bainom.alam-maritim.com.my

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 78:51:dc:35:6a:7e:9f:c0:05:c7:29:f5:d6:37:cf:38 was issued on by SSL Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bainom.alam-maritim.com.my

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 78:51:dc:35:6a:7e:9f:c0:05:c7:29:f5:d6:37:cf:38
Serial Number (int): 159932401901895132502666984902475894584
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 78:ab:df:19:43:f1:a6:46:ef:5f:99:93:16:14:95:04:de:85:61:a5
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 9c:4b:72:e7:84:75:c6:e8:ad:50:df:9b:79:99:10:2d:e0:b3:46:13
Fingerprint (sha256): 51:c0:e8:52:46:6b:61:5d:ae:38:9b:6f:b1:90:6d:44:7e:63:04:11:17:30:8c:62:54:35:97:72:98:bd:94:ed

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate bainom.alam-maritim.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bainom.alam-maritim.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bainom.alam-maritim.com.my

Other certificates including the domain name alam-maritim.com.my

(limited to 100 certificates)
dhjs.alam-maritim.com.my
ehyl.alam-maritim.com.my
euha.alam-maritim.com.my
otan.alam-maritim.com.my
szhm.alam-maritim.com.my
fgdimi.alam-maritim.com.my
sqoa.alam-maritim.com.my
edyw.alam-maritim.com.my
eldf.alam-maritim.com.my
rentan.alam-maritim.com.my
tame.alam-maritim.com.my
etcm.alam-maritim.com.my
raos.alam-maritim.com.my
axpa.alam-maritim.com.my
brtk.alam-maritim.com.my
bainom.alam-maritim.com.my
*.alam-maritim.com.my
refa.alam-maritim.com.my
gdpq.alam-maritim.com.my
frls.alam-maritim.com.my
wkpo.alam-maritim.com.my
ekum.alam-maritim.com.my
gea.alam-maritim.com.my
hzda.alam-maritim.com.my
midin.alam-maritim.com.my
jymq.alam-maritim.com.my
sopinn.alam-maritim.com.my
qduz.alam-maritim.com.my
caritis.alam-maritim.com.my
vtks.alam-maritim.com.my
mela.alam-maritim.com.my
*.alam-maritim.com.my
rstam.alam-maritim.com.my
xdfr.alam-maritim.com.my
hnrw.alam-maritim.com.my
cnfg.alam-maritim.com.my
uila.alam-maritim.com.my
ikrl.alam-maritim.com.my
sdeman.alam-maritim.com.my
ceritis.alam-maritim.com.my
skac.alam-maritim.com.my
udeg.alam-maritim.com.my
zfbn.alam-maritim.com.my
suge.alam-maritim.com.my
ehdj.alam-maritim.com.my
mupos.alam-maritim.com.my
fare.alam-maritim.com.my
topz.alam-maritim.com.my
yhna.alam-maritim.com.my

Certificate

The complete raw certificate details for bainom.alam-maritim.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkyIyoQdU2xh1iQuXpZW
EI+nG//hcgn8EOvpE13c0EOhpuIeWoL6ruVz+I2tyw8hwEW4geC+JIp+Dv7uBbeK
pJS9/bo5c89dRIcwJzRYM1VdJ0qqFynFkUT/pIegHQngq60Zv/Zjpn6YokG1ilui
N4FcwulgTU73ehY0A7rorMpWFSGuIspomAF9l0HEXNTh7Um72iPLJMC7w9/qV7ZB
WYBqDWRYTP5w43pJjd79X8eoaaZ83ZQU5oM6NWJcbESAR9O/R9dhkCONuSASYREg
wnGK/jqyaJYtlbc7gEJ7sGZ7EgiZ4P2d1P6kXUdk9RxuL0/jf09yoNd8FwiexJ+y
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159932401901895132502666984902475894584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 13:06:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-05 13:05:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bainom.alam-maritim.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23013111993557965214544633391373099840470569539530276356255329231891339602483969233043231727544657245828570904171816632432466814030708747947815620922764506335470561225348693431419551375434899800307077706480107783705080115241333641356329002910103214980609988422573655437632311721181976216186413392935745362274099751282455175434311885933263987142301257957052587417768930449685970099045455964676746505103400364744125326728107748524700409891631861062194068055420365408279838765946176943929315863084237175089047509314618572188703131341474755209225047237878124506676915053902799399836235403529196168114388757985897509532327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bainom.alam-maritim.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78abdf1943f1a646ef5f999316149504de8561a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		000f9cd817fb353bb6bb7fc190c3490b3d65924c7e122761b8fccf392cc8ca6feca4fd6cc16a5e850897ef5c9b07fabef65fc6c3bcaa44b5b8fdf1f6a101e8e8d27cf4e6f44cbe92ef93d605e0d5850513d2b783ceac45c9bdc177b7e317812491271ef46138741d1936495a35861fdc07ac88bd1e1fa7717300a83cabd773e94718dae5b703a5c5410f06e5370100c21aeb20a6f3e7aeadc85b530ffec22c9d49e6bc406de333f4faaab7515183747f7d5d62680917e3355116906d6238b35533055886f84258425035515e516f29110d2baaf32e439739cd0e2be848ea1ce41142215553d1ab382e0046f0cddcd8af857981d58f52fe8a8ee308c746175bb5c040bdebe32fef50e26cf3e6215714bd2cba397b5298a606f45b9da2dd74e72f7648e60b746641c566c9157a70cc4c95eedac98dcc7e351b3cbeff79fed17f0cc9a88c56cad46d544dc23d505207d0e247e37b86ca8631a4e02a43bebb199eaa3bc6bb1c60d382e2f19ffd58beff26af6577bd863ba6ceee4eb9c35329a7c25df9132658bd18f127b690f16bac3b408ae26ff051e80ebbe8479624a6f0ea4d2b45a16f6aefe1a4c3e775d3b012449ccab7b639b9eff3ff62741e3e5edf390497936000c77314f4c670e82630d5bbea59507ab52b63daeec5866f04bf3756a2a2b85595ea139d729fd1c779aa99b0149464f1428be2ae9405ada2ffd575177d08ac