maersk.com

- Maersk Line A/S -

Issued by Corporation Service Company RSA OV SSL CA

About this certificate

This digital certificate with serial number 66:34:36:63:fd:d0:6c:e4:3a:76:4a:26:46:9c:31:45 was issued on by Corporation Service Company.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Maersk Line A/S

Organization: Maersk Line A/S
State / Province: Hovedstaden
Country: DK

Corporation Service Company

Organization: Corporation Service Company
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 66:34:36:63:fd:d0:6c:e4:3a:76:4a:26:46:9c:31:45
Serial Number (int): 135852358178963594456174800883009990981
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 11:ab:c4:c7:ab:33:6e:65:ad:57:06:1c:1f:d1:f6:b9:43:c6:1e:47
AuthorityKeyId: 38:d1:f4:0e:87:6c:16:37:1b:65:74:dd:26:ce:9e:cc:28:ac:22:1d

Fingerprint (sha1): 2a:b9:89:0a:6a:7c:01:9c:55:9f:db:29:9b:d3:08:b1:77:3f:a3:3d
Fingerprint (sha256): 27:b4:31:54:c0:f0:72:7a:ac:91:08:65:74:45:04:c7:77:d7:fc:59:43:6b:79:08:ac:7d:6b:97:a0:db:2c:03

Issuing Certificate URL: http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl

Check the revocation status for certificate maersk.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maersk.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maersk.com
apmterminals.com
careers-origin.maersk.com
careers.maersk.com
edit.apmterminals.com
edit.growth.maersk.com
edit.maersk.com
edit.maerskprocurementacademy.maersk.com
edit.mcicontainers.com
growth.maersk.com
maerskprocurementacademy.maersk.com
mcicontainers.com
retirees.maersk.com
services.apmterminals.com
services.maersk.com
services.mcicontainers.com
www.apmterminals.com
www.growth.maersk.com
www.maersk.com
www.maerskprocurementacademy.maersk.com
www.mcicontainers.com

Other certificates including the domain name maersk.com

(limited to 100 certificates)
www.maersk.com
api-cdt.maersk.com
contract-management.api.maersk.com
mercury.digitalportal.maersk.com
click.e.maersk.com
stage.maersk.com
www.maersk.com
routing-dev.env.dynamicnet.maersk.com
www.maersk.com
webmail.maersk.net
ap2.007d.dedicated.lync.com
stage2.maersk.com
maersk.com
aomonitoring.maersk.com
authd.maersk.com
fs.maerskline.com
stage2.maersk.com
unilever.omswca.maersk.com
snife75gl.wpc.edgecastcdn.net
webmail.apmoller.com
stage2.maersk.com
terraform.hosting.maersk.com
snife76gl.wpc.edgecastcdn.net
www.myenergy.kvali.live
www.maersk.com
brandcentral.maersk.com
omst.maersk.com
gmp.maersk.com
stage.maersk.com
*.erp.maersk.com
emanaged.maersk.com
stage2.maersk.com
location.api-cdt.maersk.com
maerskline.com
cert00028-azurecdn.akamaized.net
ctxportal.maersk.com
gmp.maersk.com
webmail.apmoller.com
stage.maersk.com
*.maersk.com
stage.apmterminals.com
www.maersk.com
aver-dev.env.dynamicnet.maersk.com
uescpcd.maersk.com
delivers.maersk.com
dm.maersk.com
cert00028-azurecdn.akamaized.net
leapfrog-ssl-13.gcs-web.com
*.maersk.com
www.maersk.com
leapfrog-ssl-13.gcs-web.com
rcmazure.maersk.com
eascpcd.maersk.com
leapfrog-ssl-13.gcs-web.com
www.maersk.com
help.ecl-platform-hello.maersk.com
akamai-san54.exacttarget.com
brandcentral.maersk.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-13.gcs-web.com
api.productmanagement.maersk.com
api-cdt.maersk.com
mobilerss.maersk.com
br.maersk.com
gmp.maersk.com
leaf.ocf.fulfillment.maersk.com
www.maersk.com
rcmpp.maersk.com
campaigns.maersk.com
stage.maersk.com
emanaged.maersk.com
cert00028-azurecdn.akamaized.net
leapfrog-ssl-13.gcs-web.com
scpdev2.maersk.com
designsystem.maersk.com
stage.maersk.com
ams-stg.wdp.maersk.com
maersk.com
metsmod-stage.maersk.com
maerskstories.maersk.com
*.cbe.maersk.com
routing-ppd.dynamicnet.maersk.com
wms1-nas.maersk.com
leapfrog-ssl-13.gcs-web.com
digitalportal.maersk.com
www.ecardgreetings.maersk.com
stage.maersk.com
careers.maersk.com
ctxportal.maersk.com
offers.api-cdt.maersk.com
tms.ocf.fulfillment.maersk.com
wms1-eur.maersk.com
fs.maerskline.com
www.maersk.com
www.maersk.com
leapfrog-ssl-13.gcs-web.com
aomonitoring.maersk.com
unilevermaersk.omswca.maersk.com
united-om-cdt.maersk.com
dc.maersk.com

Certificate

The complete raw certificate details for maersk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135852358178963594456174800883009990981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company RSA OV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hovedstaden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maersk Line A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maersk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786308026012077933430823344338788219241071226930987853739857367006228148608726527638593894634007331873077815304860100606033647132700558288655506450621874823702077524435826203947485593913221596202384340585978402857926190443550504229813633753574909472347431328774220807573619155648597216345555398126612598394949099930142520558448612349295780668243856309370056055633429100208573513934663969486370275435293397928914528316604346443742811191827336127946223730580686056498466828513262957381606147901064270528102095055493576789222959024804034183453546545794254693289493815392836736842597954983995863887658270042805908139807049099497839331995353308873594482561293617567777777190784403761126610836177000854354094656415965702602315949194742710791609500344111955902381334493553554122961569836995051566046129456907815764389753596688001397011604045539953577740890284024557898506304723986880180989492809606622157045628265300167013706334279893499136986707139415534484870638540730457177914368476042401190147384883749000564628053497515210830838402410762522894689141435911148235390961528609890137140697636774125509685202133918323605781209782100273584851217867024391313145171829278893362824469776208978348116146171892255079349734676477513012651746455373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38d1f40e876c16371b6574dd26ce9ecc28ac221d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11abc4c7ab336e65ad57061c1fd1f6b943c61e47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (508 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apmterminals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers-origin.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.apmterminals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.growth.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.maerskprocurementacademy.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.mcicontainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growth.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maerskprocurementacademy.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcicontainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirees.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.apmterminals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.mcicontainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apmterminals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growth.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maerskprocurementacademy.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcicontainers.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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