aca-eur.glencore.com

- Glencore International AG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:48:b1:50:e3:12:21:e7:e0:5d:ba:25:20:53:fd:f7 was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Glencore International AG

Organization: Glencore International AG
Locality: Baar
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:48:b1:50:e3:12:21:e7:e0:5d:ba:25:20:53:fd:f7
Serial Number (int): 12340493730906615941857997982037966327
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b6:af:76:a0:3b:ed:62:60:51:69:f1:fe:3a:83:4d:74:1d:4f:9c:a8
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): c2:6f:7d:b9:77:42:54:21:e8:ab:ba:4f:8a:63:b7:e0:e2:6d:e8:18
Fingerprint (sha256): 3c:32:0d:b3:52:8b:cd:de:82:01:ab:cc:78:5f:27:40:f6:b0:31:8c:da:39:f1:04:27:20:11:71:c4:9f:4d:5d

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate aca-eur.glencore.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aca-eur.glencore.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aca-eur.glencore.com
acb-eur.glencore.com
ACA-ASA.glencore.com
ACB-ASA.glencore.com
ACA-NAM.glencore.com
ACB-NAM.glencore.com
ACA-ZAF.glencore.com
ACB-ZAF.glencore.com
ACA-AUS.glencore.com
ACB-AUS.glencore.com
ACA-SAM.glencore.com
ACB-SAM.glencore.com

Other certificates including the domain name glencore.com

(limited to 100 certificates)
UCA.glencore.com
www.glencore.com
ucb-sam.glencore.com
www.glencore.com
www.glencore.com
UCB-AUS.glencore.com
www.glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
ACB-SAM.glencore.com
UCA-ZA.glencore.com
www.glencore.com
acb-eur.glencore.com
glencore.com
UCA.glencore.co.za
glencore.com
glencore.com
www.glencore.com
UCB-ASA.glencore.com
UCB-EU.glencore.com
www.glencore.com
glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
edms.ch.glencore.com
www.glencore.com
ACB-NAM.glencore.com
sfbext.bar.ch.glencore.net
www.glencore.com
ACA-ZAF.glencore.com
uca-sam.glencore.com
UCB.glencore.com
glencore.com
www-dev.glencore.com
*.glencore.com
hermes.glencore.com
*.glencore.com
UCA-NAM.glencore.com
ap.zrh.ch.glencore.net
www.glencore.com
UCA.glencore.co.za
UCB-ASA.glencore.com
www.glencore.com
UCA.glencore.co.za
mail.eur.glencore.net
www.glencore.com
uma-eur-test.glencore.com
glencore.com
www.glencore.com
UCA-NAM.glencore.com
UCB-ZAF.glencore.com
UCB-EUR.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
smime.glencore.com
glencore.com
office.glencore.com
sfbext.bar.ch.glencore.net
glencore.com
uca-eur.glencore.com
www.glencore.com
www.glencore.com
ACB-ZAF.glencore.com
UCB.glencore.com
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
glencore.com
www.glencore.com
test-ponton-uk.glencore.com
UCA-NAM.glencore.com
www.glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
www.glencore.com
ms-sbc-test1.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
UCA-ZAF.glencore.com
ap.bar.ch.glencore.net
edms.ch.glencore.com
www.glencore.com
glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
aca-eur.glencore.com
www.glencore.com
UCB-SAM.glencore.com
ucb-nam.glencore.com
glencore.com
UCA.glencore.co.za

Certificate

The complete raw certificate details for aca-eur.glencore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12340493730906615941857997982037966327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glencore International AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aca-eur.glencore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735585889437131525694276554381085031285572397372655227775118944227760181532489369633727350234554667170988166920230112339894688480825252911928253204375037596524205641808722911850510969575196227918361646532490103984019690743491980883456402958505771531541089007988937051046405353093550965705259596435096086571550168330543356908094815974641748970496890088527172843846205662524464823573152211905337524234225626697749826742478527008033647204141096237692358162848089296595932449778551966235791185545013009910779412776306211677207475655154862344313396551342104326620611315740586945351350327352841639973774342240908099066511073564214060438202204259020029537219432809634641577095078534747995060903726022342942388446984768031685630008031351818792046052264757214165936544352101382670140330660663403836185507159704529051067948586117846031461652800110508342828367592232356460685913985405811592043665945713823626552091471893943877004670937457551831491683384432789676383294867275669949650678720962171654118486977200380142937227408347171766977776208276668893747024663802179387863433382571624083375280412851307946102524558184391626293332885400600572017624600340805158126634141324205701284790260401159494142290063855416008675707997963181740163583181273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6af76a03bed62605169f1fe3a834d741d4f9ca8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aca-eur.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acb-eur.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACA-ASA.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACB-ASA.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACA-NAM.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACB-NAM.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACA-ZAF.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACB-ZAF.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACA-AUS.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACB-AUS.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACA-SAM.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ACB-SAM.glencore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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