mycargill.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:21:17:4e:1c:db:b4:cd:e3:31:1f:4e:df:e3:5e:fc was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mycargill.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:21:17:4e:1c:db:b4:cd:e3:31:1f:4e:df:e3:5e:fc
Serial Number (int): 16122554429899388741038892089679765244
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 71:9b:fe:04:f4:71:f4:28:2f:78:e3:df:05:11:d6:3d:ae:61:6e:fb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 75:8a:3e:9f:90:12:e1:3a:db:7c:cb:c5:f8:71:eb:75:e0:f6:1b:20
Fingerprint (sha256): 68:71:26:df:10:31:70:50:1f:19:09:88:d6:c4:e1:14:dd:f1:49:b0:69:dd:f8:c6:9b:08:77:2c:69:58:d5:a6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate mycargill.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycargill.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycargill.com
*.mycargill.com

Other certificates including the domain name mycargill.com

(limited to 100 certificates)
int.mycargill.com
cargillcustomer.stage.cglcloud.in
www.mycargill.com
stage.mycargill.com
int.mycargill.com
csbsui.cglcloud.com
sni.cloudflaressl.com
int.mycargill.com
sni.cloudflaressl.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mycargill.com
cptnuswebsiteallmccxcrcii.stage.cglcloud.in
mycargill.com
int.mycargill.com
csbsui.cglcloud.com
sni.cloudflaressl.com
sni.cloudflaressl.com
identity.mycargill.com
sni.cloudflaressl.com
int.mycargill.com
mycargill.com
login-stage.mycargill.com
mycargill.com
int.mycargill.com
mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
int.mycargill.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mycargill.com
stage.mycargill.com
int.mycargill.com
mycargill.com
www.mycargill.com
sni.cloudflaressl.com
identity.mycargill.com
stage.mycargill.com
mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
www.mycargill.com
sni.cloudflaressl.com
mycargill.com
csbsui.cglcloud.com
www.mycargill.com
sni.cloudflaressl.com
login.mycargill.com
stage.mycargill.com
login-stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
csbsui.cglcloud.com
cascsilos-override.stage.mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
int.mycargill.com
cptnuswebsiteallmccxcrcii.cglcloud.com
www.mycargill.com
mycargill.com
sni.cloudflaressl.com
www.mycargill.com
www.mycargill.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for mycargill.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIQDCEXThzbtM3jMR9O3+Ne/DANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDIwODAwMDAwMFoXDTI1MDMwODIzNTk1OVowGDEW
MBQGA1UEAxMNbXljYXJnaWxsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBALwIWTkN9606n7sYJgRFiSXc7VneKS/fHKeoQwR5pctcuh1Q9hHj5ac+
dJZN/i8M3gkyMjNXEKe/oOljbmF8651eYhdjxQUbk++oCX81lUtpcHSxsVe5LatS
GkV88Wv+NF6BJwXYBMaRUZR4TiWqTBze4nAV1tZEyN4gqRo2pK8z59nO5RIr5hHS
w/kyCTtCg/EZQkOp3NQq6ZiLAWXaFm8hdnnEaCTkdXDv3AGGMcMAzRjUMRXLUCfR
Ke0jboSnpUtTqHF60c62EGhLc1GHZMH1jkeOyAoCIgx6vuU0I3AaMj/WEj/3DyTS
j6WkT01DvKRwzsm6zgIrEWUqcpAS11UCAwEAAaOCAvgwggL0MB8GA1UdIwQYMBaA
FMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRxm/4E9HH0KC94498FEdY9
rmFu+zApBgNVHREEIjAggg1teWNhcmdpbGwuY29tgg8qLm15Y2FyZ2lsbC5jb20w
EwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js
LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBn
MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20w
NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy
bTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkA
dwDPEVbu1S58r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAY2HK51yAAAEAwBI
MEYCIQCCpqrgbX0gIXZWEAzmAgZAp0IIkTvZzr2yIsizvb6jkgIhALpLWLLERbJc
Ca8FCgufqzwZZbSOeWozbf8ESFSfnDqwAHYAfVkeEuF4KnscYWd8Xv340IdcFKBO
lZ65Ay/ZDowuebgAAAGNhyudeAAABAMARzBFAiA/Q784Vi7+4rBsmPjLH6dKzHNy
zd7o/g0dqWe+QYSOfwIhAIlGXpnlsq3g1pUMNF9G4WkfrjTLsH+aGB31FcftWoxs
AHYA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGNhyudngAABAMA
RzBFAiEAnc4kQF1jXaK5zFHKtZbunCPRKE4wOm0vvbXR/Ka8FxUCIHNdMDAobbzc
KicxeRTyuBkVofid/lwnwrSh6T1ra8nWMA0GCSqGSIb3DQEBCwUAA4IBAQCfK0vN
8F6+m0DtX8m9go6Wu5oMyb4h70raq0cKx3jAfah1XXsj4PdqaJpcv/ltZGhRmknX
KXKglshsF4cxevhGgid2Aqt8ONw5Mk2X5u/+Dcx+pUJXEOZ+NcAWBd8or+dc877P
ZkFI8XHdECQfYNp5C/ao2qfaUOLj0be4bwpyZEgtG63mW9uDNy01twVfstLEUfTH
ArMuV7iLUZK0jRu2YBENfh1eHBfqY3PBpEk1g5n/GG3UubjzP8ZpQY8UHiPUSFcw
dHDkUMjNOjBSZqTItYD7CoArgnzt6UI9UDvpTJgfESpy5wueizEG/25ecLfFq9lQ
TLP15DaqDCg7Laej
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAhZOQ33rTqfuxgmBEWJ
JdztWd4pL98cp6hDBHmly1y6HVD2EePlpz50lk3+LwzeCTIyM1cQp7+g6WNuYXzr
nV5iF2PFBRuT76gJfzWVS2lwdLGxV7ktq1IaRXzxa/40XoEnBdgExpFRlHhOJapM
HN7icBXW1kTI3iCpGjakrzPn2c7lEivmEdLD+TIJO0KD8RlCQ6nc1CrpmIsBZdoW
byF2ecRoJOR1cO/cAYYxwwDNGNQxFctQJ9Ep7SNuhKelS1OocXrRzrYQaEtzUYdk
wfWOR47ICgIiDHq+5TQjcBoyP9YSP/cPJNKPpaRPTUO8pHDOybrOAisRZSpykBLX
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16122554429899388741038892089679765244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycargill.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23736918145636306764997344441138643667760667119169747015124270271749862800290125380678442241585960065927125886721716981122967746968671401603131258654296580155207714376672697176736351625477487086976905559048968050470910342838579164234486038710139233081043687136416618609275752655274532837227167712687238730323838716059595840131265361628157586895851212140065232795665166827902665611180231897353121013523283911707404276992117277368805110962459022604936833824245111413825689493428648651750658052632504313131151978947480311650002179451428957897120265334277199298271625608085219300137051514910546582352932013548992784947029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							719bfe04f471f4282f78e3df0511d63dae616efb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycargill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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