glencore.com

- Glencore International AG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0e:b3:10:21:22:0f:1d:e1:43:71:c2:80:ef:3c:0e:62 was issued on by DigiCert Inc.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Glencore International AG

Organization: Glencore International AG
Locality: Baar
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:b3:10:21:22:0f:1d:e1:43:71:c2:80:ef:3c:0e:62
Serial Number (int): 19538940222290343088835432340384386658
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 61:3e:de:da:59:5a:61:89:c1:b4:e9:14:1a:b6:af:77:67:05:73:e7
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 78:71:8c:39:01:b1:99:31:dc:2e:83:7c:79:d1:4c:08:e5:83:31:66
Fingerprint (sha256): 2e:39:64:9f:3a:cf:57:0f:cd:3e:7f:56:55:09:f8:59:0c:8c:dd:12:e0:e0:df:69:d1:92:69:d5:be:ed:d1:11

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate glencore.com

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for glencore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

glencore.com
www.glencore.com
elpachon.com.ar
fonderiehorne.ca
azsa.es
cezinc.com
generalsmelting.ca
glencore.ch
glencore.com.au
glencore.com.br
glencoreperu.pe
glencorepossible.com.au
glencorerecycling.com
glencoretechnology.com
hvo.com.au
hypersparge.com
isakidd.com
isamill.com
isasmelt.com
jamesoncell.com
kiddoperations.ca
liddellcoal.com.au
mangoolamine.com.au
mcarthurrivermine.com.au
minematagami.ca
mineraglan.ca
mountisamines.com.au
mtowencomplex.com.au
nikkelverk.no
nordenhamer-zinkhuette.de
norfalco.com
portovesme.it
ravensworthoperations.com.au
sudburyino.ca
sukunkaproject.ca
ulancoal.com.au
unitedproject.com.au
wandoanproject.com.au
westwallsendmine.com.au
zipatank.com
minara.com.au
brendamines.ca
bulgacoal.com.au
albionprocess.com
glencore.ca
affinerieccr.ca
www.brunswicksmelter.ca
brunswicksmelter.ca
katangamining.com
hgstorageint.com
csamine.com.au
www.csamine.com.au
aurukunbauxite.com.au
www.aurukunbauxite.com.au
collinsvillecoal.com.au
www.collinsvillecoal.com.au
kamotocoppercompany.com
www.kamotocoppercompany.com
hailcreekcoal.com.au
www.hailcreekcoal.com.au
ctsco.com.au
www.ctsco.com.au
nordenham-metall.de
queenslandmetals.com.au
www.queenslandmetals.com.au
colinta.com.au
www.colinta.com.au
cmc-coal.ie
www.cmc-coal.ie
cmc-coal.com
www.cmc-coal.com
grupoprodeco.com.co
www.mineraglan.ca
www.glencorerecycling.com
www.affinerieccr.ca
www.fonderiehorne.ca
www.kiddoperations.ca
www.sudburyino.ca
www.sukunkaproject.ca
www.brendamines.ca
www.minematagami.ca
www.isamill.com
www.isasmelt.com
www.isakidd.com
www.hypersparge.com
www.jamesoncell.com
www.zipatank.com
www.albionprocess.com
www.mountisamines.com.au
www.mcarthurrivermine.com.au
www.bulgacoal.com.au
www.liddellcoal.com.au
www.mangoolamine.com.au
www.mtowencomplex.com.au
www.ravensworthoperations.com.au
www.ulancoal.com.au
www.westwallsendmine.com.au
www.unitedproject.com.au
www.wandoanproject.com.au
surathydrogen.com.au
www.surathydrogen.com.au
www.glencorepossible.com.au
www.generalsmelting.ca
glencore-nordenham.de
aquariusenergy.com

Other certificates including the domain name glencore.com

(limited to 100 certificates)
UCA.glencore.com
www.glencore.com
ucb-sam.glencore.com
www.glencore.com
www.glencore.com
UCB-AUS.glencore.com
www.glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
ACB-SAM.glencore.com
UCA-ZA.glencore.com
www.glencore.com
acb-eur.glencore.com
glencore.com
UCA.glencore.co.za
glencore.com
glencore.com
www.glencore.com
UCB-ASA.glencore.com
UCB-EU.glencore.com
www.glencore.com
glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
edms.ch.glencore.com
www.glencore.com
ACB-NAM.glencore.com
sfbext.bar.ch.glencore.net
www.glencore.com
ACA-ZAF.glencore.com
uca-sam.glencore.com
UCB.glencore.com
glencore.com
www-dev.glencore.com
*.glencore.com
hermes.glencore.com
*.glencore.com
UCA-NAM.glencore.com
ap.zrh.ch.glencore.net
www.glencore.com
UCA.glencore.co.za
UCB-ASA.glencore.com
www.glencore.com
UCA.glencore.co.za
mail.eur.glencore.net
www.glencore.com
uma-eur-test.glencore.com
glencore.com
www.glencore.com
UCA-NAM.glencore.com
UCB-ZAF.glencore.com
UCB-EUR.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
smime.glencore.com
glencore.com
office.glencore.com
sfbext.bar.ch.glencore.net
glencore.com
uca-eur.glencore.com
www.glencore.com
www.glencore.com
ACB-ZAF.glencore.com
UCB.glencore.com
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
glencore.com
www.glencore.com
test-ponton-uk.glencore.com
UCA-NAM.glencore.com
www.glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
www.glencore.com
ms-sbc-test1.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
UCA-ZAF.glencore.com
ap.bar.ch.glencore.net
edms.ch.glencore.com
www.glencore.com
glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
aca-eur.glencore.com
www.glencore.com
UCB-SAM.glencore.com
ucb-nam.glencore.com
glencore.com
UCA.glencore.co.za

Certificate

The complete raw certificate details for glencore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbzsfetpAkJdBx8Ztlpj
jUMMeNK+FfOTC245YEbbiDYJpr9gjyDvpNwbnpXy8rEWVRByZZZY1OamDKu5DSnh
7QUaG3lHOV8Y8Er8c67t1P05mnzeCxrSSK3htz354v8d0jMGuPFNnPiMvQkvbVgl
YY71UNDRXv5HaJ8JJmbjzKQbfSpaj1ABtHyJZJWvfGvDOJ7uNf2GpRx148s2m7ZY
XYA1WUUycZZIA+uaEMEEOtCZnbrmb9CnINhkP5G5tyVqTvRpdJtDK9JzgHhRrHSy
mN4pX5JPdhyYyGzytbOlluUdJja4mQG/aaZdkzXVXvVPNhW+21IhNxqE1NR+T40E
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19538940222290343088835432340384386658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glencore International AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'glencore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21932388555310899143942333999946413944535943842794709377535886973147534714871584245214590124835511258462251558443757357270968828298631953902266224935229334682404998877694773340585745202072489034707119093677893207861300578473439718949791826369373941176223610945016094546406639337031823869463035106661762192934730446864651970985883334230011839884198916571380616874686386090842410744265646246391174621357382760845013104560637605701805814403412724330669864133012634420798039384028456168804405957829673807701298639891052074277089618762420306933268098205357834112038097701519299236618449420973347894178872420445289525871627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							613ededa595a6189c1b4e9141ab6af77670573e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpachon.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonderiehorne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azsa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cezinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalsmelting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencoreperu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencorepossible.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencorerecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencoretechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypersparge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isakidd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isamill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isasmelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesoncell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiddoperations.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liddellcoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangoolamine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcarthurrivermine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minematagami.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineraglan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountisamines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtowencomplex.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikkelverk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordenhamer-zinkhuette.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfalco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portovesme.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensworthoperations.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudburyino.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sukunkaproject.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulancoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandoanproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westwallsendmine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipatank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minara.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brendamines.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulgacoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albionprocess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinerieccr.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunswicksmelter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswicksmelter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katangamining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgstorageint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csamine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csamine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurukunbauxite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurukunbauxite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collinsvillecoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collinsvillecoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamotocoppercompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamotocoppercompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hailcreekcoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hailcreekcoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctsco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctsco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordenham-metall.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenslandmetals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenslandmetals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colinta.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colinta.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmc-coal.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmc-coal.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmc-coal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmc-coal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupoprodeco.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mineraglan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glencorerecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affinerieccr.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonderiehorne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiddoperations.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sudburyino.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sukunkaproject.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brendamines.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minematagami.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isamill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isasmelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isakidd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypersparge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamesoncell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zipatank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albionprocess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountisamines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcarthurrivermine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bulgacoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liddellcoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangoolamine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtowencomplex.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensworthoperations.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulancoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westwallsendmine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wandoanproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surathydrogen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surathydrogen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glencorepossible.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalsmelting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore-nordenham.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquariusenergy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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