*.maf.ae

- Majid Al Futtaim Properties LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:33:c4:54:62:9a:a0:81:9f:11:60:07:9b:4a:91:ef was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Majid Al Futtaim Properties LLC

Organization: Majid Al Futtaim Properties LLC
Locality: Dubai
Country: AE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:33:c4:54:62:9a:a0:81:9f:11:60:07:9b:4a:91:ef
Serial Number (int): 9573385148244117753430918645817184751
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f4:d7:e5:9c:e7:62:c4:f5:5a:cf:dd:98:34:ae:fa:72:1f:ff:9e:f1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 59:9b:7d:38:fb:87:85:95:26:d1:00:8b:d1:4e:32:4a:ca:2b:53:52
Fingerprint (sha256): 24:d2:26:4a:70:09:ca:43:16:e8:05:ff:70:0c:8e:2b:15:8b:b4:3c:c3:56:27:7c:42:e3:b7:b2:ee:55:28:6d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate *.maf.ae

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.maf.ae

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.maf.ae
maf.ae

Other certificates including the domain name maf.ae

(limited to 100 certificates)
*.dev.grid2.maf.ae
snowabudhabi-aut.maf.ae
api-share-dev.maf.ae
that.majidalfuttaim.com
*.cvm.maf.ae
d4-aut.maf.ae
www.majidalfuttaim.com
mportal-stg.maf.ae
*.grid2.maf.ae
mportal.maf.ae
ssl385337.cloudflaressl.com
*.maf.ae
mdm-api.dev.grid2.maf.ae
that.majidalfuttaim.com
mesa4.aylsoluciones.pw
smbu-api.maf.ae
www.majidalfuttaim.com
maf.ae
*.dev.grid2.maf.ae
api-share-sandbox.maf.ae
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowabudhabi-preprod.maf.ae
itsupport.pando.ai
that.majidalfuttaim.com
that.majidalfuttaim.com
snowoman-stg.maf.ae
that.majidalfuttaim.com
uniforms.maf.ae
ssl385338.cloudflaressl.com
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
*.dla.maf.ae
*.dev.grid2.maf.ae
mafsdp.maf.ae
d4.maf.ae
mportal.maf.ae
that.majidalfuttaim.com
maf.ae
api-holding-dev.maf.ae
servicedesk.oneontacsd.org
www.majidalfuttaim.com
sharecmsheadless-auth.maf.ae
maf.ae
uniforms-auth.maf.ae
api-share-internal-fab-uat.maf.ae
sfsharerewards-stg.maf.ae
sharecmsheadless.maf.ae
maf.ae
*.governance.maf.ae
www.majidalfuttaim.com
www.majidalfuttaim.com
helpdesk.admix.com
*.maf.ae
snowabudhabi.maf.ae
www.validationportal.maf.ae
uniforms-auth.maf.ae
helpdesk.dpsgroupglobal.com
maf.ae
snowabudhabi-preprod.maf.ae
that.majidalfuttaim.com
uniforms-auth.maf.ae
api-share-prod.maf.ae
mportal-auth.maf.ae
*.maf.ae
snowabudhabi.maf.ae
*.grid2.maf.ae
servicedesk.metro-inet.us
snowoman-stg.maf.ae
lecitsupport.maf.ae
that.majidalfuttaim.com
hype.maf.ae
snowoman-aut.maf.ae
that.majidalfuttaim.com
d4-stg.maf.ae
sharecmsheadless-stg.maf.ae
snowabudhabi-preprod.maf.ae
ssl385338.cloudflaressl.com
snowabudhabi-preprod.maf.ae
snowabudhabi-aut.maf.ae
maf.ae
uniforms-auth.maf.ae
maf.ae
api-ventures-prod.maf.ae
*.maf.ae
that.majidalfuttaim.com
d4.maf.ae
snowoman-aut.maf.ae
www.majidalfuttaim.com
destek.coreway.com.tr
receiptworx.maf.ae
that.majidalfuttaim.com
uniforms-stg.maf.ae
that.majidalfuttaim.com
www.majidalfuttaim.com
api-share-internal-fab-dev.maf.ae
www.majidalfuttaim.com

Certificate

The complete raw certificate details for *.maf.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbhLtKtL4cLTmZfnP394
bBxjkThh6q8/+Yc7K4oihiyfSpdBDa3paQq/nlWnzZjWu24m24N6Z7mBqaihZlUY
t9yu7L1aSGKT8kuLWBuohDjQ/74+5Z2xu8JZ+poHlQveifUnSoBB1eqKvx3LoENB
/oUHTblEQWmULd3gyC/LsarvxD34boCRz2QcBgJWZr3giGCYV4NLqWzLwszD4/Lw
P99Lm/e6SwQ2sFTLP8t1qRn5rxt7zSlMt1easy6Q+zdBLR6ZUg54o5mi4xrxCN7s
Aw24pLmaMJ+LwNaq/OqAUol7/Wv/SqKYpu4Tl5pUcQ1govIfif/oCnJXQW62N8EP
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9573385148244117753430918645817184751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dubai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Majid Al Futtaim Properties LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.maf.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22940012808250844194918047386684475134212285862073458008675742082379587467735407270613100281871139095538001722998747023880088093754815231342553570349299584555162268403212019959046826382250341419515086892023888204408062541099175597148856051095480434785128376617980288897114594616365589928128652203308343377370180270638676742697222698279089810917426669864818986547614411226056405466654726435359382991206016196362153878540040765178325946993068893909851449423477187478821883403051584304380885091036249886079658458448773889052423662353962841451351945330324922483575630943665326478230478741536965112583171275216841898790663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4d7e59ce762c4f55acfdd9834aefa721fff9ef1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maf.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maf.ae'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017ff95fe69d0000040300483046022100f5f29a70970075ac5ca312402cde0b1cd7027f24cd9277905ae996ad5d92854d022100da7749c458116992cac1baf268700ef3916010a778c187222b00d11c69fcc80a00760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017ff95fe6bf0000040300473045022100bfc6e20a5d00d128428d4f87463a5003a2fce52d58a9aac53cfbdf4f58b76414022048998db5fdc5f30b60ee32740860208ffc22cd6bf563a007a4ff4618ef9bf014007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017ff95fe7130000040300483046022100e66a2ec0eb916c29cb4e0182c8d9cf2817edf00d645983a9e98abdb3de9b355002210091d500be203b3e8a5fe1d7b290b82842dae96338d2abaeb9947f7c982acc2ea4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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