tableau.cargill.com

- Cargill, Incorporated -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a2:a3:4a:63:e8:b5:b2:b8:00:00:00:00:50:f1:c0:f5 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cargill, Incorporated

Organization: Cargill, Incorporated
State / Province: Minnesota
Locality: Wayzata
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a2:a3:4a:63:e8:b5:b2:b8:00:00:00:00:50:f1:c0:f5
Serial Number (int): 216182788519016489276985172710059524341
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 13:fb:11:b9:5a:61:ae:d5:25:a9:e4:75:ad:43:ee:3e:25:36:49:f6
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 87:3f:6f:4a:54:c0:da:fa:47:ae:2a:a0:46:7e:75:32:51:fc:6f:a2
Fingerprint (sha256): 01:c5:85:05:cd:b9:8a:bf:76:a8:85:62:c3:eb:6d:fd:73:f4:87:cd:ef:a8:d7:d1:14:45:bc:06:ba:00:bc:24

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate tableau.cargill.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tableau.cargill.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tableau.cargill.com

Other certificates including the domain name cargill.com

(limited to 100 certificates)
lsaena03.cargill.com
cargill371-cfw.gw.cargill.com
eln.qa.cargill.com
apiportalunisolution.cargill.com
cuposgluapi.ar.cargill.com
jp.vpn.cargill.com
tableau.cargill.com
proxy.userprovisioning-preprod.cargill.com
erp-preprod.cargill.com
uk.employee.cargill.com
sfimage.cargill.com
uxq2fcs.admin.cargill.com
www.glimsonline.com
www.br.cda.cargill.com
proxya10.facturasmexico.cargill.com
sapcarrier.cargill.com
www.infoservice.cargill.com
cargill.com
cfse.cargill.com
boatviewn2.cargill.com
jobs.cargill.com
boomi.eu.cargill.com
itsmtest.cargill.com
protein.preferences.cargill.com
click.info.cargill.com
milkcalculator.cargill.com
proxyA10.frete.br.cargill.com
sftna1.cargill.com
sfdc-h5-dev.cargill.com
akamai-san88.exacttarget.com
sapcarrier.cargill.com
www.nacmsop.corn.cargill.com
profile-prepord.cargill.com
www.facturasmexico.cargill.com
consumerdesign.cargill.com
*.tgrc.cargill.com
www.emailtracker.cargill.com
view.riskmanagement.cargill.com
emeamerchandisestore.cargill.com
www.emailtracker.cargill.com
www.saleslogix.can.cargill.com
www.facturasmexico.cargill.com
SFBwebextna.cargill.com
www.gold.cargill.com
www.emailtracker.cargill.com
www.rdsnet.cargill.com
www.emailtracker.cargill.com
apiservices.na.cargill.com
proxya10-erp-test.cargill.com
portal-preprod.cargill.com
management.cargill.com
www.mycargill.com
fsso-qa.cargill.com
lsnapool01.cargill.com
prohanedhdb.admin.cargill.com
www.portalfrete.br.cargill.com
akamai-san88.exacttarget.com
tarc.cargill.com
fsso-qa.cargill.com
proxy.userprovisioning.cargill.com
transferwebservicepcert.na.can.cargill.com
csd-bot.cargill.com
csd-bot.cargill.com
uk.employee.cargill.com
cloud.info.cargill.com
fibi.preferences.cargill.com
www.emailtracker.cargill.com
tarc-cgitest2.cargill.com
domino.meat.cargill.com
www.cqnftp.cargill.com
proxy1-transportation8hm.cargill.com
proxya10-tranportation8-preprod.cargill.com
innovation.cargill.com
pages.info.cargill.com
proxya10.facturasmexico.cargill.com
proxy1-transportation8hm-test.cargill.com
www.cargill.com
wstransferdataservice.na.can.cargill.com
cargill.com
rpadeg001.cargill.com
nl.vpn.cargill.com
*.cargill.com
*.cargill.com
br.employee.cargill.com
www.fibi.preferences.cargill.com
uk.employee.cargill.com
cgi.wssprod.cargill.com
sfbwebexteuwgc.cargill.com
www.nl.cda.cargill.com
wsauthorizationmanager.na.can.cargill.com
prod.wcm.cargill.com
cmsapi2.cargill.com
csr2.cargill.com
www.cargillshareholder.cargill.com
proxyA10.frete.br.cargill.com
lsnapool01.cargill.com
*.na.can.cargill.com
fsso.cargill.com
br.employee.cargill.com
portal-preprod.cargill.com

Certificate

The complete raw certificate details for tableau.cargill.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 216182788519016489276985172710059524341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 10:28:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-15 10:58:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wayzata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cargill, Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tableau.cargill.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934737114882770394003679322700582677517843825328976442572893029332206403490483390907982943860824347288465907082361221556331039737115760117021549913370570939723989044670258041320658991648479174525435281041521220612336052758623691159530924168641757078598788240255576903871821930895878336548390949927891376179919717405723910186025055378420982811119477697124551723440576778624088653950937397713771433183736258802376945807408277301282300850918404941845323738275456039910877434564483153202394848687994633982303886427315514071693298129792523081464929362031335006914224570008160102231265671628636181320604763329004220635371896812148883914522121812054192151858003354048984486790274715126573898890621191050951974598820587780698119728438493680660154692316158096490606509825823949723398584095726018577670557902460159441814263396651663248131756316122928075753121956725553515901598009251900398927225697503725978580609400865204942034447372422414274642037315507703791665807957446779876934893022499791666585375864863689772442110198934298531655753173422667976122799114209270195080691170064731359347924396229997526718223459076845900305035052371505858236052053713658764809667370333575261065571866199568880336930612863443191090647601369763126229237488471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tableau.cargill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13fb11b95a61aed525a9e475ad43ee3e253649f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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