api.ao.maersk.com

Issued by R3

About this certificate

This digital certificate with serial number 04:de:fe:7e:88:d7:02:bd:83:fc:5a:1d:10:9c:4b:ab:20:ec was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.ao.maersk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:de:fe:7e:88:d7:02:bd:83:fc:5a:1d:10:9c:4b:ab:20:ec
Serial Number (int): 424330110099265478612842164917321012551916
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 18:87:6e:a6:48:7b:3a:48:33:6a:f9:74:5a:f6:4b:e7:d1:3b:a1:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:31:ed:45:bd:4b:fe:97:7d:a7:9b:ef:fe:9e:24:ea:d8:d6:7d:21
Fingerprint (sha256): 77:15:22:a9:8f:6b:4e:66:74:71:14:f5:c0:14:55:25:8f:56:d4:c9:be:a2:b7:47:15:7a:91:1b:7a:ac:d7:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api.ao.maersk.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ao.maersk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ao.maersk.com
api.marketavailableprices-dev.maersk.net
deprecated.security.ao.maersk.com
epay.api.ao.maersk.com
security.ao.maersk.com

Other certificates including the domain name maersk.com

(limited to 100 certificates)
www.maersk.com
api-cdt.maersk.com
mercury.digitalportal.maersk.com
click.e.maersk.com
stage.maersk.com
www.maersk.com
routing-dev.env.dynamicnet.maersk.com
www.maersk.com
webmail.maersk.net
ap2.007d.dedicated.lync.com
stage2.maersk.com
maersk.com
aomonitoring.maersk.com
authd.maersk.com
fs.maerskline.com
stage2.maersk.com
snife75gl.wpc.edgecastcdn.net
webmail.apmoller.com
stage2.maersk.com
terraform.hosting.maersk.com
snife76gl.wpc.edgecastcdn.net
www.myenergy.kvali.live
www.maersk.com
brandcentral.maersk.com
gmp.maersk.com
stage.maersk.com
*.erp.maersk.com
emanaged.maersk.com
stage2.maersk.com
maerskline.com
cert00028-azurecdn.akamaized.net
ctxportal.maersk.com
gmp.maersk.com
webmail.apmoller.com
stage.maersk.com
*.maersk.com
stage.apmterminals.com
www.maersk.com
aver-dev.env.dynamicnet.maersk.com
uescpcd.maersk.com
delivers.maersk.com
dm.maersk.com
cert00028-azurecdn.akamaized.net
leapfrog-ssl-13.gcs-web.com
*.maersk.com
www.maersk.com
leapfrog-ssl-13.gcs-web.com
rcmazure.maersk.com
eascpcd.maersk.com
leapfrog-ssl-13.gcs-web.com
www.maersk.com
help.ecl-platform-hello.maersk.com
akamai-san54.exacttarget.com
brandcentral.maersk.com
leapfrog-ssl-13.gcs-web.com
leapfrog-ssl-13.gcs-web.com
api.productmanagement.maersk.com
api-cdt.maersk.com
mobilerss.maersk.com
br.maersk.com
gmp.maersk.com
leaf.ocf.fulfillment.maersk.com
www.maersk.com
rcmpp.maersk.com
campaigns.maersk.com
stage.maersk.com
emanaged.maersk.com
cert00028-azurecdn.akamaized.net
leapfrog-ssl-13.gcs-web.com
scpdev2.maersk.com
designsystem.maersk.com
stage.maersk.com
ams-stg.wdp.maersk.com
maersk.com
maerskstories.maersk.com
*.cbe.maersk.com
routing-ppd.dynamicnet.maersk.com
leapfrog-ssl-13.gcs-web.com
digitalportal.maersk.com
www.ecardgreetings.maersk.com
stage.maersk.com
ctxportal.maersk.com
tms.ocf.fulfillment.maersk.com
fs.maerskline.com
www.maersk.com
www.maersk.com
leapfrog-ssl-13.gcs-web.com
aomonitoring.maersk.com
dc.maersk.com
akamai-san54.exacttarget.com
vdi.maersk.com
www.maerskmyenergy.com
www.maersk.com
cert00028-azurecdn.akamaized.net
www.myenergy.kvali.live
www.maersk.com
ilse.damco.com
ctxportal.maersk.com
maersk.com
leapfrog-ssl-13.gcs-web.com

Certificate

The complete raw certificate details for api.ao.maersk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0Gn/F5a7rWIyKr8Y9r9
chY5FV98XwdKBzVRcXa4YGFHSM2ImxEK6VxL+BpBbBNU/rmUKBmApqZGPZRmnI5w
zaQhP/C1j4ozyyoT5uGQ9+Z5lmzYD0Bs30BSNT7nWX6MI02/+/Sf7U/1k3DFy8Wr
hcJ5vTrogOL3DE8H97AuAO305/zUbeSpDUhhcmYkjhgftC1L2IkmLvhl+ZDTg6Gf
0kWDhG2aj3Y9eDBU3j2+3hvYI319Xk75KqCwleyZFyOibYBFCz+fpuvEhOOM16Uw
ygIDwglUoewqbnt6ylygOu5tP8tfpMaeAeLl8ZowJIMPss9DyyIhycec0wPZvClJ
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424330110099265478612842164917321012551916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-28 11:47:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-26 11:47:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ao.maersk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26163705404206237991734026908631228459860144745729232780233221543371005571419894076091717733658146789163594373959611485515234926529006288225770865987009815016334263154221676809761400532150063895703427346730591117439786671067080976272192764065915460719709209807177030243435560605581397517580213398795121435307994161766845911392994727118967319683293380726969382778790966524381161152463717614431077673435428622479645373764977479225542128200116402595334651456709779579873405128184663479318572042333922243199828527809674574175236342879210365402821126843547313864801658646328590035042009119117109342745959479002634417424653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18876ea6487b3a48336af9745af64be7d13ba144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ao.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.marketavailableprices-dev.maersk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deprecated.security.ao.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epay.api.ao.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.ao.maersk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000181aa5a5944000004030046304402205f0176329c9174f7657efb992ef51b1e98c8d65a7d1a0d3fa701d8213fdc39620220215e0cec87b7fe7a903c4df2d9ec93eafeaa1a4c07ea4464b3a53283b7ebae7700760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181aa5a593f00000403004730450220360a69226a04895735f8a52e1078bf5e741b449252c0e506dec9515fe8a579a20221008e78d7f8d950a08a24d8e6f8eee7c27ed3261f6cf6f160212a691ae7ff113a9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006911064415e89ccc8775b35ffbd83e957ee733b8b4a8edfd92d537f6f11e43e9d4285d9d883259ec6b7fcf8b8aef5b300a197bf8c5c51c0de381cd5311f85b764806fe73398f74f3b897fdd79d0ed79b226eafffd9427fa2052ae448d77d972c43ade0b2dcfd6424001b80b9231add2f2bc27cf7469acdaeaca9f6d37f1b60cca4aef061240a877f556903e240439090ffd7c4427d8761b65335e052d78608ed5f06dbdc1e540b80dafd9c441117f05849824e8d22a63244a7519bbe7f2321683632f99ad02dd369b40ad78c0daaa2ba9b3227033bcc17e3956b81d46bc671fd2e2553b3b54a2fe78e433f8977ec5ac1c18a85c902d99a95d00b32b3179832ac