www-orig.anl.com.sg

- CMA CGM S.A. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:fa:68:de:c5:26:c3:dc:00:38:8d:0e:ed:64:18:c8 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CMA CGM S.A.

Organization: CMA CGM S.A.
Locality: Marseille
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:fa:68:de:c5:26:c3:dc:00:38:8d:0e:ed:64:18:c8
Serial Number (int): 7946341213824555247772803602883811528
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 54:16:da:27:4c:41:c9:c6:6e:4c:7c:96:1c:60:9a:c5:78:32:dd:06
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 16:62:6a:08:ff:a5:ec:65:29:a9:2b:7e:6f:16:e5:e1:3e:63:1e:8b
Fingerprint (sha256): 10:70:7f:5e:bc:7f:27:7f:b5:0e:69:4f:fa:6c:5c:2e:82:1b:19:59:9e:12:9d:a6:3b:02:99:e0:38:17:11:d0

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate www-orig.anl.com.sg

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-orig.anl.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-orig.anl.com.sg
www.anl.com.sg
anl.com.sg
www-orig.anlcomsg.cma-cgm.com
monitor-www-orig.anl.com.sg
monitor-akamai.anl.com.sg
monitor-verizon.anl.com.sg
monitor-chinanet.anl.com.sg

Other certificates including the domain name anl.com.sg

(limited to 100 certificates)
cma-cgm.com
www-orig.anl.com.sg
www.cma-cgm.com
cma-cgm.com
cma-cgm.com
www-orig.anl.com.sg
www.cma-cgm.com
cma-cgm.com
www.cma-cgm.com
cma-cgm.com
www-orig.anl.com.sg

Certificate

The complete raw certificate details for www-orig.anl.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6R2L9aJeX9W3D9ImNYW
eIASHuet0RkVeYTHE6Nlp96RnksiYUJeeoIhcbyz5xWUZaziHJxzEpoL8bmLuC5G
NbmKBdpu1+i1j2p1FtSARbqfMuoTAPV0UO6aTE03SVzKUMGwV34FPm+vbi0qW34I
crcVcbyM5z242/L/YvtSunuR/tkaomeLQL/pBwVYCy3KqmUoaS8pYsIuAil6usWi
/W5FG86S8S8uZLO1yyqNVbvCYtQfujDhBlqt0nTSypPFc+vbZKz5jqu4BlVSmzR0
xOODPNpwe+9vAcW6NWn2jiFSCd9OJpUNcSoNA1Lmbv2Ek0nVnRg5W617N5G88A9b
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7946341213824555247772803602883811528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marseille'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CMA CGM S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-orig.anl.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18133176680969981611710705210622123961937447949911450730041484729655057706806504284673875169967697593294268176559729138999494377806956014843790814070814337601621044225416270465393908566271431664235026924223514887587918313995883595331230450820374302885412370947958369155486138311441923232268270011928424436061610999389019728198424437831584782734318569192568421537534373416064772658252566164217523152836264957685844661855965409140437831510352100875306561432037268253585732969403433798530126456325707831966921481246320104051977571361105423229435850443085815299813157797569014016428149507241306056431690977839624559221523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5416da274c41c9c66e4c7c961c609ac57832dd06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-orig.anl.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anl.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anl.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-orig.anlcomsg.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-www-orig.anl.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-akamai.anl.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-verizon.anl.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-chinanet.anl.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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