mafat.bhp.com

- BHP INNOVATION PTY LTD -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:75:2d:c0:ce:0f:9a:df:88:ee:9a:a0:a2:78:e3:05 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BHP INNOVATION PTY LTD

Organization: BHP INNOVATION PTY LTD
State / Province: Victoria
Locality: Melbourne
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:75:2d:c0:ce:0f:9a:df:88:ee:9a:a0:a2:78:e3:05
Serial Number (int): 19217618657449541395533850307034931973
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:e1:5b:6a:b5:2e:56:35:6a:ee:c2:1d:fd:b1:90:19:96:36:cd:83
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): e7:1b:c6:28:4a:92:db:e5:87:cd:69:22:78:80:cc:ca:84:a3:46:b1
Fingerprint (sha256): 18:c2:f3:0f:e6:ea:1b:b0:70:3a:d1:3b:96:bb:b3:a8:48:d3:5b:a6:ac:6b:c2:66:2b:93:fd:95:d2:03:88:8c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate mafat.bhp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mafat.bhp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mafat.bhp.com

Other certificates including the domain name bhp.com

(limited to 100 certificates)
flex-mau.bhp.com
dwapps.bhp.com
test-sid.bhp.com
*.bhpbilliton.com
edrmuat.bhp.com
PER1069RVB002.ent.bhpbilliton.net
mineralsaustralia.bhp.com
automate.bhp.com
*.bhp.com
rsb.bhp.com
PER1073RVB001.ent.bhpbilliton.net
dwsvc-uat.bhp.com
exmte.bhp.com
mobile.bhp.com
beim-qa.bhp.com
smtp.bhp.com
APMQA.BHP.COM
coalpivision.bhp.com
thrivetoolkit.bhp.com
petcoresight.bhpbilliton.com
incitrix.apac.ent.bhpbilliton.net
dlms-minam-qa.bhp.com
edrmtest.bhp.com
dwsvc-sit.bhp.com
dwapi-dev.bhp.com
bionmnyces01.bhpbilliton.net
necapps.bhp.com
ewm-mdev.bhp.com
petapm.bhpbilliton.net
phoupecmapl01.americas.ent.bhpbilliton.net
eumdev.bhp.com
BHPCMG.BHP.COM
petmobile.bhpbilliton.com
petextranet.bhpbilliton.com
APIPORTAL-AP.BHP.COM
hse.ironore.bhp.com
insidesvc.bhp.com
APMDEV.BHP.COM
tiscshou.bhp.com
bhp1task-dev.bhp.com
flex.bhp.com
mfa.bhp.com
apps-cdv-uat.bhpbilliton.com
inside.bhp.com
biomulyces12.bhpbilliton.net
minausapps.bhp.com
mobile.bhp.com
exmte.bhp.com
OD-TMS.bhp.com
apps-cdv-uat.bhpbilliton.com
ndes.bhp.com
source.bhp.com
shutdown.bhpbilliton.com
PER1069RVB001.ent.bhpbilliton.net
aubnepvcse09.bhpbilliton.com
petcmo.bhpbilliton.com
petapps-cdv.bhpbilliton.com
iisfarm-test.bhp.com
coalpivision.bhp.com
mi.bhp.com
minauoswfmtest.bhp.com
insideapps-uat.bhp.com
adagateway-qa.bhp.com
aubnepvcse01.bhpbilliton.com
mktlgw-vapp58.ent.bhpbilliton.com
ideas.bhp.com
apps-cdv-uat.bhpbilliton.com
aubnepvcse03.bhpbilliton.com
digitalsuite.bhp.com
uswest1wbx5.bhp.com
uswest1wbx1.bhp.com
exmte.bhp.com
APMDEV.BHP.COM
southflank.bhp.com
PET5083RVB001.ent.bhpbilliton.net
dwapps-uat.bhp.com
KUL2010RVB001.ent.bhpbilliton.net
ideas.bhp.com
aubnepvcse04.bhpbilliton.com
pdcrdgwap01vei.americas.ent.bhpbilliton.net
mfa.bhp.com
ecc-mdev.bhpbilliton.com
phoudoamapl02.americas.ent.bhpbilliton.net
APIPORTAL-NP-AP.BHP.COM
petpivision.apac.bhp.com
aubnepvcse04.bhpbilliton.com
erpint-mqas.bhp.com
exmte.bhp.com
mafat.bhp.com
dwapps-uat.bhp.com
waiopivision.bhp.com
dwapi-uat.bhpbilliton.com
PER1022RVB001.ent.bhpbilliton.net
minaucontrolleddocs.bhp.com
pet5028rvb001.ent.bhpbilliton.net
aubnepvcsc02.bhpbilliton.com
petoasis-test.bhpbilliton.net
ushoupvcse05.bhpbilliton.com
dwapps-uat.bhp.com
casePoc.bhpbilliton.com

Certificate

The complete raw certificate details for mafat.bhp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhkiQ4xzDyG1dK18YucQ
8KND/o9iuIztTS2tlsF5vjGlXl9/ZE0fA2AAgB+mBC1H9032CFIU1QGH09ANTl/2
VHv7KgDUlEF2G95P1v0cNxz7EL2Neo8oe0Np+KXr2Y2AJr4t5aGgdYyXPlUmmrja
1bDdrmBFKsTP+sm3upZ2SmRCj0R2WPEGEF0Xtfvd+OVtqwmu0G7NRdwLcNVuy5Z8
lZrKL/XMAedglhvvVs8+2X0BdxOceLw6GdsU0ciW0ICDG3IGWl1ylAb4T63TDmz9
DkJD4Mf/yogoBcDSNthjukIv8JAotrMRkkGN7XtZjfIAhyxgMiN6lODLMNv6H1UD
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19217618657449541395533850307034931973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BHP INNOVATION PTY LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mafat.bhp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25007578343295825195107068941653555720784036898384593748707658061919648665727088733265664309980412284990279659042130230176066271239109304871126105645595662558388582748112933688846263175458750348090786883587656524050556238357931666188580555083702549997302686565642148478683683083553911209383479827518801384349887127094458255798214942099371393253616257451862899486607339996652884796494930045316189218007744594072905467014285005230077410532077670912268472633375434132579630538609971020380858810260208358773531801681483703940679038945374489409558713157824395620779422936031714475526458880641645696578511021198111090738113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ce15b6ab52e56356aeec21dfdb190199636cd83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mafat.bhp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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