simulation.tmforcemobile.tm.com.my

- Telekom Malaysia Berhad -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 0f:2e:cf:49:2f:30:0e:67:70:a1:8e:33 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Telekom Malaysia Berhad

Organization: Telekom Malaysia Berhad
State / Province: Kuala Lumpur
Locality: Kuala Lumpur
Country: MY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:2e:cf:49:2f:30:0e:67:70:a1:8e:33
Serial Number (int): 4698864614896953926363483699
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: ce:e4:88:9a:e3:06:41:74:28:4a:a6:7e:ed:a3:57:75:bd:e7:0a:60
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): cf:a8:18:1c:58:76:39:fc:6c:91:3f:61:ad:84:f7:4c:f7:73:0a:7d
Fingerprint (sha256): 06:84:a5:f8:60:1e:3e:61:37:ce:1d:2e:09:79:2b:2f:4e:90:ff:7a:42:43:0f:6e:eb:aa:a0:4c:9c:4a:bb:4f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate simulation.tmforcemobile.tm.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for simulation.tmforcemobile.tm.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

simulation.tmforcemobile.tm.com.my

Other certificates including the domain name tm.com.my

(limited to 100 certificates)
*.tm.com.my
speedtest-sarawak.tm.com.my
speedtest.tm.com.my
fme.tm.com.my
analytics.tm.com.my
npcsposdev.tm.com.my
osesdr.tm.com.my
www.tm.com.my
incapsula.com
owa.tm.com.my
npcscpsdev.tm.com.my
adfsdev.tm.com.my
pagtestigrid.tm.com.my
www.tm.com.my
fylia-api.tm.com.my
iris2.tm.com.my
gems.tm.com.my
wira-pt.tm.com.my
oses.tm.com.my
speedtestklg-tmone.tm.com.my
geomatics.tm.com.my
npcsposdev.tm.com.my
topdashboard.tm.com.my
tmbilling.tm.com.my
ytmapps.tm.com.my
adminflow.tm.com.my
ranger.dl.tm.com.my
gpos.tm.com.my
daniahive.tm.com.my
gems.tm.com.my
eform.tm.com.my
www.smartmap.tm.com.my
magna-octopus.tm.com.my
simulation.tmforcemobile.tm.com.my
wiraa.tm.com.my
cmdb.tm.com.my
infraonunms.tm.com.my
www.eyes.tm.com.my
adfs.tm.com.my
fylia-api.tm.com.my
nifi.dl.tm.com.my
tmcbcr.tm.com.my
ytmscholar.tm.com.my
adaudit.tm.com.my
serviceprofile.tm.com.my
gemsq.tm.com.my
intra.tm.com.my
wira-test.tm.com.my
hc.tm.com.my
mobile1.cpams.tm.com.my
unifisearch2.tm.com.my
acssit.tm.com.my
tbdev.flash.tm.com.my
icareprime.tm.com.my
ecert.tm.com.my
tbdev.flash.tm.com.my
pos.tm.com.my
mercis.tm.com.my
cpams.tm.com.my
xpapisit.tm.com.my
livechat.tm.com.my
paymenttestigrid.tm.com.my
mercis.tm.com.my
securemail.tm.com.my
iris2sp.tm.com.my
ipnpm2.tm.com.my
salesperformance.tm.com.my
dps.tm.com.my
fme.tm.com.my
imperva.com
rfcms.tm.com.my
tmed.intra.tm.com.my
tmlinx2005.tm.com.my
webmail2014.tm.com.my
unifi.com.my
npcscps.tm.com.my
precise.tm.com.my
taas-apigwtest02.tm.com.my
webmail2014.tm.com.my
tmbizonline.tm.com.my
tmig.tm.com.my
daniaedge.tm.com.my
iris3.tm.com.my
douit.tm.com.my
trust.tm.com.my
speedtest-northern.tm.com.my
sit.tm.com.my
cams.tm.com.my
archival.tm.com.my
cloudcheckmobile.tm.com.my
www.sub.tm.com.my
gemselp.tm.com.my
dylia-api.tm.com.my
traceapp.tm.com.my
webflow.tm.com.my
gems.tm.com.my
scms.tm.com.my
hub.tm.com.my
taastrack.tm.com.my
iot.oip.tm.com.my

Certificate

The complete raw certificate details for simulation.tmforcemobile.tm.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvfG+cD8Bk9jb+fC45K1
Vxc4TS3h53HX+itY0YVg7CHsFKK0IpFtlXcv2nL0KJWR/uAAdBtTdVppyP29yFBc
i2xla/5Dq3x2Lf8nMhGhGWm63ikKaBdcyEdRvzFmC/Gt2qXu4u22E2oZ+y+js88U
atsc5ZR2QC7b9AbORoQP+qIAaXSi9IHxi8j1D/1A40DctKrmu1kMbUYyHQHF3m+l
Tfcpn+EqtHOiOTj+3l/EJMJr+sFZuQi+3vjwpWU/B7BB6A++WwtrURMS4VNhJMmU
fRXgqhVJdgUA+/ft+lAs1InpQkHJ9A/Mq38f2OPr9kX3nypUO3UCRNZcgMu9KzAy
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4698864614896953926363483699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 01:51:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-27 01:51:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Telekom Malaysia Berhad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'simulation.tmforcemobile.tm.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23602508238735251653168062042485835359086473982346386913695764535122756524591483252355935271213412534804268321685570178572643144365702954900817308278486720793009164410084589140416423930238098277186135832133940811012748448159020015590087596810191442866205757911711531238392712426873137428768149233959798806889827090741809393584748656486684653244251397438123515483104893485781925805785133823391600250016407327828675068479488957080518707653530182194075470461679065845786397751950150612759824918330810457075921366951158094274992511496130174627885069531193880757081255101078456604280710751179890789860696390057203166360301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulation.tmforcemobile.tm.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cee4889ae3064174284aa67eeda35775bde70a60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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