CMAHK-EE.asia.cma-cgm.com

- CMA CGM S.A. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0a:a8:ec:ad:df:85:77:c5:db:2f:86:50:fc:00:b4:1d was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CMA CGM S.A.

Organization: CMA CGM S.A.
State / Province: Provence-Alpes-Côte d'Azur
Locality: Marseille
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:a8:ec:ad:df:85:77:c5:db:2f:86:50:fc:00:b4:1d
Serial Number (int): 14169386254398096468164379335538553885
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ef:00:86:52:63:03:f0:1d:ae:89:c7:e4:97:d3:25:75:eb:f2:cd:88
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 7c:ef:a6:a8:db:b8:76:4f:60:a6:de:c3:d9:65:55:7b:a0:a3:23:5b
Fingerprint (sha256): 13:8e:a7:b4:82:42:4f:68:c6:13:75:24:20:e0:82:e8:59:79:f9:a1:c2:1f:b1:44:93:33:04:24:9d:2d:10:be

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate CMAHK-EE.asia.cma-cgm.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CMAHK-EE.asia.cma-cgm.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

CMAHK-EE.asia.cma-cgm.com
CMAHK-EE01.asia.cma-cgm.com
CMAHK-EE02.asia.cma-cgm.com
asia.cma-cgm.com

Other certificates including the domain name cma-cgm.com

(limited to 100 certificates)
eye.cybersecurity.cma-cgm.com
cdrsharepoint.cma-cgm.com
www.quantil.com
departments.mira-ng.cma-cgm.com
mrs-vs-00588.cma-cgm.com
inlandtariffs.cma-cgm.com
cart.cma-cgm.com
*.quantil.com
brsaoccw-vepe01.america.cma-cgm.com
dcs.cma-cgm.com
www.quantil.com
www.cma-cgm.com
LINES.MIRA-NG.CMA-CGM.COM
teamsite.cma-cgm.com
*.cma-cgm.com
mta.survey.cma-cgm.com
lisa.m.cma-cgm.com
sapdatamig.cma-cgm.com
mail.usa.cma-cgm.com
stackingperiod-id.cma-cgm.com
lyncpool.im.cma-cgm.com
join.cma-cgm.com
edi-ac-uat.ws.cma-cgm.com
LINESERVICES.CMA-CGM.COM
ecampus.cma-cgm.com
www.apl.com
realestate.cma-cgm.com
*.usa.cma-cgm.com
lines.mira-ng.cma-cgm.com
tsg-app-pre.cma-cgm.com
laragrm.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
cme.cma-cgm.com
teamsite.cma-cgm.com
digital-services-apis.cma-cgm.com
laragrm.cma-cgm.com
edi-ac-pre.ws.cma-cgm.com
eservices.cma-cgm.com
cma-cgm.com
extid.cma-cgm.com
hybrid1.cma-cgm.com
agency.cma-cgm.com
cmamail.cma-cgm.com
apps.asia.cma-cgm.com
www-orig.anl.com.sg
tsg-app-prd.cma-cgm.com
eye.news.cma-cgm.com
www.cma-cgm.com
C-ME.CMA-CGM.COM
wac2013.cma-cgm.com
freddie.cma-cgm.com
auth-pre.cma-cgm.com
CMAHK-EE.asia.cma-cgm.com
www.quantil.com
www.quantil.com
www.quantil.com
beta.cma-cgm.com
signing-auth.cma-cgm.com
c-me.cma-cgm.com
demadminrh.cma-cgm.com
cdrsharepoint.cma-cgm.com
jobme.cma-cgm.com
ebusiness.cma-cgm.com
*.cma-cgm.com
cmaid.cma-cgm.com
lineservices.cma-cgm.com
eservices.cma-cgm.com
www.quantil.com
signing-auth-pre.cma-cgm.com
dcs.cma-cgm.com
usorfccw-snm002.usa.cma-cgm.com
csg02.cma-cgm.com
ext-tw.cma-cgm.com
tsg-euroinfo-saa-uat.cma-cgm.com
*.usa.cma-cgm.com
cmaedi.cma-cgm.com
vegapps.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
mira-group.cma-cgm.com
others.mira-ng.cma-cgm.com
realestate.cma-cgm.com
shiptracking.cma-cgm.com
camp.cma-cgm.com
www.cma-cgm.com
bna-sv-cucc1.usa.cma-cgm.com
realestate-test.cma-cgm.com
tariff.apl.com
mtl-webmail.usa.cma-cgm.com
camp.cma-cgm.com
lisa-uat.m.cma-cgm.com
imars.cma-cgm.com
hybrid1.cma-cgm.com
tsg-euroinfo-saa-pre.cma-cgm.com
auth.cma-cgm.com
www.quantil.com
shiptracking.cma-cgm.com
join.cma-cgm.com
demadminrh.cma-cgm.com

Certificate

The complete raw certificate details for CMAHK-EE.asia.cma-cgm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14169386254398096468164379335538553885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Provence-Alpes-Côte d'Azur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marseille'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CMA CGM S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CMAHK-EE.asia.cma-cgm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838492145010139752145759550910656453629026628879453966125243159511829124247232658239427217079676107505019898834478028856016454303244130213129852051038583200181679653233432789756824094610712163998058752437456922946397352796716877103158254655731426907688099429211359130568835664193585839903925370275775839432304848730090647589717003676437932035457155561206584052866716883576613365212578319401943657352784413847757424752261286338917869340637590430326009008439419522878499161058860160961986742440385477212059620977058058863418824841079446155974348854874163500201431627185461867246976632784016433924642117621772192134213945194817709210104744295816862013839816380591369903683133647920775352049774795364450368695861336658669572513049671112203802364825488494886043047890851220597419447543363397499736639968280371014493328986453632442808242211751754166077539406729506427288699791285637535784221712477067147062493511229322864291844929300243436503667233801577048787655386426760848330208163599438508437261578876805166399024396015924860217364819175325176064991760523166336117433365928884272936501080951532557459950016668226602021770100152560259688959838530865692430199423717696080196538622157858833547687868401155979601042654227381256804011036253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef0086526303f01dae89c7e497d32575ebf2cd88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CMAHK-EE.asia.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CMAHK-EE01.asia.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CMAHK-EE02.asia.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.cma-cgm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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