cmaedi.cma-cgm.com

- CMA CGM S.A. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0a:21:c9:00:b2:e6:9f:2e:57:91:7e:5e:9f:8c:dd:1b was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CMA CGM S.A.

Organization: CMA CGM S.A.
Locality: Marseille
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:21:c9:00:b2:e6:9f:2e:57:91:7e:5e:9f:8c:dd:1b
Serial Number (int): 13467702573878278424376544484389608731
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 26:74:86:e3:f3:65:92:33:6d:4a:bb:72:25:25:ce:1d:37:0c:73:e5
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 31:c4:9d:0a:9f:64:50:f2:e6:ee:e5:e3:4b:61:85:bf:c0:e5:15:82
Fingerprint (sha256): 1b:2a:d2:6d:ec:84:0a:df:de:a4:60:95:5e:5d:32:76:cd:79:0a:5e:ba:06:46:a8:49:61:fa:6f:2c:18:e9:89

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate cmaedi.cma-cgm.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmaedi.cma-cgm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmaedi.cma-cgm.com
smtp.cma-cgm.com
webmail.cma-cgm.com
webmailinternal.cma-cgm.com
download.mail.cma-cgm.com
autodiscover.cma-cgm.com

Other certificates including the domain name cma-cgm.com

(limited to 100 certificates)
eye.cybersecurity.cma-cgm.com
cdrsharepoint.cma-cgm.com
www.quantil.com
departments.mira-ng.cma-cgm.com
mrs-vs-00588.cma-cgm.com
inlandtariffs.cma-cgm.com
cart.cma-cgm.com
*.quantil.com
brsaoccw-vepe01.america.cma-cgm.com
dcs.cma-cgm.com
www.quantil.com
www.cma-cgm.com
LINES.MIRA-NG.CMA-CGM.COM
teamsite.cma-cgm.com
*.cma-cgm.com
mta.survey.cma-cgm.com
lisa.m.cma-cgm.com
sapdatamig.cma-cgm.com
mail.usa.cma-cgm.com
stackingperiod-id.cma-cgm.com
lyncpool.im.cma-cgm.com
join.cma-cgm.com
edi-ac-uat.ws.cma-cgm.com
LINESERVICES.CMA-CGM.COM
ecampus.cma-cgm.com
www.apl.com
realestate.cma-cgm.com
*.usa.cma-cgm.com
lines.mira-ng.cma-cgm.com
tsg-app-pre.cma-cgm.com
laragrm.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
cme.cma-cgm.com
teamsite.cma-cgm.com
digital-services-apis.cma-cgm.com
laragrm.cma-cgm.com
edi-ac-pre.ws.cma-cgm.com
eservices.cma-cgm.com
cma-cgm.com
extid.cma-cgm.com
hybrid1.cma-cgm.com
agency.cma-cgm.com
cmamail.cma-cgm.com
apps.asia.cma-cgm.com
www-orig.anl.com.sg
tsg-app-prd.cma-cgm.com
eye.news.cma-cgm.com
www.cma-cgm.com
C-ME.CMA-CGM.COM
wac2013.cma-cgm.com
freddie.cma-cgm.com
auth-pre.cma-cgm.com
CMAHK-EE.asia.cma-cgm.com
www.quantil.com
www.quantil.com
www.quantil.com
beta.cma-cgm.com
signing-auth.cma-cgm.com
c-me.cma-cgm.com
demadminrh.cma-cgm.com
cdrsharepoint.cma-cgm.com
jobme.cma-cgm.com
ebusiness.cma-cgm.com
*.cma-cgm.com
cmaid.cma-cgm.com
lineservices.cma-cgm.com
eservices.cma-cgm.com
www.quantil.com
signing-auth-pre.cma-cgm.com
dcs.cma-cgm.com
usorfccw-snm002.usa.cma-cgm.com
csg02.cma-cgm.com
ext-tw.cma-cgm.com
tsg-euroinfo-saa-uat.cma-cgm.com
*.usa.cma-cgm.com
cmaedi.cma-cgm.com
vegapps.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
mira-group.cma-cgm.com
others.mira-ng.cma-cgm.com
realestate.cma-cgm.com
shiptracking.cma-cgm.com
camp.cma-cgm.com
www.cma-cgm.com
bna-sv-cucc1.usa.cma-cgm.com
realestate-test.cma-cgm.com
tariff.apl.com
mtl-webmail.usa.cma-cgm.com
camp.cma-cgm.com
lisa-uat.m.cma-cgm.com
imars.cma-cgm.com
hybrid1.cma-cgm.com
tsg-euroinfo-saa-pre.cma-cgm.com
auth.cma-cgm.com
www.quantil.com
shiptracking.cma-cgm.com
join.cma-cgm.com
demadminrh.cma-cgm.com

Certificate

The complete raw certificate details for cmaedi.cma-cgm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO3wIZOopBiPwqg7DWOA
a+VU8KCiZJkYHcuEGIDlyMz78+Q6ryniWuU+F/UYDUPpu7WwvuCsWiR6oDlgMNHN
vVmVxP38Meg5GjWbpMkYkmWwqrj+wApaVR7Zc3tfiEinXhza2LGoK2IJpUbUihAl
vVOAh3RhHYjYiRlZCaWBj/SxLYL5EJO2U3Cq6TxWfAumRUXrZMORkqs0CXQVX3hR
hrRzmpEfbRxY9yg3DbtLZX8JL2u9y3V728YzvEr339Qymn219CaT7g6fopPw7N+R
XW+1d1buGRkM1DWw1QBhhxaCNV7KS4IdvF30HcnknJKrxgARlPBHtlnRgVD1t3Hf
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13467702573878278424376544484389608731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marseille'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CMA CGM S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmaedi.cma-cgm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25364992600106039058335494996266772596390006852668321467947699854759404346398274754522278903013416730445079269720208078803820857110939336403562422738263885682310668163275217264287061760939285395826901604272950799441208692581445591796467717651232444164628228140635807923000876724797930050542129963667986471815751636914546071953585876839372213099910536118549199438824445618162684118500504960840989659010412828901693238475979425784685802883030430393614295619333944536808011046436544797756207742439469735934925356621447039324513986684236248915306553530881992043739519191633097898963091656804320618836280177660196742618987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							267486e3f36592336d4abb722525ce1d370c73e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmaedi.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmailinternal.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.mail.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cma-cgm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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