*.sapref.com

- SHELL AND BP SOUTH AFRICAN PETROLEUM REFINERIES (Pty) Ltd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:84:0e:dc:c7:9f:06:97:9e:8f:7f:3f:22:8e:44:49 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SHELL AND BP SOUTH AFRICAN PETROLEUM REFINERIES (Pty) Ltd

Organization: SHELL AND BP SOUTH AFRICAN PETROLEUM REFINERIES (Pty) Ltd
State / Province: KwaZulu-Natal
Locality: Isipingo
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:84:0e:dc:c7:9f:06:97:9e:8f:7f:3f:22:8e:44:49
Serial Number (int): 17965648576240475147104860892113552457
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3d:55:c3:65:24:79:95:f5:01:94:e6:a0:9a:a2:a1:15:b2:66:b7:b9
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d1:3f:d3:22:2c:81:bf:23:f8:c0:02:b0:bd:d0:71:6d:d9:30:9e:3e
Fingerprint (sha256): 4e:19:da:7c:27:12:30:fb:7f:5d:f5:8b:27:ef:8c:17:04:25:e9:4d:c7:db:43:53:d3:dd:81:30:26:67:49:54

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.sapref.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sapref.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sapref.com
sapref.com

Other certificates including the domain name sapref.com

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
servicedesk.monaghancoco.ie
sdp.hja.net
servicedesk.monaghancoco.ie
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
helpdesk.sicom.mu
ithelpdesk.oneplm.com
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
itsupport.bandmwaste.com
sdpcloud.netwarx.com
ictportal.linkfinancial.eu
ithelp.mhphotels.com
helpdesk.alivetravel.com
ithelp.mhphotels.com
sapref.com
sdp.dilloneustace.ie
itassist.harrowschool.org.uk
helpdesk.aerocompact.com
helpdesk.commit.fi
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
servicedesk.monaghancoco.ie
help.thereader.org.uk
helpdesk.bedes.org
servicedesk.bat-agrar.de
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdeskittest.zetes.com
pomoc.lekam.pl
aiseait.fuchs.com
servicedesk.endrich.com
servicedesk.moredun.ac.uk
helpdesk.hambroperks.com
servicedesk.ambient.org.uk
itservicedesk.emhartglass.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
itsupport.bhtc.com
servicedesk.monaghancoco.ie
*.sapref.com
servicedesk.jmlgroup.co.uk
servicedesk.monaghancoco.ie
assist.pentest.partners
aiseait.fuchs.com
servicedesk.monaghancoco.ie
itsupport.bandmwaste.com
servicerequest.sapref.com
servicedesk.bwbconsulting.com
ololo.sm.urusai.fun
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
itservicedesk.emhartglass.com
noc.servicedesk.as
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.akcentral.com
zahelpdesk.glencore.co.za
webcon.sapref.com
assist.pentest.partners
assist.pentest.partners
service-desk.bedfordgirlsschool.co.uk
servicedesk.ambient.org.uk
servicedesk.medica.ie
lync.sapref.com
servicedesk.durbinglobal.com
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
servicedesk.grupaeurocash.pl
assist.pentest.partners
helpdesk.greenfood.nl
assist.pentest.partners
newservicedesk.mi-hub.co.uk
assist.pentest.partners
servicedesk.labbuit.it
helpdesk.actosoft.de
servicedesk.monaghancoco.ie
ithelpdesk.rev-log.com
sau.solarprofit.es
zahelpdesk.glencore.co.za
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
assist.pentest.partners
helpdeskittest.zetes.com
*.sapref.com
help.thereader.org.uk

Certificate

The complete raw certificate details for *.sapref.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1YDtZ5GJRe+EKB1t0po
ITdz1tgDMX0cWmHQnA/twExNj6XzFt/ok6yfJ6Nna9ltvsN+SASj/47NDdxDXpWi
aYjzK/j4DrrL17JdlOeB6CsB8TBX814ZPqAsTnez/FJ1uJzHj+5AtnLoG8L0NiIr
PYOnUfUAf//o+4uHGpxOuFAeCWqwBSC5OInSp4LY7p/W/3uoU8TD00sUHDTm7W8w
TcsmAYDeAZm4ZPRyhDbEK74cbmNRdX3oSA/edHDhwks1l8qPnkAKwhppyFlaw3lO
9j7hvNikvAwVUdw/ReXvvw1viie50wsLNmp/UvUGqqnxyO1pHxbpo1zTrIN7AaWy
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17965648576240475147104860892113552457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KwaZulu-Natal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Isipingo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHELL AND BP SOUTH AFRICAN PETROLEUM REFINERIES (Pty) Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sapref.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25668791233981917223027681462032860118833298577006693430582233824962518149063655315444166856527365978682362110594249890142031234504463469315719107353135771559276814840570255863919604335838560489980096864045870717158775913873876072076412780991396525635369766323171168142050061379818441540448131422021311983495733078421930823781514267634377340188067249697290260490569272638782469543297736149470982558548648112059102982940257939157009336902188781576653724511037257375652342872442589983232218754855587929530503084231665421850201574156062441687612148219868360811785966185804221761322498400431386613375622809823467167658597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d55c365247995f50194e6a09aa2a115b266b7b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sapref.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapref.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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