cargomax2.champ.aero

- Champ Cargosystems SA -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:03:4d:2e:9e:ba:33:24:47:48:7e:4a:3e:a7:6c:f0 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Champ Cargosystems SA

Organization: Champ Cargosystems SA
Locality: Contern
Country: LU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:03:4d:2e:9e:ba:33:24:47:48:7e:4a:3e:a7:6c:f0
Serial Number (int): 11980194291798537437932777395701902576
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:1a:62:1d:e6:4b:b9:1d:31:18:85:f2:8c:59:20:90:e2:ab:80:7a
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 55:40:8a:83:97:f7:a4:11:7b:03:d3:c6:7c:63:4e:8f:19:05:51:eb
Fingerprint (sha256): 1b:d4:84:21:21:e2:03:0f:77:57:35:e5:d6:3b:28:16:64:c0:97:77:85:91:d4:ff:42:90:2d:af:94:09:c0:ca

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate cargomax2.champ.aero

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cargomax2.champ.aero

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cargomax2.champ.aero

Other certificates including the domain name champ.aero

(limited to 100 certificates)
champ.aero
champ.aero
api-gateway.champ.aero
ocp.champ.aero
pay-prod.champ.aero
cx.cargospot.champ.aero
ocp.champ.aero
info.champ.aero
Sv.cargospot-training.champ.aero
community.champ.aero
champ.aero
Sv.cargospot-training.champ.aero
info.champ.aero
champ.aero
cargohub.champ.aero
developer.champ.aero
community.champ.aero
cargomax2.champ.aero
az.cargospot.champ.aero
www.champ.aero
ar.cargospot-training.champ.aero
ctxfarmc.customers.champ.aero
sip.champ.aero
*.customers.champ.aero
champ.aero
champ.aero
*.champ.aero
az.cargospot.champ.aero
info.champ.aero
ocp.champ.aero
champ.aero
az.cargospot.champ.aero
cx.cargospot.champ.aero
*.jalportal-domestic.champ.aero
info.champ.aero
*.champ.aero
cargotracke.champ.aero
cargohub.champ.aero
info.champ.aero
info.champ.aero
cx.cargospot-uat.champ.aero
Sv.cargospot-training.champ.aero
*.champ.aero
*.jal-ocp.champ.aero
ctxfarmc.customers.champ.aero
*.cscloud.champ.aero
cxportal.customers.champ.aero
*.champ.aero
cx.cargospot-uat.champ.aero
www.champ.aero
sync.champ.aero
ctxfarmc.customers.champ.aero
ocp-uat.champ.aero
sip.champ.aero
ocp-uat.champ.aero
champ.aero
*.jal-ocp.champ.aero
*.champ.aero
az.cargospot-training.champ.aero
*.champ.aero
az.cargospot.champ.aero
cargotrake.champ.aero
champdev.champ.aero
az.cargospot.champ.aero
*.ccsjapan.champ.aero
Sv.cargospot-training.champ.aero
az.cargospot-training.champ.aero
cx.internet-portal.champ.aero
webswing-poc-proxy.champ.aero
*.jalportal-domestic.champ.aero
sip.champ.aero
champ.aero
champ.aero
api-gateway-dev.champ.aero
*.champ.aero
cargomax.champ.aero
api-gateway.champ.aero
cx.cargospot.champ.aero
*.ccsjapan.champ.aero
info.champ.aero
sip.champ.aero
ocp-uat.champ.aero
ctxfarmc.customers.champ.aero
developer.champ.aero
sync.champ.aero
info.champ.aero
az.cargospot-training.champ.aero
sync.champ.aero
cspweb.customers.champ.aero
info.champ.aero
cx.cargospot-uat.champ.aero
*.champ.aero
sv.cargospot.champ.aero

Certificate

The complete raw certificate details for cargomax2.champ.aero in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupLczgQoxQzVciVj+LyF
XRVs55xuJjKZxNLHAjITQUsM+t2p87WG7V1RhWiBIRdPAkToQAy3P7tJ2eIEF2EM
GZFrDQ+epJINX3Q3RRxADmeAvIlRqY8GZd/q8e2TjP/udWLpMqo1L6QQjDCm/O3T
rG3nOqTqn7jQyvuWsbfbK7I5k10scUgotMjoDnoK66r21eOzk16FG0YcOpmpoUxX
t6uCOOKMe2c6CkFqalDa8o+dNCxtlwNk5j6Xl+lxdsJfLvrJXumkjHS5Lsd1dZKM
vv/6E7gPS4Uc13jcGUDuCg1CLliy9C4b46T/Dj0bw86VvKtglWbEcSRmtJ7wWR/B
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11980194291798537437932777395701902576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Contern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Champ Cargosystems SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cargomax2.champ.aero'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23552745330741068007453436106030611940451737661198340104997151259109472318115931973144638306025082842956682345489813946790702675801338781861263295155489019206544809909699481399876062419086475933687250161091729380375949951987465459266334543639539164991000969698113854213506970567369139123453772728522717124951672872998375688125731732786394740157430030354574657747876242438147691431141829642620340985208481142454760737504210960755254203044434815222216350130158546521176316189174283513160392637794395425793127305365080207521872852921236283060363240478816726017701916457929255649407287172072766916401764773460571936768417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							221a621de64bb91d311885f28c592090e2ab807a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargomax2.champ.aero'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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