testemiratesdelivers.smartkargo.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:07:26:da:e3:27:8d:0e:b8:fd:d5:1e:af:6f:22:05 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=testemiratesdelivers.smartkargo.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:07:26:da:e3:27:8d:0e:b8:fd:d5:1e:af:6f:22:05
Serial Number (int): 15987870101034012603015951175901979141
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:d5:f7:b7:99:cb:60:c9:c1:d7:48:33:b3:7b:49:1e:74:b7:4a:98
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): b5:e3:c1:d9:82:cb:30:b8:eb:ec:2e:e2:6a:54:b7:1d:3b:9a:17:86
Fingerprint (sha256): 47:1f:f1:35:d4:20:7e:12:bd:6d:df:3c:18:df:bb:a7:7f:18:d4:97:3c:3a:dd:2b:e9:e2:fa:52:0b:9d:47:d7

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate testemiratesdelivers.smartkargo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for testemiratesdelivers.smartkargo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

testemiratesdelivers.smartkargo.com

Other certificates including the domain name smartkargo.com

(limited to 100 certificates)
saudiademoaws.smartkargo.com
spicejet.smartkargo.com
*.smartkargo.com
support.utg-solutions.com
suporte-obot.outth.ink
assist.hogarcontrols.com
smartkargo.com
desk.stratex.jp
wideroetestportal.smartkargo.com
agi.smartkargo.com
assist.hogarcontrols.com
support.3columns.io
deskportal.softdebut.com
www.smartkargo.com
support.3columns.io
devtestemiratesdelivers.smartkargo.com
support.thechalkcloud.com
www.smartkargo.com
support-skit.smartkargo.com
airasia.smartkargo.com
smartkargo.com
smartkargo.com
desk.stratex.jp
sam.pioneer.com.ph
www.smartkargo.com
smartkargo.com
assist.1install.co.uk
support.nextgi.com
support.nextgi.com
smartkargo.com
support.cucucovers.com
hawaiianstagingv4.smartkargo.com
smartkargo.com
www.smartkargo.com
spicejet.smartkargo.com
*.smartkargo.com
*.smartkargo.com
support.vincebaron.com
sam.pioneer.com.ph
cebu.smartkargo.com
airasia.smartkargo.com
assist.hogarcontrols.com
support.comunitech.co.za
sam.pioneer.com.ph
smartkargo.com
volarisy4.smartkargo.com
testemiratesdelivers.smartkargo.com
support.nextgi.com
support.discountsolo401k.com
masairstaging.smartkargo.com
copa.smartkargo.com
bsstaging.smartkargo.com
support.nextgi.com
deskportal.softdebut.com
*.smartkargo.com
suporte-obot.outth.ink
hawaiian.smartkargo.com
admin-testemiratesdelivers.smartkargo.com
www.smartkargo.com
*.smartkargo.com
skpt.smartkargo.com
lascargo.smartkargo.com
copa.smartkargo.com
amerijettesting.smartkargo.com
www.smartkargo.com
soporte.icrm.mx
help.preciousnine.com
smartkargo.com
alaskaairtesting.smartkargo.com
help.customary.dev
dy.smartkargo.com
www.smartkargo.com
*.smartkargo.com
smartkargo.com
desk.stratex.jp
smartkargo.com
suporte-obot.outth.ink
suporte-obot.outth.ink
vietjettesting.smartkargo.com
ustoy.digitalmaelstrom.net
assist.hogarcontrols.com
testemiratesdelivers.smartkargo.com
www.smartkargo.com
ekcmsdevtest.smartkargo.com
www.smartkargo.com
aerolineas.smartkargo.com
support.nextgi.com
smartkargo.com
deskportal.softdebut.com
morganandjustice.microman.com
suporte-obot.outth.ink
cebu.smartkargo.com
help.preciousnine.com
www.smartkargo.com
www.smartkargo.com
masair.smartkargo.com
sam.pioneer.com.ph
atendimento.inuv.com.br
poccustomerportal.smartkargo.com
www.smartkargo.com

Certificate

The complete raw certificate details for testemiratesdelivers.smartkargo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5DTRR8a6PYko/FRUYP8
XX5Gtpk5gdCCbSOFp/9BUvvr9sovkytF4T7PbTmphBPLcnQjj6hUHBF8vIBZe/pg
PNbTFIjgv2SVPLM6mfxM62cZT5zNXnv5YNcjkD6R8NMN5j9/kVWGMz7fcQnnIQoy
yyUnZ7dVJ02Rg8fIDGZyDN6nDmnjZKI3w9GgYRYt+JHyYXNYzj32UWZrSNL13BnZ
pnc928vgzjCfhrt2Xyuu2+T1eyxNXfYof71LOAKsRUd7lpEqq2+Nub9DmBch4+4B
7mXMaP/LZDWfpFe0nw5YmA0BbuMkIEmRr4TgAy+U0JuAsEhqJDOFi34jnbCY2JKn
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15987870101034012603015951175901979141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testemiratesdelivers.smartkargo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21658166153250296774902638102341680308404024885527199887175235486737063876110776229105446636887007513986416614928862276111200522910214291996770500123219876112105655118149441429240012020582300667972664984700755455863788139414141382468618984046783502642860305797274441105717212140354694916498637025794600445542201953763472134471182842625363542234482882670068341191416512633128215418875313614047820101599153645312174370559243453432991449660241569859850563716613133047598389248831072229988137608087949707704374065373823743797810404285588576487319277570272870674823075688252998442339882846256157060676427781279396492650313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84d5f7b799cb60c9c1d74833b37b491e74b74a98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testemiratesdelivers.smartkargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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