gmp.maersk.com

- A.P. Moller - Maersk A/S -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 23:f8:2b:04:f1:23:8e:46:be:bc:1c:58:74:e9:24:8f was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

A.P. Moller - Maersk A/S

Organization: A.P. Moller - Maersk A/S
Organization unit: Global Marine Payroll
State / Province: Copenhagen
Locality: Copenhagen
Country: DK

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 23:f8:2b:04:f1:23:8e:46:be:bc:1c:58:74:e9:24:8f
Serial Number (int): 47811542008543171534081607867587699855
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 8d:e3:7c:8a:db:1b:74:d2:c9:88:33:f8:0b:03:8e:95:cb:9b:e0:7c
Fingerprint (sha256): 0c:c4:5e:91:60:8b:b1:99:12:50:4b:d1:48:93:7a:8a:7a:ee:72:0e:96:70:e3:d9:11:41:2b:e4:d4:39:89:57

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate gmp.maersk.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gmp.maersk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gmp.maersk.com

Other certificates including the domain name maersk.com

(limited to 100 certificates)
www.maersk.com
api-cdt.maersk.com
contract-management.api.maersk.com
mercury.digitalportal.maersk.com
click.e.maersk.com
stage.maersk.com
www.maersk.com
routing-dev.env.dynamicnet.maersk.com
www.maersk.com
webmail.maersk.net
ap2.007d.dedicated.lync.com
stage2.maersk.com
maersk.com
aomonitoring.maersk.com
authd.maersk.com
fs.maerskline.com
stage2.maersk.com
unilever.omswca.maersk.com
snife75gl.wpc.edgecastcdn.net
webmail.apmoller.com
stage2.maersk.com
terraform.hosting.maersk.com
snife76gl.wpc.edgecastcdn.net
www.myenergy.kvali.live
www.maersk.com
brandcentral.maersk.com
omst.maersk.com
gmp.maersk.com
stage.maersk.com
*.erp.maersk.com
emanaged.maersk.com
stage2.maersk.com
location.api-cdt.maersk.com
maerskline.com
cert00028-azurecdn.akamaized.net
ctxportal.maersk.com
gmp.maersk.com
webmail.apmoller.com
stage.maersk.com
*.maersk.com
stage.apmterminals.com
www.maersk.com
aver-dev.env.dynamicnet.maersk.com
uescpcd.maersk.com
delivers.maersk.com
dm.maersk.com
cert00028-azurecdn.akamaized.net
leapfrog-ssl-13.gcs-web.com
*.maersk.com
www.maersk.com
leapfrog-ssl-13.gcs-web.com
rcmazure.maersk.com
eascpcd.maersk.com
leapfrog-ssl-13.gcs-web.com
www.maersk.com
help.ecl-platform-hello.maersk.com
akamai-san54.exacttarget.com
brandcentral.maersk.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-13.gcs-web.com
api.productmanagement.maersk.com
api-cdt.maersk.com
mobilerss.maersk.com
br.maersk.com
gmp.maersk.com
leaf.ocf.fulfillment.maersk.com
www.maersk.com
rcmpp.maersk.com
campaigns.maersk.com
stage.maersk.com
emanaged.maersk.com
cert00028-azurecdn.akamaized.net
leapfrog-ssl-13.gcs-web.com
scpdev2.maersk.com
designsystem.maersk.com
stage.maersk.com
ams-stg.wdp.maersk.com
maersk.com
metsmod-stage.maersk.com
maerskstories.maersk.com
*.cbe.maersk.com
routing-ppd.dynamicnet.maersk.com
wms1-nas.maersk.com
leapfrog-ssl-13.gcs-web.com
digitalportal.maersk.com
www.ecardgreetings.maersk.com
stage.maersk.com
careers.maersk.com
ctxportal.maersk.com
offers.api-cdt.maersk.com
tms.ocf.fulfillment.maersk.com
wms1-eur.maersk.com
fs.maerskline.com
www.maersk.com
www.maersk.com
leapfrog-ssl-13.gcs-web.com
aomonitoring.maersk.com
unilevermaersk.omswca.maersk.com
united-om-cdt.maersk.com
dc.maersk.com

Certificate

The complete raw certificate details for gmp.maersk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+i7ESAMQlM38hBMYPGmT
ltmM4tUUq0TK2V9nKv2xJQ6Mn91LKj3VuWjVTNChQ1OTlT9gQxobMZWMF/5Xz4uF
lH4R3f5ruRxluk4K0pH4lQEObEk/fL7z+lCY21GYg69bt//E9wr6XRgIx4EDPFzQ
5kibF2kWYfWAbdn9U5iKAubeM8qoUYY2XQZxJlYPoJg+9ddJ+rSpZwJxODEEcpK8
JeLZ3TN5KXCZO6y8zaMcxwt1g40VLxzn8uwGctFMEDaPszrRR5Ixs0TLQvXiYXbn
TvY8B3Ykk7IV8qJEMQArqxEdLCmm5f4WmrSaVklcZKWGdT5QSiVTujlbHt95lv1Y
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47811542008543171534081607867587699855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Copenhagen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Copenhagen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'A.P. Moller - Maersk A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Global Marine Payroll'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gmp.maersk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31582637772543104365440243762625954327995953071686344437338538612302498661382505739001114456269804311758405206089445105959906916216189065123311028486477292105188569918933568349735120937466092062338421532031087618829185569047764355329446133562179590615068421420197351345893700434708117296316313262969621026000056387936583750550372512231508194257562880495606220582169570603687517456571483463839640151331707119495770692872651571026930442027951670255636371318962168859246748743290670587065046473222376034331473195743967088714942263056443735062892762105707603772755736516817123172995147516797154235612856877211070045706259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmp.maersk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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