vietjettesting.smartkargo.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:d5:64:ae:79:9d:82:4c:d8:b7:c6:b2:a2:63:44:3f was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vietjettesting.smartkargo.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:d5:64:ae:79:9d:82:4c:d8:b7:c6:b2:a2:63:44:3f
Serial Number (int): 21046421231940401894744979079497466943
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3a:d2:67:2e:90:58:4c:13:a0:6a:82:52:5e:10:e6:3a:30:6d:09:77
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 46:af:d8:e5:1e:67:97:49:b1:93:7c:9b:79:13:a0:1b:64:f9:1e:ad
Fingerprint (sha256): 6f:82:e1:4a:03:1f:76:f6:c3:65:db:88:45:2e:38:0f:f5:c5:77:58:bd:9d:41:4b:7d:6e:05:42:82:f1:d7:bf

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate vietjettesting.smartkargo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vietjettesting.smartkargo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vietjettesting.smartkargo.com

Other certificates including the domain name smartkargo.com

(limited to 100 certificates)
saudiademoaws.smartkargo.com
spicejet.smartkargo.com
*.smartkargo.com
support.utg-solutions.com
suporte-obot.outth.ink
assist.hogarcontrols.com
smartkargo.com
desk.stratex.jp
wideroetestportal.smartkargo.com
agi.smartkargo.com
assist.hogarcontrols.com
support.3columns.io
deskportal.softdebut.com
www.smartkargo.com
support.3columns.io
devtestemiratesdelivers.smartkargo.com
support.thechalkcloud.com
www.smartkargo.com
support-skit.smartkargo.com
airasia.smartkargo.com
smartkargo.com
smartkargo.com
desk.stratex.jp
sam.pioneer.com.ph
www.smartkargo.com
smartkargo.com
assist.1install.co.uk
support.nextgi.com
support.nextgi.com
smartkargo.com
support.cucucovers.com
hawaiianstagingv4.smartkargo.com
smartkargo.com
www.smartkargo.com
spicejet.smartkargo.com
*.smartkargo.com
*.smartkargo.com
support.vincebaron.com
sam.pioneer.com.ph
cebu.smartkargo.com
airasia.smartkargo.com
assist.hogarcontrols.com
support.comunitech.co.za
sam.pioneer.com.ph
smartkargo.com
volarisy4.smartkargo.com
testemiratesdelivers.smartkargo.com
support.nextgi.com
support.discountsolo401k.com
masairstaging.smartkargo.com
copa.smartkargo.com
bsstaging.smartkargo.com
support.nextgi.com
deskportal.softdebut.com
*.smartkargo.com
suporte-obot.outth.ink
hawaiian.smartkargo.com
admin-testemiratesdelivers.smartkargo.com
www.smartkargo.com
*.smartkargo.com
skpt.smartkargo.com
lascargo.smartkargo.com
copa.smartkargo.com
amerijettesting.smartkargo.com
www.smartkargo.com
soporte.icrm.mx
help.preciousnine.com
smartkargo.com
alaskaairtesting.smartkargo.com
help.customary.dev
dy.smartkargo.com
www.smartkargo.com
*.smartkargo.com
smartkargo.com
desk.stratex.jp
smartkargo.com
suporte-obot.outth.ink
suporte-obot.outth.ink
vietjettesting.smartkargo.com
ustoy.digitalmaelstrom.net
assist.hogarcontrols.com
testemiratesdelivers.smartkargo.com
www.smartkargo.com
ekcmsdevtest.smartkargo.com
www.smartkargo.com
aerolineas.smartkargo.com
support.nextgi.com
smartkargo.com
deskportal.softdebut.com
morganandjustice.microman.com
suporte-obot.outth.ink
cebu.smartkargo.com
help.preciousnine.com
www.smartkargo.com
www.smartkargo.com
masair.smartkargo.com
sam.pioneer.com.ph
atendimento.inuv.com.br
poccustomerportal.smartkargo.com
www.smartkargo.com

Certificate

The complete raw certificate details for vietjettesting.smartkargo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KdywHZzgj2hRZ/gnxAd
/PdPLinWqsFgDx9y5/gLZaA2e3dIScoZaQtfA+XxNbToExJJl0ZNd6pfHzZBgdtp
DEwBmJ7LA7ZfUV2IasGXrewPu+SKtz5bjNmNY+kjDZF82U+8025gVf4yRvKGyDYe
uOuj0uzid7gv4XF4LYw4DnO5cd8dlvlQf/JIyPPaWqbmGTut3PMOQq60QWzIPv0b
jx5id8hPW6EKeUMjtbZJ7A0pus0e2TetSpkVR4FYXtIiuodgu6pW6ySpv7jtlqz9
i09I80LDI53klrpYXY8IKpwgjza5VtehQzIK0vlUXOs07V7zhH4DTpFwXa3Z4drf
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21046421231940401894744979079497466943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vietjettesting.smartkargo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28359952121594666773094305356142463325898346144640037296531975866710516528021898800045361450932178868261930635289164501016133487040712733859683823210479723912452317205949399672950299728554291020430675921696511647343209811818283524913847167963983918560783790813329597177769203174717373296896463070519734191661361438789457632135186559250472567047728663473241124024753270167547961038473145731345575955638287725611231379199540745140975179540744928483018096166580817014879386120477631202567759792322759237249282977458765769984302296027515635735280248848675293050726168325846111606836040369040570494283694005203334623584141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ad2672e90584c13a06a82525e10e63a306d0977
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietjettesting.smartkargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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