dfc.damco.com

- Maersk Line A/S -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number ca:34:fc:62:0e:a9:c9:6c:67:32:bc:1e:27:0e:c7:5b was issued on by Corporation Service Company.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Maersk Line A/S

Organization: Maersk Line A/S
State / Province: Hovedstaden
Country: DK

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ca:34:fc:62:0e:a9:c9:6c:67:32:bc:1e:27:0e:c7:5b
Serial Number (int): 268779173521314913778465863684804495195
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 23:cc:03:2f:23:e6:71:81:8c:60:6b:e0:db:02:cf:fc:7e:29:5a:78
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 46:3b:53:47:54:d8:8d:48:ee:3b:bf:d5:16:d4:51:32:04:5f:4f:fa
Fingerprint (sha256): 29:88:a8:76:3d:59:52:3b:67:10:fd:08:f9:b2:7e:ec:d9:44:07:ed:3b:bd:1c:db:a8:f8:a0:d6:1e:04:17:b8

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate dfc.damco.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dfc.damco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dfc.damco.com
preproduction-dfc.damco.com
test-dfc.damco.com

Other certificates including the domain name damco.com

(limited to 100 certificates)
dev-digitalportal.damco.com
lnsscanservice.damco.com
ap2.007d.dedicated.lync.com
primark.damco.com
dev-mercury.damco.com
brain.damco.com
response.damco.com
brain.damco.com
rfdashboard.damco.com
flowoptimizer.damco.com
ilsetms.damco.com
edi.damco.com
amerapps-backend.damco.com
test-mercury.damco.com
blog.damco.com
adama-ct.damco.com
snicc50gl.wpc.edgecastcdn.net
preprod-rfdashboard.damco.com
blog.damco.com
lnsscanservice.damco.com
www.damco.com
preprod-digitalportal.damco.com
api-stage.damco.com
brain-api-emea.damco.com
b2b.damco.com
blog.damco.com
blog.damco.com
ct.damco.com
www.preprod-docmanui.damco.com
www.preprod-brainui.damco.com
core-api-emea.damco.com
core-api.damco.com
demo-booking.damco.com
www.preprod-docmanui.damco.com
ilsewnd.damco.com
response.damco.com
adama-ct.damco.com
preprod-sourcingoptimization.damco.com
finops.damco.com
*.damco.com
www.damco.com
www.dev.damco.com
preproduction-documentation.damco.com
globalhandover.damco.com
namapps.damco.com
response.damco.com
finops.damco.com
adama-ct.damco.com
dev-flowoptimizer.damco.com
ilse.damco.com
ilse-azure.damco.com
dfc.damco.com
preprod.primark.damco.com
ct.damco.com
more.damco.com
preprod-flowoptimizer.damco.com
www.damco.com
productcatalogue.damco.com
blog.damco.com
preprod.sci.damco.com
www.damco.com
finops.damco.com
namapps.damco.com
sts1.maersk.net
globalhandover.damco.com
ilsetms.damco.com
test-documentation.damco.com
www.damco.com
dev-productcatalogue.damco.com
naswms.damco.com
digitalportal.damco.com
www.damco.com
response.damco.com
ilsetms.damco.com
*.damco.com
pocollaboration.damco.com
api-preprod.damco.com
booking.damco.com
*.damco.com
dev-digitalportal.damco.com
preproduction-exceptions.damco.com
ilsenas.damco.com
ediprep.damco.com
cdn.damco.com
preproduction-booking.damco.com
pp-pocollaboration.damco.com
www.damco.com
exceptions.damco.com
*.apawms.damco.com
lnsscanservice.damco.com
www.wmslite.damco.com
www.damco.com
exceptions.damco.com
preproduction-exceptions.damco.com
lns.damco.com
equipmenttracking-new.damco.com
preproduction-reporting.damco.com
preproduction-reporting.damco.com
destinationmgmt-preprod.damco.com
digitalportal.damco.com

Certificate

The complete raw certificate details for dfc.damco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268779173521314913778465863684804495195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hovedstaden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maersk Line A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dfc.damco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753604985784838524092414443615655493055612850280534885856445843561167599976178197116912214581081518070161795591417345373003956019252072396759605207592912277440987375989575681719215077604731116108123786139327765888835109156582528123369388185465004987728254678131405107840852016702338251105354603833851331814124686763443376719798086872036424392324672431089883861596652488199258694104306406598220374811484193549362963353616285363816932540455043066454107556147176372360712290555964629198704415399623129675562362910812275319084420994161487887377994279174925784494072871730666663901880186482412952935756970682594138725766391541735396761989654555528062964217997210477339247716009856426134003869323981251805935377309070995390587298947617368518585335476527507184485763471130000781106359022449686910226234088710875356391845219163794386569383604236609694538561673628315580897943230759762309088999646293717837033985268685456435434611201788679331015818849174474229894828598521871193875130249811206850194977238148397049812341284347191785927144559566564034924089347316215594976485539849403634890114430141095480557015716570509844449104575497044202367963010539231595884772181278155888835282201210209229968638037663726616710139253760763938887359463819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23cc032f23e671818c606be0db02cffc7e295a78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfc.damco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preproduction-dfc.damco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-dfc.damco.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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