*.engenoil.com

- Engen Petroleum Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 39:35:62:0a:45:82:8b:a9:b8:26:13:c3:0b:9d:61:14 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Engen Petroleum Limited

Organization: Engen Petroleum Limited
State / Province: Western Cape
Locality: Cape Town
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:35:62:0a:45:82:8b:a9:b8:26:13:c3:0b:9d:61:14
Serial Number (int): 76043175983177619200106935460342620436
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: c3:68:34:9f:e0:0a:3b:d2:3b:91:71:ac:be:6c:b6:76:1e:c5:31:8a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ab:72:f2:72:79:92:5c:54:05:85:60:a8:6b:d9:77:ba:d7:0e:aa:e1
Fingerprint (sha256): 0a:34:ac:c4:35:70:52:c0:4c:a9:36:6e:1e:79:b5:de:9f:08:f6:da:29:bd:7c:26:40:f3:65:a7:00:33:69:53

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.engenoil.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.engenoil.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.engenoil.com
engenoil.com

Other certificates including the domain name engenoil.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.engenoil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76043175983177619200106935460342620436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-16 08:02:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 08:02:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Engen Petroleum Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.engenoil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734795295654201639750066286038939387485384722791070796939688171456313266153860081059623416220646499290650806546082932181235959274383134363620738739995590682225473217627145250027213754535591087284331358980556215473854358445991845932502263940820411900259799149914201993998471113958991576688133970741011524001612054867619674722194412211286455065087980763519196548522235378300750660281647528253915402765775720088329680802868229740476700745651091897793452584839296303844300998034608615011650008486563980166151002974152526641468771400226609954987080992891425124663484156564386973611762148208644832770300025234319151261659986504325794157967073863343732888815194054934176854036835678573481287736856476956659588149742412767056192920170110621891588123847381693734711248803944523048055416908426748902652091378355912562233551083584102757280667399593222340137391807849691209559469500097484215299423003962746827769042996778021797820496491202070799134032880403828897384861910992080508015949664330043848912395257564486168176176499572249787512055879891704475624307418113039200938820864656318758966241626021977864418547679448806412469020927016551844751066965526079568060569947660508771371398481372003941348424749588871519531038035969538519513286335253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c368349fe00a3bd23b9171acbe6cb6761ec5318a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engenoil.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cf3be978ac23518934985d5e6a3f65ff6013e826e2c43ffc57e01a486af4df75db5c568b99478672bafc1a572c4eb3112f9413027b49a5af06ba822305f928d26ce5600d7f64e07d088589b7811a51ff47f20724b1bdf06876e9c8c1aab855d83e197562b0e4c0f311fe2b6c3c981fdf5f59fb534bd369e7ec6f511977a7c4051e4b961e90a10bdcdfd9a46819c276d261b7ec2e9274fc8fecf90cc0dd9edacb504e561a1baf7e30ed5a6ff96b11671678755091499fb268651fec107e2fd073de0a10863e3a6d9d3cd8ccbd84ec70ec6095239262bfd7951fff935ef29badc2addb8a4d7a5d79ed551719e9f74f33d2fa0647f87f6532d66eaf0bd230a84b48