Mobile.engenoil.com

- Engen Petroleum Limited -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:23:f5:c5 was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Engen Petroleum Limited

Organization: Engen Petroleum Limited
Locality: Cape Town
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:23:f5:c5
Serial Number (int): 1277425093
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 40:ca:95:e9:7a:f9:1b:68:c5:21:56:ae:71:d3:f1:6c:71:5a:e3:48
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): d0:9e:e3:7a:51:35:9d:d2:cd:21:9d:11:a8:3b:6f:48:f9:25:d0:99
Fingerprint (sha256): 1b:fb:fb:c6:85:9f:fb:70:9c:68:84:20:fb:e0:65:dc:61:48:f5:2a:bc:37:84:3e:65:a8:d8:64:63:fe:e2:3a

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate Mobile.engenoil.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Mobile.engenoil.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Mobile.engenoil.com
Autodiscover.engenoil.com
Legacy.engen.co.za
Hybrid.engenoil.com
Autodiscover.engen.mw

Other certificates including the domain name engenoil.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for Mobile.engenoil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmrwerm1G4ZR/ZXNPl/Cz
ggxhZkVDDGajx4l/9j9/3Hm4mHJtw78BpT1YjGbdshSSxZyAp0fRo7tMXeo/6d5j
2YAzOcAYqoaO9Y3AEhkCdCYdsYkErI9f/s7UjAqKSdGpxUquDBHo+a/wHLNPJyCi
9amrX0jp480QbascdC97uWUvmLRJ9tiq1/Sc3w4FZcHWiWB3jCGeUE1JTft1G3BA
15ePye0lQNmPum4ZbB7ZxXunCOpi2WU++2ImVM6RIoULYQcoCN0YzbZ3Y6ySa/BW
Ex4xqI32JlVHGQA2fNAn7EwiiYpckI9rigBt9csaGltjgAMeJdtTlgRAKqwBHXJ3
FVnHDFdpvl8/V/q1QwUKA5kjNu1kl61/ZPEnkgKlRVEBUr9dGBMv4KEHJ0CRyRdD
C9lk+Z6MU+Be63rWXKhTKTJNHsPFxadXrySp+iqKMnejyi4JRbnWOvlwQDBQgEWp
56bFk2hFIKM24ofhG+w12jjJZ0S5Qc01cESEUnslgetIy9n1Q4UbxVQKk+iQqpDL
Zq8VgN+yUHAIsVaY1B8QUpXX4+ynyP7G7qT19WONYvvqAbfCsDxuq7f/08cn/xDz
ejV/c9b5rE3rfHjn7xBTdteMpa9tGlBMVpveWe5C/IZyzoS/kRZlHkSsa8HXZsoc
1rWKtGZPk+8QALnTNwN9gRMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277425093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-21 14:06:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-16 07:02:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Engen Petroleum Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mobile.engenoil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 631263085015036739145285305460520008229223192643984405214157353461681782786781320560888102106678939224759884659107150239593677724565577604903386798568202295419721123420711617251268151572566683092926070877480429254811309527886439881858619450611387329005379266922935252951615161256649616675792175062434021086285202796100637578578176392283890811557014596380763062511313471554584586715243885984179410305583155592895940862599398800435796835602133222345389815146678250518411971347832668727531974454494178458904730985604769290184591972062469472162610641293277118919827418856511500823953021137682745046894959603259841125447298423860062858194111317902229447641883842723954106384764680648892117179259132017048438848813859593596899182492144081697847564350061367372653512163865651018495386440127792678352841716901763641229163468665928802628105161932477986984883625201685800637949271925404095245656039490111705311234865861465517986581034564667261776374576532784621514037089990959150212019647352526767931775468014998326607375686449733780318179796843276510947791013288997695669644028232015740692863227936259602929176764575406632768463373907852654527958652733716894363841283998532476969092975752336003354836149196593318820153714263087501082175045907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Mobile.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Legacy.engen.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.mw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40ca95e97af91b68c52156ae71d3f16c715ae348
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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