tigoebsotest.millicom.com

- Millicom International Cellular S.A. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 04:af:38:fc:48:c8:19:61:ae:c2:18:1d:76:1d:9a:d9 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Millicom International Cellular S.A.

Organization: Millicom International Cellular S.A.
Organization unit: Information Technology
Locality: Luxembourg
Country: LU

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:38:fc:48:c8:19:61:ae:c2:18:1d:76:1d:9a:d9
Serial Number (int): 6226719736342842146913551414860815065
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7e:87:0d:bd:8d:1d:c7:86:08:1e:11:6b:1a:2a:aa:9f:e2:f2:70:22
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): f8:5d:06:02:0f:ad:43:2e:00:ed:1f:35:37:69:4e:6f:9e:d0:0d:36
Fingerprint (sha256): 20:6f:60:98:5a:1c:73:d6:e7:f6:dd:33:da:51:79:a5:a8:b8:cc:d4:43:3e:7b:b4:d5:65:4c:00:3b:6b:4d:13

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate tigoebsotest.millicom.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tigoebsotest.millicom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tigoebsotest.millicom.com

Other certificates including the domain name millicom.com

(limited to 100 certificates)
tigoebsodev.millicom.com
sni37051.cloudflaressl.com
samsgw.millicom.com
millicom.com
obieepreprd.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
iSupplier.globalebs.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
access.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
sms.millicom.com
GLOBALOEM.MILLICOM.COM
sni37051.cloudflaressl.com
iSupplier.globalebs.millicom.com
globalsoa.millicom.com
ebs.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
obieepreprd.millicom.com
globalebs.millicom.com
millicom.com
millicom.com
sni37051.cloudflaressl.com
iam.millicom.com
samtool.millicom.com
vpn.millicom.com
sni.cloudflaressl.com
sni37051.cloudflaressl.com
GLOBALOEM.MILLICOM.COM
millicom.com
sni37051.cloudflaressl.com
tigoebsopruebas.millicom.com
sms.millicom.com
hfm.millicom.com
saminv.millicom.com
sni37051.cloudflaressl.com
globalsoa.millicom.com
millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
samsgw.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
*.millicom.com
sni37051.cloudflaressl.com
*.millicom.com
ebs.aws.millicom.com
tigoebsopruebas.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
remote.labs.millicom.com
remote.labs.millicom.com
sms.millicom.com
ebs.millicom.com
*.millicom.com
tigosoaprod.millicom.com
millicom.com
emr-master-prod.Millicom.com
sni37051.cloudflaressl.com
*.millicom.com
AW01IAMTS01T.millicom.com
sni37051.cloudflaressl.com
iSupplier.globalebs.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
access.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
globalobiee.millicom.com
tigoebsotest.millicom.com
sni37051.cloudflaressl.com
tigoebsoprod.aws.millicom.com
sms.millicom.com
tigoebsotest.aws.millicom.com
sms.millicom.com
sms.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
millicom.com
sms.millicom.com
*.millicom.com
sni37051.cloudflaressl.com
sms.millicom.com
sni37051.cloudflaressl.com
samtool.millicom.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
sni37051.cloudflaressl.com
lumicarch01.millicom.com
sni37051.cloudflaressl.com
awsvpn.millicom.com

Certificate

The complete raw certificate details for tigoebsotest.millicom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmijoEnfGoUrrvyXM13D
E5GNq9wUDzO+4ImukBehOBD/pKj1bleIUf73IY2VfaUWmleNOvHvJiK3AruOK8f5
eI7ftfGPSl7K2pw+HLq4uU9cMAW6DnDdpurw4d73YDoWNR9F2cIgvZeIuh491lfd
J3PjSH+GtAzMM+JCvYFv1W7DoC5HFdrwpWdf33kbQMwzloKK96VjETA+3lkaSIlM
92vBD3fJx47dxdDYzOAPIuSfiVaunKx4oqN5P0rcIR9tYnQyJNi0V2zrmo15vl/D
thjfHmKCISTkniFQwigsTcRRPE6CgnPLhR1/r1meMB4GEIgflqXFTDM8eLZDHfpA
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6226719736342842146913551414860815065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Millicom International Cellular S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tigoebsotest.millicom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18987345240092523230756648467096383998969017278913230950150475707955209680191488953652867411639072966204706985513334396890105614592519997397933605852345665271912264837744469835724232038186808100994792997432360964549293029108376589262170575561198254870079824123346959411403774415839515883279920008984983323615519163222182315965206651206690589910571262385172088919827798962890447859929061075331399013964266187772459562316858749794487080501649098909073883306739236231972226401089667630222501855717149871903334191772534140835088697962339049310696198857293251305545142326421719201063116788567434976518823832354219351490613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e870dbd8d1dc786081e116b1a2aaa9fe2f27022
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigoebsotest.millicom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a9bec3be2d48708a41a99bbfae638f114affadb9f9ac0dafa285da219550a1c3bc7165529e178b06d6df7863516c78a62bed63e89079f9802e66e81a18ce07e3a193941689da11f5bfbff9a0beb6f79d62c2c5da407eacf55c1e2c8b69ca51a10b26fca56f970c76ee14558ea5388a30da964071b8453222a9d293e9ac47f03066d166080118d4c62a140904371ef199c45dfe9c9bb7707638a5dc362dd147919a0c99c87dbefe654455ace853a70dfc3b9dcc4b798b73ca8594c707f54cce1bf55d2d7b04ea67a266486ce662cb79e8533ddb9aa28bb4160053a2b8d39abf2cdc6795df54c642a543cca7c47ed3c9338d0218a2fa9dd38b947a0ccb7a3a5186