*.olamnet.com

- Olam International Limited -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:30:5a:88:e3:e1:6b:66:46:e1:12:3c:24:2b:71:32 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Olam International Limited

Organization: Olam International Limited
Locality: Singapore
Country: SG

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:30:5a:88:e3:e1:6b:66:46:e1:12:3c:24:2b:71:32
Serial Number (int): 16201802461048705510050784758935023922
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 11:07:c7:92:8d:ef:f2:cd:5d:68:be:58:19:05:0b:2d:9e:f2:75:78
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 21:81:0b:4e:11:cc:c6:22:f5:15:df:b9:78:0f:2a:ba:0f:1c:f7:fe
Fingerprint (sha256): 31:48:6f:37:82:a4:52:41:d2:e3:09:fc:f4:9c:fe:5e:18:d6:c2:a9:6b:92:15:9c:41:9a:ff:a0:84:94:61:a9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate *.olamnet.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.olamnet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.olamnet.com
olamnet.com

Other certificates including the domain name olamnet.com

(limited to 100 certificates)
*.olamnet.com
*.olamnet.com
*.olamnet.com
ctrmpreprod.olamnet.com
*.olamnet.com
*.olamnet.com
imperva.com
webmail.olamnet.com
imperva.com
*.olamnet.com
*.olamnet.com
ctrmpreprod.olamnet.com
imperva.com
*.olamnet.com
*.olamnet.com
ctrmpreprod.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
webmail.olamnet.com
*.olamnet.com
imperva.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
junction.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
imperva.com
junction.olamnet.com
*.olamnet.com
*.olamnet.com
imperva.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
imperva.com
*.olamnet.com
imperva.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
webmail.olamnet.com
anydesk.smartants.in
*.olamnet.com
imperva.com
*.olamnet.com
Accessedge.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
imperva.com
*.olamnet.com
junction.olamnet.com
otbs-olam.olamnet.com
junction.olamnet.com
imperva.com
accessus.olamnet.com
imperva.com
*.olamnet.com
*.olamnet.com
junction.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com
imperva.com
*.olamnet.com
imperva.com
imperva.com
*.olamnet.com
imperva.com
*.olamnet.com
webmail.olamnet.com
*.olamnet.com
sip.olamnet.com
*.olamnet.com
*.olamnet.com
*.olamnet.com

Certificate

The complete raw certificate details for *.olamnet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NcwtWhxyAqvOB8D0fJf
NPynDGlvyZPHBkhymAU+Qe1jYmyc6D8kX9ZVEjsKLi5jZE6aORDyvvhJa2EXr6or
//mol8CcwScvAAkvHUoYP1xwT2+n0ofitIoz5b7d9QKKlULA2NhXp8kdcS+VK2Nt
FKekXQ3TAid0mSQI/FMwheyfZ7c7cgnRyFLHuVlBQw+NTH7gpZl8oWu5c5F/SYw6
KFZcuGKwQegewnjkr0yWr11pH+NlNrvpWQWY+6h6tS4UF5zT4awwB/dNxkbr49pb
Fkxbxobw3hv+fdWzb5Ua1C6CPaEP7tAQ23PH0+xtE527hIfegwejelmi7sErm6RA
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16201802461048705510050784758935023922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Olam International Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.olamnet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27878541368649569757381746194507739023640258245527567427024905404343122632253263194943042003055731910149300212152990123759956849742356311349760704534999383026862466952804773638715635587896671618085983610751624801987076836075131289798066813483149922590416654709164139871476757885127781949462080185725720226389431570101142955738879299940498378813185363009098663800583683117320269716680484451863295332610373012938512116095623289250868362015152005945554370785907737841405031218870466153729021406429373747199692784218092067320531628192469128643098842543930747060126333261518338963661458954780305444277198172603859111002127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1107c7928deff2cd5d68be5819050b2d9ef27578
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olamnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olamnet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000178a157f4510000040300473045022100a25d32b23806d9c180aa8210585a92a0da8d722a2b953ff7fa6f106a956d713a02207a39ca86b202daaa79fe8d8d54911631e1cfdbe8d892834413423342b3b500110076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000178a157f44b000004030047304502200a9564eea921f22fdfd44ac1fef650b717f9301c6afa29260d08b735a28663840221009fc68d73b708fa275e91550b8daa7e16986d477cb92907cbf7975a8b386f84ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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