UCA.glencore.co.za

- Glencore International AG -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 79:43:9e:d5:fb:ae:c7:d0:68:ae:27:ed:8a:b1:14:0e was issued on by thawte, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Glencore International AG

Organization: Glencore International AG
Organization unit: Engineering
State / Province: Zug
Locality: Baar
Country: CH

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 79:43:9e:d5:fb:ae:c7:d0:68:ae:27:ed:8a:b1:14:0e
Serial Number (int): 161187692953704680727869515082926986254
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 10:55:4d:d8:6b:e7:e2:ec:11:41:49:3f:1e:ba:ac:09:8a:9b:8b:f6
Fingerprint (sha256): 40:9f:9f:a5:68:e2:85:fa:92:d2:2f:8a:71:e3:7c:37:fa:6e:44:a4:74:08:14:eb:66:8b:de:fc:00:9a:63:e8

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate UCA.glencore.co.za

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for UCA.glencore.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

UCB.glencore.co.za
ciscolb1.glencore.com
ciscolb2.glencore.com
conf.glencore.com
glencore.co.za
glencore.com
zajnbdmz7cewep2.anyaccess.net
UCA.glencore.co.za

Other certificates including the domain name glencore.co.za

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
ap.bar.ch.glencore.net
UCA-ZA.glencore.com
helpdesk.sicom.mu
UCA.glencore.co.za
ithelpdesk.oneplm.com
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
sdpcloud.netwarx.com
ictportal.linkfinancial.eu
ithelp.mhphotels.com
ithelp.mhphotels.com
sfbext.bar.ch.glencore.net
sdp.dilloneustace.ie
helpdesk.aerocompact.com
helpdesk.bedes.org
servicedesk.bat-agrar.de
helpdeskittest.zetes.com
UCA.glencore.co.za
aiseait.fuchs.com
UCA.glencore.co.za
helpdesk.hambroperks.com
assist.pentest.partners
itservicedesk.eldoradogold.com
sfbext.zrh.ch.glencore.net
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
sfbext.bar.ch.glencore.net
servicedesk.jmlgroup.co.uk
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
assist.pentest.partners
aiseait.fuchs.com
servicedesk.bwbconsulting.com
sfbext.zrh.ch.glencore.net
ap.bar.ch.glencore.net
ap.bar.ch.glencore.net
noc.servicedesk.as
servicedesk.akcentral.com
zahelpdesk.glencore.co.za
assist.pentest.partners
assist.pentest.partners
servicedesk.medica.ie
UCA.glencore.co.za
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
assist.pentest.partners
assist.pentest.partners
assist.pentest.partners
helpdesk.actosoft.de
ithelpdesk.rev-log.com
sau.solarprofit.es
zahelpdesk.glencore.co.za
sfbext.bar.ch.glencore.net
assist.pentest.partners
helpdeskittest.zetes.com
sfbext.zrh.ch.glencore.net
servicedesk.bat-agrar.de
servicedesk.weareavidity.com
helpdesk.bedes.org
aiseait.fuchs.com
ap.bar.ch.glencore.net
ithelp.mhphotels.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
ap.bar.ch.glencore.net
servicedesk.procentia.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
servicedesk.winfieldunited.co.za
helpdesk.bellagroup.dk
helpdesk.saviaantjes.be
ap.bar.ch.glencore.net
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.vista.ch
assist.pentest.partners
sfbext.bar.ch.glencore.net
sfbext.bar.ch.glencore.net
helpdesk.nationalcaregroup.com
sistemes.accio.gencat.cat
ictportal.linkfinancial.eu
uca-zaf.glencore.com
helpdesk.minitab.com
ithelpdesk.rev-log.com
sistemes.accio.gencat.cat
sdp.vdp.com
ithelpdesk.rev-log.com
ap.bar.ch.glencore.net
assist.pentest.partners

Certificate

The complete raw certificate details for UCA.glencore.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161187692953704680727869515082926986254
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zug'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Glencore International AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Engineering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UCA.glencore.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 582928656709990439171450742930725555212872362379286364748411819213692065251428340332229808561976645080654503704478426742525664343264600032698610932707715518511028794989406830163809532692593298702385737930158793862073445209261849078934325548714567351108363820789375773594467199155333566952550652797809023022200367137328851381473870300126332353832964137034934549063727438015197305943471291539569188696267102822425679831627036980455679686018514048566437267776594339122128597742148729554394105675856452563088029581971636934919381067113965729519887969475829767611352631560714916640019982150504258931298067019068911679415197931739368368108210408372594616302517151182666879149696049356997530720155563029116521708791090135092592096669914731048749555166854631723231883257253731352673355185465947861582921856604531143466347238561236255284709886117865821566826859574552809540921680110127782917877184021226476791731600198812644435656925168033270644025837176752097078898214254021251251926944764453294517237612544200736205678282123871207313547768242028160659902504730292031106319940947547912497301976977733516105680954459663771236099724843917072168629549801918328880141652474276079092399989711506480233151563387980011383902229790054510876998119413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UCB.glencore.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb1.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb2.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zajnbdmz7cewep2.anyaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UCA.glencore.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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