csd-bot.cargill.com

- Cargill, Incorporated -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4b:d2:28:ab:c6:4f:c0:43:26:00:19:ce:da:d0:0c:10 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cargill, Incorporated

Organization: Cargill, Incorporated
State / Province: Minnesota
Locality: Wayzata
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4b:d2:28:ab:c6:4f:c0:43:26:00:19:ce:da:d0:0c:10
Serial Number (int): 100783306929935385293206280308624722960
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 44:34:e4:59:00:ad:8b:9a:f6:77:80:5e:1d:d0:6b:10:05:ce:ad:06
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 27:25:86:09:8b:b0:dd:f5:eb:82:0c:df:d9:2f:bd:38:65:23:a3:2a
Fingerprint (sha256): 0c:31:91:29:45:d5:d2:df:dd:0e:fa:7a:6a:1e:b9:5d:a3:fd:54:35:e4:4b:08:af:73:bf:0a:8d:69:20:4a:b0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate csd-bot.cargill.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for csd-bot.cargill.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csd-bot.cargill.com

Other certificates including the domain name cargill.com

(limited to 100 certificates)
lsaena03.cargill.com
cargill371-cfw.gw.cargill.com
eln.qa.cargill.com
apiportalunisolution.cargill.com
cuposgluapi.ar.cargill.com
jp.vpn.cargill.com
tableau.cargill.com
proxy.userprovisioning-preprod.cargill.com
erp-preprod.cargill.com
uk.employee.cargill.com
sfimage.cargill.com
uxq2fcs.admin.cargill.com
www.glimsonline.com
www.br.cda.cargill.com
proxya10.facturasmexico.cargill.com
sapcarrier.cargill.com
www.infoservice.cargill.com
cargill.com
cfse.cargill.com
*.tgrc.cargill.com
boatviewn2.cargill.com
jobs.cargill.com
boomi.eu.cargill.com
itsmtest.cargill.com
protein.preferences.cargill.com
click.info.cargill.com
milkcalculator.cargill.com
proxyA10.frete.br.cargill.com
sftna1.cargill.com
sfdc-h5-dev.cargill.com
akamai-san88.exacttarget.com
sapcarrier.cargill.com
www.nacmsop.corn.cargill.com
profile-prepord.cargill.com
www.facturasmexico.cargill.com
consumerdesign.cargill.com
*.tgrc.cargill.com
www.emailtracker.cargill.com
view.riskmanagement.cargill.com
emeamerchandisestore.cargill.com
www.emailtracker.cargill.com
www.saleslogix.can.cargill.com
www.facturasmexico.cargill.com
SFBwebextna.cargill.com
www.gold.cargill.com
www.emailtracker.cargill.com
www.rdsnet.cargill.com
www.emailtracker.cargill.com
apiservices.na.cargill.com
proxya10-erp-test.cargill.com
portal-preprod.cargill.com
management.cargill.com
www.mycargill.com
fsso-qa.cargill.com
exportdocs-data.stage.cargill.com
lsnapool01.cargill.com
prohanedhdb.admin.cargill.com
www.portalfrete.br.cargill.com
akamai-san88.exacttarget.com
tarc.cargill.com
fsso-qa.cargill.com
proxy.userprovisioning.cargill.com
transferwebservicepcert.na.can.cargill.com
csd-bot.cargill.com
csd-bot.cargill.com
uk.employee.cargill.com
cloud.info.cargill.com
fibi.preferences.cargill.com
www.emailtracker.cargill.com
tarc-cgitest2.cargill.com
domino.meat.cargill.com
www.cqnftp.cargill.com
proxy1-transportation8hm.cargill.com
proxya10-tranportation8-preprod.cargill.com
innovation.cargill.com
pages.info.cargill.com
proxya10.facturasmexico.cargill.com
proxy1-transportation8hm-test.cargill.com
www.cargill.com
wstransferdataservice.na.can.cargill.com
cargill.com
rpadeg001.cargill.com
nl.vpn.cargill.com
*.cargill.com
*.cargill.com
br.employee.cargill.com
www.fibi.preferences.cargill.com
uk.employee.cargill.com
cgi.wssprod.cargill.com
sfbwebexteuwgc.cargill.com
www.nl.cda.cargill.com
wsauthorizationmanager.na.can.cargill.com
prod.wcm.cargill.com
cmsapi2.cargill.com
csr2.cargill.com
www.cargillshareholder.cargill.com
proxyA10.frete.br.cargill.com
lsnapool01.cargill.com
*.na.can.cargill.com
fsso.cargill.com

Certificate

The complete raw certificate details for csd-bot.cargill.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAsUnJjW+iReIaX17IrR
R/ib2pdGkwuJvFRi4DyMBBYWLJ3vGsT7+W43xx7Di4X4N6QJH0gtIfCCtGOYMYz0
xy35C3b7K8+0QjEaWjHgVN0C66QgMItl+L0uDe55z9evALnFSE1r3pJB45bhNNh3
qm0ir7Vdn90f2NDrjIIT9PN4RZP5TBCs4V1ld40jtVCusFDoABw689jfAAKkBWEN
TkK2rV86asWSwGVwtIDXdyfq96jqzJShA2t5zErNCL60ozArJHIHj0FEGQtPsM4C
hMRMIE/Pa+hyxaewI8J8p3Z99jTKNqj86GWg3SsK1/0/vZKfee9iQ1kfdEk9aV4Y
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100783306929935385293206280308624722960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 15:31:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-26 15:31:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wayzata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cargill, Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'csd-bot.cargill.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22223405679363192517242291778576086581563694744819229710643744119717415763095099371782777183988013149517222399754023235786614699447414896712562242482828170936212204976366245963881592587474090857680423608102896831693733196011341128719508172512600975248036353325462788948271899103164515184723459335559780737360135578618954730634176494000180386593460265849834370291991654804328310351943252856496952594464110432982043033067439443367205726383187911932800312271650988592309044154965355995907838070214730470322065867839952820146391015114935093577280287764885772916601554014115978202161122944029534575881439506135870097725649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4434e45900ad8b9af677805e1dd06b1005cead06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csd-bot.cargill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ddccef6c741975a6828d699271ebad8a394887789c60fe5064768fba40e04f93e16f6ea49bd493cc74cf56ba899af22b1ed46ed7f493c0a51bff8908c232829071b72912e53ddd74bdc789692c8a968a1f9d5345c72190d245532d576d09a2c052018f5e6ede0fb3098fe87e1d147b718b6451aae4264d412fdb6aeefcd9bac4ba71a9592f49be90632028781061f96581d06567da4c398e4c4a659ccf965db98136ce07ac012639bb609a87d8e67713ff33e97edb2aed8a420b3606677667b76af04c128704a0e553d0b6da214a5e3c0d47685ab21549abe2c6a7db85af5c582b7133b305f31f5cf50a9fd3924d78ede2652eeb278a17e9df0350f9e06261d