webcon.sapref.com

- Shell And BP South African Petroleum Refineries (PTY) LTD -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:1f:b6 was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shell And BP South African Petroleum Refineries (PTY) LTD

Company registration number: bWXTF41kC2EAr0oGHMArAJglv2zvIzdd
Organization: Shell And BP South African Petroleum Refineries (PTY) LTD
Organization unit: IT
State / Province: KwaZulu Natal
Locality: Isipingo
Country: ZA

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:1f:b6
Serial Number (int): 139190
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 41:e7:bb:4e:e3:10:5c:1e:19:94:66:9f:46:8b:52:9f:d9:5c:eb:a9
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 1a:36:de:07:16:89:1a:ae:e1:bc:b4:20:fd:ff:b6:43:cc:ac:65:89
Fingerprint (sha256): 3b:5a:f8:07:42:79:f6:db:1c:1b:c5:c3:76:7b:d5:a0:bc:b0:4a:0a:33:ee:b4:14:9a:d8:fd:60:94:ed:bf:11

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate webcon.sapref.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webcon.sapref.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webcon.sapref.com

Other certificates including the domain name sapref.com

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
servicedesk.monaghancoco.ie
sdp.hja.net
servicedesk.monaghancoco.ie
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
helpdesk.sicom.mu
ithelpdesk.oneplm.com
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
itsupport.bandmwaste.com
sdpcloud.netwarx.com
ictportal.linkfinancial.eu
ithelp.mhphotels.com
helpdesk.alivetravel.com
ithelp.mhphotels.com
sapref.com
sdp.dilloneustace.ie
itassist.harrowschool.org.uk
helpdesk.aerocompact.com
helpdesk.commit.fi
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
servicedesk.monaghancoco.ie
help.thereader.org.uk
helpdesk.bedes.org
servicedesk.bat-agrar.de
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdeskittest.zetes.com
pomoc.lekam.pl
aiseait.fuchs.com
servicedesk.endrich.com
servicedesk.moredun.ac.uk
helpdesk.hambroperks.com
servicedesk.ambient.org.uk
itservicedesk.emhartglass.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
itsupport.bhtc.com
servicedesk.monaghancoco.ie
*.sapref.com
servicedesk.jmlgroup.co.uk
servicedesk.monaghancoco.ie
assist.pentest.partners
aiseait.fuchs.com
servicedesk.monaghancoco.ie
itsupport.bandmwaste.com
servicerequest.sapref.com
servicedesk.bwbconsulting.com
ololo.sm.urusai.fun
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
itservicedesk.emhartglass.com
noc.servicedesk.as
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.akcentral.com
zahelpdesk.glencore.co.za
webcon.sapref.com
assist.pentest.partners
assist.pentest.partners
service-desk.bedfordgirlsschool.co.uk
servicedesk.ambient.org.uk
servicedesk.medica.ie
lync.sapref.com
servicedesk.durbinglobal.com
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
servicedesk.grupaeurocash.pl
assist.pentest.partners
helpdesk.greenfood.nl
assist.pentest.partners
newservicedesk.mi-hub.co.uk
assist.pentest.partners
servicedesk.labbuit.it
helpdesk.actosoft.de
servicedesk.monaghancoco.ie
ithelpdesk.rev-log.com
sau.solarprofit.es
zahelpdesk.glencore.co.za
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
assist.pentest.partners
helpdeskittest.zetes.com
*.sapref.com
help.thereader.org.uk

Certificate

The complete raw certificate details for webcon.sapref.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzszHABPCb40TGeXwJGyj
lWVN/+TcP1kfnBYSY2DNB2KDw4RexxUcp/sOWrX7HiyOpFHqO+CRHLB4AIIgdvE0
vDLUCP01PCSABDwBMcz2rXxnmnpeasXLpg6ktlhcf5QXIIMpfbZR7/XaZJv8xGe1
Sq1/tt/F791RpA3wm6txwybVMQyaOdP+V53BgcP31Wp3CGMjSanZioiLRzGG7Od9
FWZbMTYrjNBnQzAGA3f5pjYfNYPwQijdJvFIYJSgNKWGBhVF4wndIh9yvh3IVvJj
RfWvyM/+jPZZF9eTUtZ5JPa5a+MYjok53xVRat1LyfXhgGpmMQ2ao+DtawVNB7an
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 139190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-26 12:54:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-29 05:17:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bWXTF41kC2EAr0oGHMArAJglv2zvIzdd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KwaZulu Natal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Isipingo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shell And BP South African Petroleum Refineries (PTY) LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webcon.sapref.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26106070295348428529276134799887855149231352827355874409984591917365224490704067075143020261755027551197908038257877498001473187841702355302121876390921268069234542058592347371142242273027578293851359555610438015081745558026340719673567200969661140993984869043011979886987356241873128558755330231380046004291835056541895036289899004453175871120209928205357374658178121464324686325920347390984793551712990273428724148794438725794266321565646121843895205021706295236163125550305471844443636208437935158694948370964402197697547945360856531587518994979880367913526550148887674537919206735064195828910707227249438040172503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcon.sapref.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41e7bb4ee3105c1e1994669f468b529fd95ceba9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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