cargo.vietjetair.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:7e:71:4a:0e:c7:a1:ec:75:5d:7f:00:9b:12:bc:63 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cargo.vietjetair.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:7e:71:4a:0e:c7:a1:ec:75:5d:7f:00:9b:12:bc:63
Serial Number (int): 16607263133337748488853956114590645347
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c9:8a:9f:0a:95:45:bc:a9:59:a7:00:53:f9:82:b0:36:91:38:40:8c
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 0c:68:9d:03:e9:ff:59:90:ce:b1:ce:a3:f5:c8:72:1a:24:42:61:12
Fingerprint (sha256): 48:2b:32:0c:d5:91:48:8c:f5:8d:65:a3:3a:29:1d:eb:06:de:7a:9d:f7:37:2b:21:42:77:6d:24:d7:48:87:47

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate cargo.vietjetair.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cargo.vietjetair.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cargo.vietjetair.com

Other certificates including the domain name vietjetair.com

(limited to 100 certificates)
vietjetair.com
vietjetair.com
vietjetair.com
*.vietjetair.com
vietjetair.com
*.vietjetair.com
book.vietjetair.com
vietjetair.com
m.vietjetair.com
vis.vietjetair.com
skyjoy.vietjetair.com
m.vietjetair.com
*.vietjetair.com
booking.vietjetair.com
mapi.vietjetair.com
skyboss.vietjetair.com
m.vietjetair.com
vietjetair.com
*.vietjetair.com
efb.vietjetair.com
*.vietjetair.com
*.vietjetair.com
*.vietjetair.com
m.vietjetair.com
*.vietjetair.com
agent.vietjetair.com
m.vietjetair.com
cargo.vietjetair.com
ifs-api.vietjetair.com
*.vietjetair.com
m.vietjetair.com
cargo.vietjetair.com
*.vietjetair.com
skyfun-api.vietjetair.com
*.vietjetair.com
m.vietjetair.com
vietjetair.com
vietjetair.com
m.vietjetair.com
careers.vietjetair.com
vietjetair.com
*.vietjetair.com
vis.vietjetair.com
vietjetair.com
m.vietjetair.com
vietjetair.com
goldairplane.vietjetair.com
hdbank.vietjetair.com
*.vietjetair.com
vietjetair.com
vis.vietjetair.com
*.vietjetair.com
*.vietjetair.com
*.vietjetair.com
*.vietjetair.com
mail.vietjetair.com
vietjetair.com
skyjoy.vietjetair.com
*.vietjetair.com
mail.vietjetair.com
*.vietjetair.com
vietjetair.com
vietjetair.com
*.vietjetair.com
vietjetair.com
vietjetair.com
vietjetair.com
*.vietjetair.com
*.vietjetair.com
mail.vietjetair.com
skyfun-api.vietjetair.com
vis.vietjetair.com
vietjetair.com
freesummer.vietjetair.com
agent.vietjetair.com
*.vietjetair.com
vzinterline.vietjetair.com
vietjetair.com
cargo.vietjetair.com
vietjetair.com
*.vietjetair.com
careers.vietjetair.com
vietjetair.com
*.vietjetair.com
vietjetair.com
agent.vietjetair.com
skyfun-api.vietjetair.com
vietjetair.com
*.vietjetair.com
skyjoy-id.vietjetair.com
*.vietjetair.com
*.vietjetair.com
cargo.vietjetair.com
vietjetair.com
*.vietjetair.com
www.vietjetair.com
vietjetair.com
funcoin.vietjetair.com
book.vietjetair.com
skyjoy.vietjetair.com

Certificate

The complete raw certificate details for cargo.vietjetair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Zoy2w/F+Bg3PYyZrAU
UB8G4KG5LgQLWvE7vzMom8N0ZyRLxFk7v9wW2ELD2zLy1XE7pTiA9u0I9rB55TFD
whtSGBI51wCo5ktqTt2WWpQHdCUY1fOklYk6Z2DCIspizAblhgxgYAv5iLgCU/qU
oF0h45xLUboGenn36HnLkZ3qrN3hsUf2v0SMr/DhXYNjo5Oay7plon1ip2n9yHdy
IULIdoIsOAwJ64SeNlG1gFsLYtLhNBXDsqIs22VSXaP6FwvFNCmNkRuTNKJBH/W7
PXVU6h6dZSqf8VC8BGdNHRKwX1LGB+Gj+RALYVuX3gkSGO3uJ+DXAxq4KyBD5chI
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16607263133337748488853956114590645347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cargo.vietjetair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26710451964628424636154879327082510736929591933270502446677547904626074276306494297534263169052357932120335267572912124472943645813152288616027338558578105444734893695386530660847657548004030970352827891240329098505814325568238031262403733546899943027496892565909468270758334505022824487212632684626487496316465926818906202599081221189614209857371558705844170752777040922415680798842670632001881350657549203714034657241715728705079209801473406541588241418942005552417453744562493545492270967278450714113256590616761482558276837520861324923549307217859887291851567633017119217274085956581891703925479784565680791636137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c98a9f0a9545bca959a70053f982b0369138408c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargo.vietjetair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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