*.sapref.com

- Shell and BP South African Petroleum Refineries -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 34:9f:94:d8:aa:95:37:74:dc:93:80:75:0a:3e:5b:e1 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Shell and BP South African Petroleum Refineries

Organization: Shell and BP South African Petroleum Refineries
State / Province: KwaZulu Natal
Locality: Isipingo
Country: ZA

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:9f:94:d8:aa:95:37:74:dc:93:80:75:0a:3e:5b:e1
Serial Number (int): 69948449944019950014878281010738256865
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): e2:23:6d:f5:2d:a4:a1:5a:99:10:e5:1e:b3:d8:ff:ec:47:89:eb:a0
Fingerprint (sha256): 2c:b8:13:db:b5:f3:aa:79:ac:ce:c9:04:c5:fe:b8:31:0d:27:a8:1d:0c:21:37:48:90:32:02:64:bc:0f:60:48

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.sapref.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sapref.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sapref.com
sapref.com

Other certificates including the domain name sapref.com

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
servicedesk.monaghancoco.ie
sdp.hja.net
servicedesk.monaghancoco.ie
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
helpdesk.sicom.mu
ithelpdesk.oneplm.com
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
itsupport.bandmwaste.com
sdpcloud.netwarx.com
ictportal.linkfinancial.eu
ithelp.mhphotels.com
helpdesk.alivetravel.com
ithelp.mhphotels.com
sapref.com
sdp.dilloneustace.ie
itassist.harrowschool.org.uk
helpdesk.aerocompact.com
helpdesk.commit.fi
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
servicedesk.monaghancoco.ie
help.thereader.org.uk
helpdesk.bedes.org
servicedesk.bat-agrar.de
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdeskittest.zetes.com
pomoc.lekam.pl
aiseait.fuchs.com
servicedesk.endrich.com
servicedesk.moredun.ac.uk
helpdesk.hambroperks.com
servicedesk.ambient.org.uk
itservicedesk.emhartglass.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
itsupport.bhtc.com
servicedesk.monaghancoco.ie
*.sapref.com
servicedesk.jmlgroup.co.uk
servicedesk.monaghancoco.ie
assist.pentest.partners
aiseait.fuchs.com
servicedesk.monaghancoco.ie
itsupport.bandmwaste.com
servicerequest.sapref.com
servicedesk.bwbconsulting.com
ololo.sm.urusai.fun
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
itservicedesk.emhartglass.com
noc.servicedesk.as
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.akcentral.com
zahelpdesk.glencore.co.za
webcon.sapref.com
assist.pentest.partners
assist.pentest.partners
service-desk.bedfordgirlsschool.co.uk
servicedesk.ambient.org.uk
servicedesk.medica.ie
lync.sapref.com
servicedesk.durbinglobal.com
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
servicedesk.grupaeurocash.pl
assist.pentest.partners
helpdesk.greenfood.nl
assist.pentest.partners
newservicedesk.mi-hub.co.uk
assist.pentest.partners
servicedesk.labbuit.it
helpdesk.actosoft.de
servicedesk.monaghancoco.ie
ithelpdesk.rev-log.com
sau.solarprofit.es
zahelpdesk.glencore.co.za
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
assist.pentest.partners
helpdeskittest.zetes.com
*.sapref.com
help.thereader.org.uk

Certificate

The complete raw certificate details for *.sapref.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4GfX1O5mCb6rycEsOsM
bmpKviqeSY2PHSEw/xg5HnIXPekLyCbzt9YnoEccqM3G98PMAVXAcqWsHvLqx4uI
fc3cTJYSAJNVowHvoI9vQvC9pjaSbQu1Blu4pslUlzcVVyFfm8MPwhS2bo7C5mvo
sG8QDAoe/vW0IN0UX4rY6n0Q9Mkyvm6VPaZqu05goyERzudioUvvinurfemnsyJu
OIeyqXFz7cJ6vxTcqHCe4U+BBnLEjAA8NNGoYV5ZuwrzL/ysuksv0fyxIqc3Rllq
4FWAngfL8iPOzAHJ3yWypOWS28tefYUzTAF0XTLqBnrYI1pmHT/74yJq2kCk6Xpy
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69948449944019950014878281010738256865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KwaZulu Natal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Isipingo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Shell and BP South African Petroleum Refineries'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.sapref.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18115996871029095008852742875074660507711000125112721862938800894350871653079766422948275863290725493659751018825941636140326110002932053385547619780461693235103374832922179785209210743338291125033829624855054087379013850451375533471574226558833960459186725059226012335926181120723200459603083264123035982968665265133703054078682226032587495539401727095697629566634252590260426091867261356468859853392685152846561886627595762253273626218883515583338926994775578806472647615975306477857165745770461223728446776157021040446626260761020945375752203296844418321496886595300772082210186280580309990582751947804325153764047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sapref.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapref.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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