uca-eur.glencore.com

- Glencore International AG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:1a:6a:e1:1f:84:ed:f6:9b:53:0b:4f:8b:0a:4f:96 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Glencore International AG

Organization: Glencore International AG
Locality: Baar
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:1a:6a:e1:1f:84:ed:f6:9b:53:0b:4f:8b:0a:4f:96
Serial Number (int): 6783307468755774932000337517190205334
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4d:b8:ca:b0:fd:98:82:bd:bc:bd:27:e1:c9:73:6e:79:4a:e3:27:7a
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 28:b0:58:56:d9:31:c1:0d:2a:c6:69:04:04:19:76:87:db:27:53:8d
Fingerprint (sha256): 2a:ae:64:0f:db:c6:36:5b:9d:d1:d8:d6:97:86:bf:3f:71:2c:b4:f0:40:7b:78:04:c6:04:26:5a:9f:14:63:19

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate uca-eur.glencore.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uca-eur.glencore.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uca-eur.glencore.com
glencore.com
glencore.net
conf.glencore.com
ucb-eur.glencore.com
chbardmz7cewep2.anyaccess.net
ciscolb1.glencore.com
ciscolb2.glencore.com

Other certificates including the domain name glencore.com

(limited to 100 certificates)
UCA.glencore.com
www.glencore.com
ucb-sam.glencore.com
www.glencore.com
www.glencore.com
UCB-AUS.glencore.com
www.glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
ACB-SAM.glencore.com
UCA-ZA.glencore.com
www.glencore.com
acb-eur.glencore.com
glencore.com
UCA.glencore.co.za
glencore.com
glencore.com
www.glencore.com
UCB-ASA.glencore.com
UCB-EU.glencore.com
www.glencore.com
glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
edms.ch.glencore.com
www.glencore.com
ACB-NAM.glencore.com
sfbext.bar.ch.glencore.net
www.glencore.com
ACA-ZAF.glencore.com
uca-sam.glencore.com
UCB.glencore.com
glencore.com
www-dev.glencore.com
*.glencore.com
hermes.glencore.com
*.glencore.com
UCA-NAM.glencore.com
ap.zrh.ch.glencore.net
www.glencore.com
UCA.glencore.co.za
UCB-ASA.glencore.com
www.glencore.com
UCA.glencore.co.za
mail.eur.glencore.net
www.glencore.com
uma-eur-test.glencore.com
glencore.com
www.glencore.com
UCA-NAM.glencore.com
UCB-ZAF.glencore.com
UCB-EUR.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
smime.glencore.com
glencore.com
office.glencore.com
sfbext.bar.ch.glencore.net
glencore.com
uca-eur.glencore.com
www.glencore.com
www.glencore.com
ACB-ZAF.glencore.com
UCB.glencore.com
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
glencore.com
www.glencore.com
test-ponton-uk.glencore.com
UCA-NAM.glencore.com
www.glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
www.glencore.com
ms-sbc-test1.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
UCA-ZAF.glencore.com
ap.bar.ch.glencore.net
edms.ch.glencore.com
www.glencore.com
glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
aca-eur.glencore.com
www.glencore.com
UCB-SAM.glencore.com
ucb-nam.glencore.com
glencore.com
UCA.glencore.co.za

Certificate

The complete raw certificate details for uca-eur.glencore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6783307468755774932000337517190205334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glencore International AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uca-eur.glencore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788264538846630877425892321922426935229562084215781261810415857256981083445247936477587575184191089412596948878467597201778914961861450361939117434306943606044560603295226131282458284338620468536517572607258933630377276667760479982729232550138744563855554499195070754015887440610463239074229654569812471012246615799675839937682382876806751801506257755541401977112322051825099769002092337184870712991168141408224548338530925826227136045963687130143060002300623200994359887923547679576076682955650106657649399730682806070780773018938188844857956091662978078127692575831035627880005046461904842988113812338288805490146029484126356393228824059249389184755793311102994459892238033620712642560860161953368553180822990903768345023846383565867116289148871565252135015833054838096202285088784558885975573952105621676384293145980982582848149250048794007501376035465918115249916490186549001551790182691676729298751548587001824256346805828729953148171465554991497696421917821681077012971856696450142864555843936900993574096809186124744140552635405483424046696529697963974650257235286182738950135934630206586446292858373316570447270986008259831163756976259226832857764791411831519708608490053533593948701560194401493512792660372295290394511146127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4db8cab0fd9882bdbcbd27e1c9736e794ae3277a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uca-eur.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucb-eur.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chbardmz7cewep2.anyaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb1.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb2.glencore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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