cargill.com

- Cargill, Incorporated -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 94:47:f8:68:0d:0b:fc:74:00:00:00:00:50:e2:e3:9e was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cargill, Incorporated

Organization: Cargill, Incorporated
State / Province: Minnesota
Locality: Wayzata
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 94:47:f8:68:0d:0b:fc:74:00:00:00:00:50:e2:e3:9e
Serial Number (int): 197099434734471924537014601324358198174
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ac:4a:f5:e9:04:94:f7:38:37:36:54:e2:39:a8:25:9a:76:7f:53:c7
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 8a:73:d7:0e:1a:07:ef:92:cd:88:9b:ca:a5:12:30:77:fa:09:5b:4d
Fingerprint (sha256): 03:81:3c:98:16:b4:0a:fa:0b:44:39:65:b2:1b:b8:be:ba:b5:17:fb:97:5b:4e:0c:14:a1:bc:e8:70:57:99:c7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cargill.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cargill.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cargill.com

Other certificates including the domain name cargill.com

(limited to 100 certificates)
lsaena03.cargill.com
cargill371-cfw.gw.cargill.com
eln.qa.cargill.com
apiportalunisolution.cargill.com
cuposgluapi.ar.cargill.com
jp.vpn.cargill.com
tableau.cargill.com
proxy.userprovisioning-preprod.cargill.com
erp-preprod.cargill.com
uk.employee.cargill.com
sfimage.cargill.com
uxq2fcs.admin.cargill.com
www.glimsonline.com
www.br.cda.cargill.com
proxya10.facturasmexico.cargill.com
sapcarrier.cargill.com
www.infoservice.cargill.com
cargill.com
cfse.cargill.com
boatviewn2.cargill.com
jobs.cargill.com
boomi.eu.cargill.com
itsmtest.cargill.com
protein.preferences.cargill.com
click.info.cargill.com
milkcalculator.cargill.com
proxyA10.frete.br.cargill.com
sftna1.cargill.com
sfdc-h5-dev.cargill.com
akamai-san88.exacttarget.com
sapcarrier.cargill.com
www.nacmsop.corn.cargill.com
profile-prepord.cargill.com
www.facturasmexico.cargill.com
consumerdesign.cargill.com
*.tgrc.cargill.com
www.emailtracker.cargill.com
view.riskmanagement.cargill.com
emeamerchandisestore.cargill.com
www.emailtracker.cargill.com
www.saleslogix.can.cargill.com
www.facturasmexico.cargill.com
SFBwebextna.cargill.com
www.gold.cargill.com
www.emailtracker.cargill.com
www.rdsnet.cargill.com
www.emailtracker.cargill.com
apiservices.na.cargill.com
proxya10-erp-test.cargill.com
portal-preprod.cargill.com
management.cargill.com
www.mycargill.com
fsso-qa.cargill.com
lsnapool01.cargill.com
prohanedhdb.admin.cargill.com
www.portalfrete.br.cargill.com
akamai-san88.exacttarget.com
tarc.cargill.com
fsso-qa.cargill.com
proxy.userprovisioning.cargill.com
transferwebservicepcert.na.can.cargill.com
csd-bot.cargill.com
csd-bot.cargill.com
uk.employee.cargill.com
cloud.info.cargill.com
fibi.preferences.cargill.com
www.emailtracker.cargill.com
tarc-cgitest2.cargill.com
domino.meat.cargill.com
www.cqnftp.cargill.com
proxy1-transportation8hm.cargill.com
proxya10-tranportation8-preprod.cargill.com
innovation.cargill.com
pages.info.cargill.com
proxya10.facturasmexico.cargill.com
proxy1-transportation8hm-test.cargill.com
www.cargill.com
wstransferdataservice.na.can.cargill.com
cargill.com
rpadeg001.cargill.com
nl.vpn.cargill.com
*.cargill.com
*.cargill.com
br.employee.cargill.com
www.fibi.preferences.cargill.com
uk.employee.cargill.com
cgi.wssprod.cargill.com
sfbwebexteuwgc.cargill.com
www.nl.cda.cargill.com
wsauthorizationmanager.na.can.cargill.com
prod.wcm.cargill.com
cmsapi2.cargill.com
csr2.cargill.com
www.cargillshareholder.cargill.com
proxyA10.frete.br.cargill.com
lsnapool01.cargill.com
*.na.can.cargill.com
fsso.cargill.com
br.employee.cargill.com
portal-preprod.cargill.com

Certificate

The complete raw certificate details for cargill.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOdppon9izFH8hrPuQOP
qjHodJYhul3eYwMTptZcl1nNJkwv5HV+5AblWRkoMe3zeJeQ8gBkzrYF3zDhOoA1
fKNyj0a6znfqw+AKjq4IgL4pEEXBfQrURpeEpt6WDNNWzJ/62krz0bcYOub8LTFz
1Vu5uu/lkUpqCq3D+JG1ExnPfPo/sRinTbI1cXm4Huyb9WxoCwOaFbNRS24czANm
V2BtXHPxajoH4dpgqMgo9gtQ7s1vK6Ph+4ermiSys51oDtDc+MGGvtaxzbIBDNWF
fs2jDzFrWRTzm/4SVl9Q4Ob05OFIdqeooxWCYho4WQp3hbMYw8CksdW7jsxVqRk8
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 197099434734471924537014601324358198174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-18 12:18:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 12:48:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wayzata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cargill, Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cargill.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16777570109705960968510094602317059921815020683156304051393670600032370548410589828901399101085972954372756302429074481855715195415462778570027122763195359271832178397691349392090176043623233345175139074241119776391366651571490238078044209620957892897927788803019612924332187772726242678539496074447923482704306682483119356546344432478076224873045242847898377565808931585795086879048682817503929598479957608422214491683279281476429248428667712919434976676946894733044180482119130565940924104258113002799227897088745256456645528878313088089964854991993320736476763572053888837883829009059263330775846026209139810188427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac4af5e90494f738373654e239a8259a767f53c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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