tsg-app-prd.cma-cgm.com

- CMA CGM -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 58:02:03:53:2f:3c:c5:bf:01:4b:7c:3f:97:67:77:ee was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CMA CGM

Organization: CMA CGM
Organization unit: CMA CGM
State / Province: Bouches-du-Rhone
Locality: Marseille
Country: FR

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:02:03:53:2f:3c:c5:bf:01:4b:7c:3f:97:67:77:ee
Serial Number (int): 116982515660575230950142018612265187310
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 3d:8a:54:51:4a:15:3f:23:61:f1:20:60:ad:36:37:fe:55:3f:4c:f0
Fingerprint (sha256): 10:80:43:2c:41:42:97:d1:8b:b8:8c:c6:32:fd:51:07:7e:25:5f:6e:1b:bd:41:01:99:57:db:03:88:5a:7e:51

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate tsg-app-prd.cma-cgm.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tsg-app-prd.cma-cgm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tsg-app-prd.cma-cgm.com

Other certificates including the domain name cma-cgm.com

(limited to 100 certificates)
eye.cybersecurity.cma-cgm.com
cdrsharepoint.cma-cgm.com
www.quantil.com
departments.mira-ng.cma-cgm.com
mrs-vs-00588.cma-cgm.com
inlandtariffs.cma-cgm.com
cart.cma-cgm.com
*.quantil.com
brsaoccw-vepe01.america.cma-cgm.com
dcs.cma-cgm.com
www.quantil.com
www.cma-cgm.com
LINES.MIRA-NG.CMA-CGM.COM
teamsite.cma-cgm.com
*.cma-cgm.com
mta.survey.cma-cgm.com
lisa.m.cma-cgm.com
sapdatamig.cma-cgm.com
mail.usa.cma-cgm.com
stackingperiod-id.cma-cgm.com
lyncpool.im.cma-cgm.com
join.cma-cgm.com
edi-ac-uat.ws.cma-cgm.com
LINESERVICES.CMA-CGM.COM
ecampus.cma-cgm.com
www.apl.com
realestate.cma-cgm.com
*.usa.cma-cgm.com
lines.mira-ng.cma-cgm.com
tsg-app-pre.cma-cgm.com
laragrm.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
cme.cma-cgm.com
teamsite.cma-cgm.com
digital-services-apis.cma-cgm.com
laragrm.cma-cgm.com
edi-ac-pre.ws.cma-cgm.com
eservices.cma-cgm.com
cma-cgm.com
extid.cma-cgm.com
hybrid1.cma-cgm.com
agency.cma-cgm.com
cmamail.cma-cgm.com
apps.asia.cma-cgm.com
www-orig.anl.com.sg
tsg-app-prd.cma-cgm.com
eye.news.cma-cgm.com
www.cma-cgm.com
C-ME.CMA-CGM.COM
wac2013.cma-cgm.com
freddie.cma-cgm.com
auth-pre.cma-cgm.com
CMAHK-EE.asia.cma-cgm.com
www.quantil.com
www.quantil.com
www.quantil.com
beta.cma-cgm.com
signing-auth.cma-cgm.com
c-me.cma-cgm.com
demadminrh.cma-cgm.com
cdrsharepoint.cma-cgm.com
jobme.cma-cgm.com
ebusiness.cma-cgm.com
*.cma-cgm.com
cmaid.cma-cgm.com
lineservices.cma-cgm.com
eservices.cma-cgm.com
www.quantil.com
signing-auth-pre.cma-cgm.com
dcs.cma-cgm.com
usorfccw-snm002.usa.cma-cgm.com
csg02.cma-cgm.com
ext-tw.cma-cgm.com
tsg-euroinfo-saa-uat.cma-cgm.com
*.usa.cma-cgm.com
cmaedi.cma-cgm.com
vegapps.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
mira-group.cma-cgm.com
others.mira-ng.cma-cgm.com
realestate.cma-cgm.com
shiptracking.cma-cgm.com
camp.cma-cgm.com
www.cma-cgm.com
bna-sv-cucc1.usa.cma-cgm.com
realestate-test.cma-cgm.com
tariff.apl.com
mtl-webmail.usa.cma-cgm.com
camp.cma-cgm.com
lisa-uat.m.cma-cgm.com
imars.cma-cgm.com
hybrid1.cma-cgm.com
tsg-euroinfo-saa-pre.cma-cgm.com
auth.cma-cgm.com
www.quantil.com
shiptracking.cma-cgm.com
join.cma-cgm.com
demadminrh.cma-cgm.com

Certificate

The complete raw certificate details for tsg-app-prd.cma-cgm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/2Xfhv7fxwznCjhuEvG
4C9pR1xdYC3rKNLFNfXofIsusghBBydSWp7J+GRCLTE5PG6uKFaBl4DbM0zq3igA
vKdxZ/iq5mFuc0e+vYxYoLYAv/0eGYcb1rfbPW+s2MnT8aJPdlV3I0CVmtQ6LSGP
+vCyjEFCcF0ntkhXrwabgJ7EhBubA748be2Ho3f+K8Wib/IYY1alaCVDph0nGlaS
aRcPOwlkRkZhYR2DkAbT5MC+R4kZiYo8FqVQmq4scg6ztFV6gj7BRHa7zJIyaOtd
WH4nD+xIt5GiUpv8VkG70UizyF0swtIexZCxmpUIpiy9GKdvazTOxCB1i2Mm49AA
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116982515660575230950142018612265187310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bouches-du-Rhone'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Marseille'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CMA CGM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CMA CGM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tsg-app-prd.cma-cgm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26761333109357354618966861935742288244873269594801221778978380349515757147408763586658233904102460599285744206306763137884282572526609808081427898780174228198063645008979475299495315861753194004670440422256382862341045755850582497494936980127743897242888276252095935083677202255992803159195954912878724043072999658394364039805765258053963702428151175807031319668511433949316876612625577735271385747418315478575960448294397788568982294593744884352205496949628245239688621690118151998896465508153080130679576154474259508248790424107541284634510579106876603307102831073597451378804073344522609690728908165726337089142863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsg-app-prd.cma-cgm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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