UCA.glencore.co.za

- Glencore International AG -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 3e:89:4a:93:bf:b7:0a:f1:db:9e:3c:95:43:a0:6d:ab was issued on by thawte, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Glencore International AG

Organization: Glencore International AG
Organization unit: Engineering
State / Province: Zug
Locality: Baar
Country: CH

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:89:4a:93:bf:b7:0a:f1:db:9e:3c:95:43:a0:6d:ab
Serial Number (int): 83124993012467537311635402560307752363
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): d4:85:4b:f3:6c:b8:8d:fe:4a:e9:bf:e4:74:e5:85:c4:5f:25:f7:89
Fingerprint (sha256): 1f:9e:78:55:f7:d4:b0:ba:16:25:3b:64:9f:37:72:50:01:36:f5:c2:23:76:f6:a6:23:d7:77:31:32:22:4d:9b

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate UCA.glencore.co.za

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for UCA.glencore.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

UCB.glencore.co.za
ciscolb1.glencore.com
ciscolb2.glencore.com
conf.glencore.com
glencore.co.za
glencore.com
zajnbdmz7cewep2.anyaccess.net
UCA.glencore.co.za

Other certificates including the domain name glencore.co.za

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
ap.bar.ch.glencore.net
UCA-ZA.glencore.com
helpdesk.sicom.mu
UCA.glencore.co.za
ithelpdesk.oneplm.com
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
sdpcloud.netwarx.com
ictportal.linkfinancial.eu
ithelp.mhphotels.com
ithelp.mhphotels.com
sfbext.bar.ch.glencore.net
sdp.dilloneustace.ie
helpdesk.aerocompact.com
helpdesk.bedes.org
servicedesk.bat-agrar.de
helpdeskittest.zetes.com
UCA.glencore.co.za
aiseait.fuchs.com
UCA.glencore.co.za
helpdesk.hambroperks.com
assist.pentest.partners
itservicedesk.eldoradogold.com
sfbext.zrh.ch.glencore.net
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
sfbext.bar.ch.glencore.net
servicedesk.jmlgroup.co.uk
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
assist.pentest.partners
aiseait.fuchs.com
servicedesk.bwbconsulting.com
sfbext.zrh.ch.glencore.net
ap.bar.ch.glencore.net
ap.bar.ch.glencore.net
noc.servicedesk.as
servicedesk.akcentral.com
zahelpdesk.glencore.co.za
assist.pentest.partners
assist.pentest.partners
servicedesk.medica.ie
UCA.glencore.co.za
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
assist.pentest.partners
assist.pentest.partners
assist.pentest.partners
helpdesk.actosoft.de
ithelpdesk.rev-log.com
sau.solarprofit.es
zahelpdesk.glencore.co.za
sfbext.bar.ch.glencore.net
assist.pentest.partners
helpdeskittest.zetes.com
sfbext.zrh.ch.glencore.net
servicedesk.bat-agrar.de
servicedesk.weareavidity.com
helpdesk.bedes.org
aiseait.fuchs.com
ap.bar.ch.glencore.net
ithelp.mhphotels.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
ap.bar.ch.glencore.net
servicedesk.procentia.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
servicedesk.winfieldunited.co.za
helpdesk.bellagroup.dk
helpdesk.saviaantjes.be
ap.bar.ch.glencore.net
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.vista.ch
assist.pentest.partners
sfbext.bar.ch.glencore.net
sfbext.bar.ch.glencore.net
helpdesk.nationalcaregroup.com
sistemes.accio.gencat.cat
ictportal.linkfinancial.eu
uca-zaf.glencore.com
helpdesk.minitab.com
ithelpdesk.rev-log.com
sistemes.accio.gencat.cat
sdp.vdp.com
ithelpdesk.rev-log.com
ap.bar.ch.glencore.net
assist.pentest.partners

Certificate

The complete raw certificate details for UCA.glencore.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83124993012467537311635402560307752363
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zug'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Glencore International AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Engineering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UCA.glencore.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 660563936964699719101886583429083108429858186318266240884592071428271483918013405297653531364502778481162942264943286500210864601416322973320080223006821761692728173086907498515735334981426341004822297149591201355830777677508290001280858763335689810713289305540790527734495540320613238907981219252249950637860435250324362446528164773554088057862150313874162718357318923814639162127253983835709897869566358071369760144245103571761446144445873841325331778011028937113184993685166598698521482514392873201545772021111208104687608935957374764923040966683846964722110202620915832971938535064107413234689385371423808150068362991731765284136415018700759616949474160292299437555828069604318280321101482976918980706488508119198197033462142513659142453230946126673286783418706411427498308281270947041536647717351305897480968941059232620903944300784381617407479034811643952930209784525702301791642451661206063338308932201507044002402391206986225998632831959872184262187942174151640791090904292755158573787828306836316372223137500031982128871672459730202353713800510251928321241111926090711538334446178281846829812012503800660322994137024350331444363392968854125008619353054119721177563155941062644411820543964851617775601378279518511761322335317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UCB.glencore.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb1.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb2.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zajnbdmz7cewep2.anyaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UCA.glencore.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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