opnmaa.alam-maritim.com.my

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 17:40:9b:d7:21:3f:6c:cd:af:76:f0:f9:40:83:f8:94 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opnmaa.alam-maritim.com.my

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 17:40:9b:d7:21:3f:6c:cd:af:76:f0:f9:40:83:f8:94
Serial Number (int): 30907711719832482081308160482691250324
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b3:d8:03:50:8e:d0:d3:62:a5:90:71:8e:69:8d:e4:0d:d8:ef:d9:5b
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 44:a4:28:bc:d7:2b:95:18:f2:40:b7:9d:f9:5b:f9:a0:58:f8:61:79
Fingerprint (sha256): 45:20:fa:fc:fd:71:89:77:db:c5:b4:96:97:77:06:1e:ce:fc:2f:62:aa:49:e0:da:19:69:2a:c0:5a:31:c5:14

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate opnmaa.alam-maritim.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opnmaa.alam-maritim.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opnmaa.alam-maritim.com.my

Other certificates including the domain name alam-maritim.com.my

(limited to 100 certificates)
ejwy.alam-maritim.com.my
microwaretech.alam-maritim.com.my
gambir.alam-maritim.com.my
dupa.alam-maritim.com.my
dhjs.alam-maritim.com.my
ehyl.alam-maritim.com.my
udah.alam-maritim.com.my
irscoil.alam-maritim.com.my
gwhs.alam-maritim.com.my
ngengatbesar.alam-maritim.com.my
rxnp.alam-maritim.com.my
rmdas.alam-maritim.com.my
vdoi.alam-maritim.com.my
lamhik.alam-maritim.com.my
euha.alam-maritim.com.my
newmediavillage.alam-maritim.com.my
otan.alam-maritim.com.my
showasanshoku.alam-maritim.com.my
bartlett.alam-maritim.com.my
cekz.alam-maritim.com.my
uyjn.alam-maritim.com.my
ubun.alam-maritim.com.my
kinjeng.alam-maritim.com.my
mela.alam-maritim.com.my
szhm.alam-maritim.com.my
wragi.alam-maritim.com.my
akbat.alam-maritim.com.my
tbng.alam-maritim.com.my
fgdimi.alam-maritim.com.my
faucett.alam-maritim.com.my
ejmq.alam-maritim.com.my
slidik.alam-maritim.com.my
bgvb.alam-maritim.com.my
cair.alam-maritim.com.my
bhiji.alam-maritim.com.my
wjke.alam-maritim.com.my
sjgu.alam-maritim.com.my
xgfu.alam-maritim.com.my
dkrw.alam-maritim.com.my
crdikim.alam-maritim.com.my
wefd.alam-maritim.com.my
dlfi.alam-maritim.com.my
hape.alam-maritim.com.my
imdj.alam-maritim.com.my
sqoa.alam-maritim.com.my
asliji.alam-maritim.com.my
rattlesnakes.alam-maritim.com.my
jpjn.alam-maritim.com.my
pewe.alam-maritim.com.my
bgke.alam-maritim.com.my
magnifera.alam-maritim.com.my
baru.alam-maritim.com.my
yzeo.alam-maritim.com.my
ygoi.alam-maritim.com.my
esgy.alam-maritim.com.my
hvyw.alam-maritim.com.my
amal.alam-maritim.com.my
gvee.alam-maritim.com.my
cdpo.alam-maritim.com.my
edyw.alam-maritim.com.my
hibiki.alam-maritim.com.my
lpmk.alam-maritim.com.my
butterflytail.alam-maritim.com.my
assasinbug.alam-maritim.com.my
whtg.alam-maritim.com.my
qiuu.alam-maritim.com.my
eldf.alam-maritim.com.my
rooster.alam-maritim.com.my
rdwan.alam-maritim.com.my
suge.alam-maritim.com.my
alvarado.alam-maritim.com.my
gaharu.alam-maritim.com.my
jjrm.alam-maritim.com.my
ijim.alam-maritim.com.my
sanajt.alam-maritim.com.my
rssa.alam-maritim.com.my
auga.alam-maritim.com.my
aestivum.alam-maritim.com.my
kumbanglabalaba.alam-maritim.com.my
dagaj.alam-maritim.com.my
clearwaterpkg.alam-maritim.com.my
hispidagezsj.alam-maritim.com.my
fmre.alam-maritim.com.my
rentan.alam-maritim.com.my
tame.alam-maritim.com.my
gmva.alam-maritim.com.my
capung.alam-maritim.com.my
cdxa.alam-maritim.com.my
microwaretech.alam-maritim.com.my
ratileh.alam-maritim.com.my
etcm.alam-maritim.com.my
lacewings.alam-maritim.com.my
nbtinim.alam-maritim.com.my
batik.alam-maritim.com.my
iopo.alam-maritim.com.my
dbrt.alam-maritim.com.my
fltk.alam-maritim.com.my
qsde.alam-maritim.com.my
cair.alam-maritim.com.my
opnmaa.alam-maritim.com.my

Certificate

The complete raw certificate details for opnmaa.alam-maritim.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWPC59oLx6PMWxTuPek6
uqfahD5syf5RPlK7yRGe3ttF0vlkQvMez1yrfdfpn/gHzHF/pQqfo6xDuLTdcrUO
/9JVmnTq+8u0UHlmPkbSaRP64yMLPYT6OtyyM+q6oNDazqhcw7IHmxKF3qhPgbGs
vqQkSPOgflzbWvYv1QrmLMK7vDJE+HEq6kLzdCH5VlE74ZkQdeiSCrJhFgJ4UoJb
DsXpwydlTLrWrXN5kMYfhpGJNP4hhN+JZOoY+kIrSGpPvzuVZlA4blgqJDpNZtqB
zshnl13tv8teQhDM05rTdLCzvUL9/XhTcZ3396BGKMYDbb9iIsNGRj9C2jB1YHSP
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30907711719832482081308160482691250324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 15:33:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-21 15:33:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'opnmaa.alam-maritim.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24413187013762095734808157296678310023546352123638207487749573053622673312866848022938892105297506945807801597264635375400443305707479456917989627643104223744140263040536463471628390578526032194455824912425761155820098339664454788147061872407187910205285746562228155046850264043063521864566444416430677770006319194407404612991663133724346101271324369430827331626339528985675219204721657690358550499559016327015014369344010073265844737489464647612516746337345497478961364887708120364782119571370467697866393842781858388236455399207388817859701693860664025187900562230849364073157920315553158569876612642046410998714157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opnmaa.alam-maritim.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3d803508ed0d362a590718e698de40dd8efd95b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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