxfarmc.customers.champ.aero
developer.champ.aero
sync.champ.aero
info.champ.aero
az.cargospot-training.champ.aero
sync.champ.aero
cspweb.customers.champ.aero
info.champ.aero
cx.cargospot-uat.champ.aero
*.champ.aero
sv.cargospot.champ.aero

Certificate

The complete raw certificate details for community.champ.aero in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/ZChP9zO5RJ2qhi4wcf
7tJtfnCiDwPolt7c1bhGWaXKhap2LNMwJ0cDYVLmH7MuZUQ1RlS1L5iBUyUkz/pS
0NIBg4+BLceGGhMMQ8jaujZfuOkuoDIorEoGPAyMbj1+3YX2gU/zC0oTIFfvbXzD
jba2KniuI7DXnbnHveVepEAXje7ecOHb5rxYCGxok+QD9DQ1iLgzCOEAcd/NlUKG
6OjDOH+s4SXGg00pGHap+725ZaHtzelnrbTNqCe361FBcZeqCRj2QFjIzmpR7B69
l8LkpevSGETZscPafiRgGjd3X2chGDqQett34KhHANvZ5fPOXhAhw6jkUI2fK8iw
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13257799946924391261623663610244858121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Contern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Champ Cargosystems SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'community.champ.aero'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31302296580604447486401214056791751670652276914871940437534921080271072736248485942554327682528399054692183975835618066773995559141901253549768789809953148304599830005080758013555939050774103317417705825851300624200952769912550769388152763138352073375929764731337591734476804833496744731214586450100085512688942043709029203866433520195490516735439272488332525982749969048116356410565287312626198175720883623588724737091634586943562711167683246728568704478385856015145159769549306410499421409953228982175926820896718796595919381098286966567019528409648080006784271381513555499534831860046586443159595226635647488405557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbf78a90b6c3bd9ee5cf621d19991d6ac3288200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.champ.aero'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004a9b9525601e7517df05ac4774b5bdcdda9e608954eb6f051fddd7611e2f5d3db6154850bc766f79b2bd5c3019b59d14e5f979a24122de81a8c109185246eb7331f9c2328101b49a4b4afb9179f995c043b097d6d55683459977018ff7f0f8ddb218464289559671559e51a19b02abf4221fa5bd72e4a9ae57ff7dd61ebc6a461601bedd7a183c359e4ecab34c60080dec57b4a835ee7d5e34da9b08bed94b48295106113a099b7d1f90e53afaa152bdfbee7e4bba377f709752788298191fe33d2ff46743f4d0d4740e0e4e135b78b1605efac180466b94736fa9bb950b3f2d1e56455a74772e2b4084255b65ecb91c29d0d8c34fa6655afe585ffd7592fdc8