1card.engenoil.com

- Engen Petroleum Limited -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:22:02:f0 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Engen Petroleum Limited

Organization: Engen Petroleum Limited
Locality: Cape Town
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:22:02:f0
Serial Number (int): 1277297392
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 4d:3a:b4:f6:5f:b5:ed:7c:e4:06:2e:30:d0:65:d8:67:36:fe:b6:02
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 99:8b:bb:44:b1:db:24:17:c1:56:28:00:7e:b6:6d:e0:fa:a1:c0:3b
Fingerprint (sha256): 56:ca:c8:7b:cf:6b:a5:89:20:5d:8f:a0:2e:52:9f:e6:90:4f:d1:e8:67:de:46:b6:6e:18:48:d4:5d:75:e0:d8

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate 1card.engenoil.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 1card.engenoil.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1card.engenoil.com

Other certificates including the domain name engenoil.com

(limited to 100 certificates)
*.engenoil.com
connect.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
careers.engenoil.com
MessageBrokerqa.engenoil.com
*.engenoil.com
Mobile.engenoil.com
ACWC.engenoil.com
Mobile.engenoil.com
careers.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
login.identity.engenoil.com
boardpad.engenoil.com
secure.engenoil.com
Mobile.engenoil.com
connect.engenoil.com
1card.engenoil.com
esbprod.engenoil.com
sts.engenoil.com
rms.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
esbqa.engenoil.com
sip.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
Mobile.engenoil.com
mobile.engenoil.com
wac.engenoil.com
sip.engenoil.com
sip.engenoil.com
sts.engenoil.com
sip.engenoil.com
careers.engenoil.com
*.engenoil.com
Mobile.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sfbweb-ext.engenoil.com
sfbweb-ext.engenoil.com
MessageBrokerprod.engenoil.com
rp.engenoil.com
*.engenoil.com
*.engenoil.com
Mobile.engenoil.com
sip.engenoil.com
sts.engenoil.com
secure.engenoil.com
MessageBrokerprod.engenoil.com
MessageBrokerQA.engenoil.com
sip.engenoil.com
wac.engenoil.com
esbdev.engenoil.com
sip.engenoil.com
*.engenoil.com
web-ext.engenoil.com

Certificate

The complete raw certificate details for 1card.engenoil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277297392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-04 08:58:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-15 10:59:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Engen Petroleum Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1card.engenoil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 626697386523880920340999397921427412357825122243422325288289676207666344202293938334369006713690353900032899222497907493072840006817457204011920569506466641712298965737273188967618359299339648121563261424414748401267452885717110745469248520879744790057603284780731297311301973671033482277692899303102421074777071805868572632271949118563384451814091398294730297133968608068776321930754622321479662241435977494568583928019913981311172589825080020391172281972287869115884318017706106257551200694609125736906916419750382630876167714484736805126003107301284001741384174314216780041502640885161297753834768790597769269445884754745370956433966959655280294375124127713271805104458338102593796563531776185350313996775306209052534295748820027427362030890903069916636634086248634662894158046437616549323540485405690850816455191540409646388181509160062881539876041789243427278217026548773087584108723945018984880705585220868776447950838659203413074102540700967410921551990686896644029005174687697874930323158517899645727716557209849276896045701475887485962238613556569657901664305916396636050064036724958169757139366880146401688822638172207043205042951536640820875961007619995352396115156910445944004116567252818705490515104347544172728674059601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1card.engenoil.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d3ab4f65fb5ed7ce4062e30d065d86736feb602
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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