designsystem.maersk.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:bc:1c:b1:92:9b:2e:d0:c5:82:6b:3b:42:ba:ab:83 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=designsystem.maersk.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:bc:1c:b1:92:9b:2e:d0:c5:82:6b:3b:42:ba:ab:83
Serial Number (int): 11610557751909957864923496938326371203
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ed:9c:af:aa:3f:3a:02:f9:77:8f:03:65:2f:0f:3f:d0:5c:4c:67:f6
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 35:31:b7:3a:55:aa:12:51:5a:25:05:c3:ea:67:01:24:14:45:0c:2f
Fingerprint (sha256): 1a:c2:ab:d0:f0:3e:d4:de:d6:b0:d9:e8:d6:27:e8:f1:f3:ae:09:fa:93:78:7d:90:08:32:aa:65:07:bc:b2:ae

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate designsystem.maersk.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for designsystem.maersk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

designsystem.maersk.com

Other certificates including the domain name maersk.com

(limited to 100 certificates)
www.maersk.com
api-cdt.maersk.com
contract-management.api.maersk.com
mercury.digitalportal.maersk.com
click.e.maersk.com
stage.maersk.com
www.maersk.com
routing-dev.env.dynamicnet.maersk.com
www.maersk.com
webmail.maersk.net
ap2.007d.dedicated.lync.com
stage2.maersk.com
maersk.com
aomonitoring.maersk.com
authd.maersk.com
fs.maerskline.com
stage2.maersk.com
unilever.omswca.maersk.com
snife75gl.wpc.edgecastcdn.net
webmail.apmoller.com
stage2.maersk.com
terraform.hosting.maersk.com
snife76gl.wpc.edgecastcdn.net
www.myenergy.kvali.live
www.maersk.com
brandcentral.maersk.com
omst.maersk.com
gmp.maersk.com
stage.maersk.com
*.erp.maersk.com
emanaged.maersk.com
stage2.maersk.com
location.api-cdt.maersk.com
maerskline.com
cert00028-azurecdn.akamaized.net
ctxportal.maersk.com
gmp.maersk.com
webmail.apmoller.com
stage.maersk.com
*.maersk.com
stage.apmterminals.com
www.maersk.com
aver-dev.env.dynamicnet.maersk.com
uescpcd.maersk.com
delivers.maersk.com
dm.maersk.com
cert00028-azurecdn.akamaized.net
leapfrog-ssl-13.gcs-web.com
*.maersk.com
www.maersk.com
leapfrog-ssl-13.gcs-web.com
rcmazure.maersk.com
eascpcd.maersk.com
leapfrog-ssl-13.gcs-web.com
www.maersk.com
help.ecl-platform-hello.maersk.com
akamai-san54.exacttarget.com
brandcentral.maersk.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-13.gcs-web.com
api.productmanagement.maersk.com
api-cdt.maersk.com
mobilerss.maersk.com
br.maersk.com
gmp.maersk.com
leaf.ocf.fulfillment.maersk.com
www.maersk.com
rcmpp.maersk.com
campaigns.maersk.com
stage.maersk.com
emanaged.maersk.com
cert00028-azurecdn.akamaized.net
leapfrog-ssl-13.gcs-web.com
scpdev2.maersk.com
designsystem.maersk.com
stage.maersk.com
ams-stg.wdp.maersk.com
maersk.com
metsmod-stage.maersk.com
maerskstories.maersk.com
*.cbe.maersk.com
routing-ppd.dynamicnet.maersk.com
wms1-nas.maersk.com
leapfrog-ssl-13.gcs-web.com
digitalportal.maersk.com
www.ecardgreetings.maersk.com
stage.maersk.com
careers.maersk.com
ctxportal.maersk.com
offers.api-cdt.maersk.com
tms.ocf.fulfillment.maersk.com
wms1-eur.maersk.com
fs.maerskline.com
www.maersk.com
www.maersk.com
leapfrog-ssl-13.gcs-web.com
aomonitoring.maersk.com
unilevermaersk.omswca.maersk.com
united-om-cdt.maersk.com
dc.maersk.com

Certificate

The complete raw certificate details for designsystem.maersk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofsSCxVQ7fV9sF79JmZy
t8baFPgqC4LYX9pWH/QKCVpvwSuE7Ir3XJQbuSMVkNkVEa2fAnxsVWWdR260QUl8
629Rner9CWmIfiz4/VHr69NsDyAELA8EWLLUifObRADcXuTo9tMG8mDMHeQSdjC+
4kVKWNMNIcO2oKbtYj5CJ9qc9CpxNOpU2WSanZDEEMIhX1LafEVQpPge3CG6EMSK
M6OXM4xP/mYl3RAg9qtMvazGAxXgIKYOLEY0GV5K6oglwuBunbDF2dgZGRk39LhP
EZONmEpAU7gsLnfq+RZsD2VqDRYZ3idsPoLv8ZErxBlNIlPXgrJoHU73aDYQXOC7
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11610557751909957864923496938326371203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'designsystem.maersk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20448174568388445397692013303326450116356115654578715846879066347069839289576666269408709118401710514199647673573187718571768748858962237486526790015665939593624057889122781027574527654694465498218107507746482490230470774982184065368837984119142392165276667665829611114964445917002249377516517756663536392608524978885993981091172908509724446595929342638204061808163422105112995231369223897188749804776276673145266574368276312451100341442953903929085275628583289857614874991615499496295347504686992389635744452975141624494383786240111575678027742069962816315208921087942104321293617621407931985228317564639704663505781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed9cafaa3f3a02f9778f03652f0f3fd05c4c67f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designsystem.maersk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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