www.nl.cda.cargill.com

- Cargill Incorporated -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:a4:d1 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cargill Incorporated

Company registration number: CWUPP7-ONYoBhk9NmYDVepsSZpGWGpbb
Organization: Cargill Incorporated
Organization unit: GNS
State / Province: Minnesota
Locality: Wayzata
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a4:d1
Serial Number (int): 107729
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 68:38:10:8d:52:92:10:e1:8e:08:07:96:06:82:95:d8:3e:c2:95:3d
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 77:d5:2d:40:42:0b:82:07:45:83:59:00:3c:14:d1:fc:b7:18:0f:05
Fingerprint (sha256): 14:9a:2d:88:f9:4b:aa:46:60:b1:11:f9:27:d5:46:0a:e2:97:31:29:b1:44:2c:b9:23:83:1b:ec:47:15:30:40

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.nl.cda.cargill.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nl.cda.cargill.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nl.cda.cargill.com

Other certificates including the domain name cargill.com

(limited to 100 certificates)
lsaena03.cargill.com
cargill371-cfw.gw.cargill.com
eln.qa.cargill.com
apiportalunisolution.cargill.com
cuposgluapi.ar.cargill.com
jp.vpn.cargill.com
tableau.cargill.com
proxy.userprovisioning-preprod.cargill.com
erp-preprod.cargill.com
uk.employee.cargill.com
sfimage.cargill.com
uxq2fcs.admin.cargill.com
www.glimsonline.com
www.br.cda.cargill.com
proxya10.facturasmexico.cargill.com
sapcarrier.cargill.com
www.infoservice.cargill.com
cargill.com
cfse.cargill.com
boatviewn2.cargill.com
jobs.cargill.com
boomi.eu.cargill.com
itsmtest.cargill.com
protein.preferences.cargill.com
click.info.cargill.com
milkcalculator.cargill.com
proxyA10.frete.br.cargill.com
sftna1.cargill.com
sfdc-h5-dev.cargill.com
akamai-san88.exacttarget.com
sapcarrier.cargill.com
www.nacmsop.corn.cargill.com
profile-prepord.cargill.com
www.facturasmexico.cargill.com
consumerdesign.cargill.com
*.tgrc.cargill.com
www.emailtracker.cargill.com
view.riskmanagement.cargill.com
emeamerchandisestore.cargill.com
www.emailtracker.cargill.com
www.saleslogix.can.cargill.com
www.facturasmexico.cargill.com
SFBwebextna.cargill.com
www.gold.cargill.com
www.emailtracker.cargill.com
www.rdsnet.cargill.com
www.emailtracker.cargill.com
apiservices.na.cargill.com
proxya10-erp-test.cargill.com
portal-preprod.cargill.com
management.cargill.com
www.mycargill.com
fsso-qa.cargill.com
lsnapool01.cargill.com
prohanedhdb.admin.cargill.com
www.portalfrete.br.cargill.com
akamai-san88.exacttarget.com
tarc.cargill.com
fsso-qa.cargill.com
proxy.userprovisioning.cargill.com
transferwebservicepcert.na.can.cargill.com
csd-bot.cargill.com
csd-bot.cargill.com
uk.employee.cargill.com
cloud.info.cargill.com
fibi.preferences.cargill.com
www.emailtracker.cargill.com
tarc-cgitest2.cargill.com
domino.meat.cargill.com
www.cqnftp.cargill.com
proxy1-transportation8hm.cargill.com
proxya10-tranportation8-preprod.cargill.com
innovation.cargill.com
pages.info.cargill.com
proxya10.facturasmexico.cargill.com
proxy1-transportation8hm-test.cargill.com
www.cargill.com
wstransferdataservice.na.can.cargill.com
cargill.com
rpadeg001.cargill.com
nl.vpn.cargill.com
*.cargill.com
*.cargill.com
br.employee.cargill.com
www.fibi.preferences.cargill.com
uk.employee.cargill.com
cgi.wssprod.cargill.com
sfbwebexteuwgc.cargill.com
www.nl.cda.cargill.com
wsauthorizationmanager.na.can.cargill.com
prod.wcm.cargill.com
cmsapi2.cargill.com
csr2.cargill.com
www.cargillshareholder.cargill.com
proxyA10.frete.br.cargill.com
lsnapool01.cargill.com
*.na.can.cargill.com
fsso.cargill.com
br.employee.cargill.com
portal-preprod.cargill.com

Certificate

The complete raw certificate details for www.nl.cda.cargill.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8pVpiFLaZhhdyh8IcRJ
QI9WmQo/FdFLJDuCOg45wVHEo5VCWiy2n89vHbxl+OpwKChRp6Af+66pU+VqVGk+
pEdLpKUFy1FpwpJ/E2p8r++YOfLy362N19evypfXKzLjahWW68DzY8RjuUhekmru
HghKqRQ+zFEVBPbmJLkNbgUw4HkoDXJeeA0/56knw0oXY+EQl5LRBQVPP3TREMnG
CTuFtTw+x6azo0H89qYzU4dPdkoHocCXx7gcilOPKasZNoQryRmfKAandyzWX3Kx
ZmkaG8jjhs07lC6v4TMGXjhvPTGL/MWIA3jM9bMb2P5imFFiyleLOhymH2iZVeWQ
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-29 10:38:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-31 19:21:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CWUPP7-ONYoBhk9NmYDVepsSZpGWGpbb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wayzata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cargill Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GNS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nl.cda.cargill.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21686525042447234258516102551274424864921829717827183374087582781594671391246076362163611141987565204035103032971853595759126777860495819745337507766005844891306222121519330844080490674798680038552531088631901160516676420647009703917565840828605616170748848299480535052422087951449336190338847489858933068720735277479696088492171111601399529671571135899575904248607336694291566526291925893008062216491954212795318836025029359333274301263581603553258480761837467086280599416812460300620844497359614786965274004858884299217599621646287233614870624832836178691063475542346231336274795712132391793321122844350680224075949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nl.cda.cargill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6838108d529210e18e080796068295d83ec2953d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00480f95ca41acdd929006cc293ab85a7953b2b893214f99a99d6a621358a1a93f06929058a82aa8dae61012a31d41f49e823df1cca77ad40ce3e6a3b87d7cda012132e76ad80584f1767962340d90170271339ddccdc1fbbe5426c30dadf7a445914119c5909004baa504258ca4a72fbf8053b7d5de97dd209c277c30d5ee8d7b16e5dc31a9acf4067d3fc6c7762bbdfe220ea6ff68cc8d6f164f28187e75aa46da8e40e39e74182d012818790e25f623d5b30db921b5aba1d72a90379aff69987a6cec772b5aef12af5dddc9d9c2484873dae4fb55d844dd30996322433df099539f55933b48e8bed059c529b63f08b75679603ce090eedc83283057cf39f35a