ekcmsdevtest.smartkargo.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:33:67:e9:41:4f:74:25:e5:19:21:15:4f:e2:f1:31 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ekcmsdevtest.smartkargo.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:33:67:e9:41:4f:74:25:e5:19:21:15:4f:e2:f1:31
Serial Number (int): 13559194666198056155424242840748880177
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a0:2b:98:19:56:0a:58:e6:c3:70:5a:46:8d:9a:ff:05:79:a9:06:73
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 8c:c5:1a:af:1f:76:01:01:10:b4:a1:72:f3:f7:8b:18:9e:25:82:98
Fingerprint (sha256): 73:36:12:68:7d:79:42:80:f4:4e:cd:e5:80:94:04:ae:b9:92:9e:64:9f:c0:8a:e3:d9:78:c2:bf:6b:54:3c:f1

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate ekcmsdevtest.smartkargo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ekcmsdevtest.smartkargo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ekcmsdevtest.smartkargo.com

Other certificates including the domain name smartkargo.com

(limited to 100 certificates)
saudiademoaws.smartkargo.com
spicejet.smartkargo.com
*.smartkargo.com
support.utg-solutions.com
suporte-obot.outth.ink
assist.hogarcontrols.com
smartkargo.com
desk.stratex.jp
wideroetestportal.smartkargo.com
agi.smartkargo.com
assist.hogarcontrols.com
support.3columns.io
deskportal.softdebut.com
www.smartkargo.com
support.3columns.io
devtestemiratesdelivers.smartkargo.com
support.thechalkcloud.com
www.smartkargo.com
support-skit.smartkargo.com
airasia.smartkargo.com
smartkargo.com
smartkargo.com
desk.stratex.jp
sam.pioneer.com.ph
www.smartkargo.com
smartkargo.com
assist.1install.co.uk
support.nextgi.com
support.nextgi.com
smartkargo.com
support.cucucovers.com
hawaiianstagingv4.smartkargo.com
smartkargo.com
www.smartkargo.com
spicejet.smartkargo.com
*.smartkargo.com
*.smartkargo.com
support.vincebaron.com
sam.pioneer.com.ph
cebu.smartkargo.com
airasia.smartkargo.com
assist.hogarcontrols.com
support.comunitech.co.za
sam.pioneer.com.ph
smartkargo.com
volarisy4.smartkargo.com
testemiratesdelivers.smartkargo.com
support.nextgi.com
support.discountsolo401k.com
masairstaging.smartkargo.com
copa.smartkargo.com
bsstaging.smartkargo.com
support.nextgi.com
deskportal.softdebut.com
*.smartkargo.com
suporte-obot.outth.ink
hawaiian.smartkargo.com
admin-testemiratesdelivers.smartkargo.com
www.smartkargo.com
*.smartkargo.com
skpt.smartkargo.com
lascargo.smartkargo.com
copa.smartkargo.com
amerijettesting.smartkargo.com
www.smartkargo.com
soporte.icrm.mx
help.preciousnine.com
smartkargo.com
alaskaairtesting.smartkargo.com
help.customary.dev
dy.smartkargo.com
www.smartkargo.com
*.smartkargo.com
smartkargo.com
desk.stratex.jp
smartkargo.com
suporte-obot.outth.ink
suporte-obot.outth.ink
vietjettesting.smartkargo.com
ustoy.digitalmaelstrom.net
assist.hogarcontrols.com
testemiratesdelivers.smartkargo.com
www.smartkargo.com
ekcmsdevtest.smartkargo.com
www.smartkargo.com
aerolineas.smartkargo.com
support.nextgi.com
smartkargo.com
deskportal.softdebut.com
morganandjustice.microman.com
suporte-obot.outth.ink
cebu.smartkargo.com
help.preciousnine.com
www.smartkargo.com
www.smartkargo.com
masair.smartkargo.com
sam.pioneer.com.ph
atendimento.inuv.com.br
poccustomerportal.smartkargo.com
www.smartkargo.com

Certificate

The complete raw certificate details for ekcmsdevtest.smartkargo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK+L07ElRp0sEU9NyL3G
s8c8O55wtHXFWLPJWpQMwmiDx/23Pn9ilAegouJ0jlJsoFC26cmXBu3bS4f9Br9L
65oV6N1D5kvwgrl75e+8u3wogZRn/3R5VIxRQzJGiitVsqVG3iN/91rzNYBPIMXa
NE7R2kXiWqpAQYxZP0KRVZ1NAnM8pbE94XcsMutjVRqu+prISJ1AKzs9i636KB+E
5yRhOQHlXsFUH4WnbXQ1KqsEmRXf6xxniVtLOep3YrHJS6e/QJV3DIN9VBkRm/7c
c/qupd/3Aq9b8UQVKFVXH9eI0EMiruc4YTs3/uzrJ+RtUHgA7FGD/k/oxV9iVPLc
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13559194666198056155424242840748880177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ekcmsdevtest.smartkargo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22304506731034270959249424957763204289546593311412259845043427705157615169961398684365654252782956082102512017880313614646616242342352185344084839324886811616822086902226860901202941370036666344041175320905872061875313928868809445174758891051586710620135465757290314551969698214959891388295762213316008050806352635575962670314337156529948179070528408230676507028683145657245224573710001251410582537296931315516471439744217096035806325233790172666468922628370299943440086703176522576964301987039380566930392122279178990459950639027802831024253117887447257856647895889524606215338992328152308636641419718073846273858809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a02b9819560a58e6c3705a468d9aff0579a90673
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekcmsdevtest.smartkargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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