www.celcom.com.my

- Celcom Axiata Berhad -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 57:a8:2b:1d:46:cd:4b:e0:9b:9b:f0:29:56:60:a1:5e was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Celcom Axiata Berhad

Organization: Celcom Axiata Berhad
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: Kuala Lumpur
Locality: Kuala Lumpur
Country: MY

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:a8:2b:1d:46:cd:4b:e0:9b:9b:f0:29:56:60:a1:5e
Serial Number (int): 116516015968663340721003218855761322334
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): 33:38:37:f1:e1:82:ce:32:4c:ff:1a:78:a1:70:68:4a:d1:f9:a3:37
Fingerprint (sha256): 0a:1c:54:f0:e1:a9:de:28:ad:87:4b:2d:b5:39:df:38:e4:9c:1b:3f:db:ec:8e:12:00:d4:b3:d7:5b:b5:73:b3

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate www.celcom.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.celcom.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.celcom.com.my

Other certificates including the domain name celcom.com.my

(limited to 100 certificates)
secure07.stage.lithium.com
secure07.stage.lithium.com
emc.celcom.com.my
dlp.celcom.com.my
secure04.lithium.com
adfs.celcom.com.my
ontrek.celcom.com.my
mvnocc.celcom.com.my
easyreloadsystem.celcom.com.my
cibs.celcom.com.my
secure04.lithium.com
hrmsweb.celcom.com.my
apigw.celcom.com.my
blade.celcom.com.my
easyreloadsystem.celcom.com.my
www.store.celcom.com.my
cems.celcom.com.my
shop.celcom.com.my
secure10.lithium.com
mftp.celcom.com.my
store.celcom.com.my
nextpay.celcom.com.my
secure07.stage.lithium.com
nextpay.celcom.com.my
zoomhub.celcom.com.my
rover.celcom.com.my
secure07.stage.lithium.com
emc.celcom.com.my
easyreloadsystem.celcom.com.my
secure04.lithium.com
secure07.stage.lithium.com
www.celcom.com.my
auth.eptw.celcom.com.my
secure04.lithium.com
secure10.lithium.com
Omnicom.celcom.com.my
www.deviceselfcare.celcom.com.my
next.celcom.com.my
secure04.lithium.com
secure04.lithium.com
ebilling.celcom.com.my
intapi.celcom.com.my
mftp.celcom.com.my
itsm.celcom.com.my
paymentgateway.celcom.com.my
zoomhub.celcom.com.my
secure04.lithium.com
cems.celcom.com.my
vpn.celcom.com.my
secure07.stage.lithium.com
secure10.lithium.com
pearls.celcom.com.my
mail.celcom.com.my
empapp.celcom.com.my
cmmp.celcom.com.my
integritystablepay.com
apm-appmon.celcom.com.my
secure04.lithium.com
secure04.lithium.com
chatbotrespage.celcom.com.my
admin.prebootcamp.makers.kg
flashpath.app
ebilling.celcom.com.my
coverage.celcom.com.my
mftp.celcom.com.my
www.store.celcom.com.my
nextpay.celcom.com.my
es.celcom.com.my
m2mconnect.celcom.com.my
itsm.celcom.com.my
mobile-oneapp.celcom.com.my
cmp.celcom.com.my
celcombluenet.celcom.com.my
personal.1bestarinet.celcom.com.my
secure10.lithium.com
sftp.celcom.com.my
southamerica.ihhsfair.com
www.celcom.com.my
dsaa.celcom.com.my
zoomhub.celcom.com.my
cmp.celcom.com.my
secure04.lithium.com
pimdr.celcom.com.my
eptw.celcom.com.my
secure10.lithium.com
scanmail.celcom.com.my
secure07.stage.lithium.com
secure07.stage.lithium.com
genesis.celcom.com.my
siteproperty.celcom.com.my
payment.celcom.com.my
elmweb.celcom.com.my
secure10.lithium.com
hrmsweb.celcom.com.my
femto.celcom.com.my
www.cheeckbox.com
secure10.lithium.com
autodiscover.celcom.com.my
secure10.lithium.com
secure07.stage.lithium.com

Certificate

The complete raw certificate details for www.celcom.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnytDsPHVKJ/ReiSP/fwB
n7bCupga2z0bv9bJPhCn3fZBLEHMsLz8SBD9VIxveGC97UNduqQsd+1ebW9csVqu
BtcxRAXdjrc+45jQ5u+FcvpmffaVMgQPU9TB2sO+SsZf6gz+unQrmjr/aOk5ltar
43Aqcj3rtHSMOXwVvcO286XpctPu8C5He7col/wXCMVZeGtLnYiA/NzE7XN3IqwU
XgCtn3/AaxT3EhVDViSHV/w5Ll9Rr7M+H4p1MyzlEvTboPdxbR184HEK+qEtOmE6
KFqz/+jLCVrF5bylpPPhsZrpJn/kBEkk34dXnWMDOvNYD+YGBjf4ZCRSVwkpPNYV
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116516015968663340721003218855761322334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Celcom Axiata Berhad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.celcom.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20093224969616784932003905713899798209573461869787747336541377197877758213750799876426813613991028430467584909262419625197748125077829602471867732563972552171828040882350957817398948906387395942738446442986995168468821912160936564944190541427497222319661924399237385529183249691634941441096606499046806617200132421367155923345227085186606425609608520247862445585967336518124633721020775837654567472134296708440760281697879056400047343021364167053788240178614300645878589354849486154786069303914129557217207594225830708202140652242585182924707523365664707766336975101624788468238116212730362670938267163950627004224849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celcom.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030a239afe1d9fc851882ccc50203dd22a786f595494633546f1cd0c2f3bec2f15717e87cc40d5f9db4b0285b411c674d0fca6c7362dd05c920dd77c752e8f1f56979011638f179b2a0abb7a095a0b0c0816e630f10dd150baf55e6d592ee47d4c059521eaf987e8df2eec6351f3a3d38fbcfb1b2e0a38c8ecef20fdb062b493bc2b4ed8cf1835122981d0e6cae64086ff9a1fe774f20e89dd94fdc5dd1882c686e68ecb4ee8ebdfaa85831c5e9591093dd195e27d0d14148e0abf365f6e41482e7da4b9b96bd72197f7e9b7368a492c4d0d2e189e49831de65823c150700b0fc3ddb44a0464d9e368b596e3007ac6c4ef4404ea1fb01509c584036408e6aea35