Mobile.engenoil.com

- Engen Petroleum Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d3:b0:09 was issued on by Entrust, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Engen Petroleum Limited

Organization: Engen Petroleum Limited
Locality: Cape Town
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d3:b0:09
Serial Number (int): 1356050441
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 8e:a2:87:76:4a:47:6f:85:d0:8e:0e:84:12:2d:5d:47:ec:c4:23:11
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): c2:d2:fc:e0:aa:f3:64:0e:64:48:d7:be:98:c4:3e:86:8b:29:6a:11
Fingerprint (sha256): b8:63:39:86:77:99:43:6a:68:66:62:18:f8:67:53:26:91:aa:40:02:08:88:24:98:fa:93:76:8c:45:d6:d5:e4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate Mobile.engenoil.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Mobile.engenoil.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Mobile.engenoil.com
Autodiscover.engenoil.com
Legacy.engen.co.za
Hybrid.engenoil.com
Autodiscover.engen.mw
Autodiscover.engen.mu

Other certificates including the domain name engenoil.com

(limited to 100 certificates)
*.engenoil.com
connect.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
careers.engenoil.com
MessageBrokerqa.engenoil.com
*.engenoil.com
Mobile.engenoil.com
ACWC.engenoil.com
Mobile.engenoil.com
careers.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
login.identity.engenoil.com
boardpad.engenoil.com
secure.engenoil.com
Mobile.engenoil.com
connect.engenoil.com
1card.engenoil.com
esbprod.engenoil.com
sts.engenoil.com
rms.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
esbqa.engenoil.com
sip.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
Mobile.engenoil.com
mobile.engenoil.com
wac.engenoil.com
sip.engenoil.com
sip.engenoil.com
sts.engenoil.com
sip.engenoil.com
careers.engenoil.com
*.engenoil.com
Mobile.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sfbweb-ext.engenoil.com
sfbweb-ext.engenoil.com
MessageBrokerprod.engenoil.com
rp.engenoil.com
*.engenoil.com
*.engenoil.com
Mobile.engenoil.com
sip.engenoil.com
sts.engenoil.com
secure.engenoil.com
MessageBrokerprod.engenoil.com
MessageBrokerQA.engenoil.com
sip.engenoil.com
wac.engenoil.com
esbdev.engenoil.com
sip.engenoil.com
*.engenoil.com
web-ext.engenoil.com

Certificate

The complete raw certificate details for Mobile.engenoil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1356050441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-27 06:17:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-27 09:02:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Engen Petroleum Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mobile.engenoil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678876213483534076835177696534675244422227599496325548494428267381058344305740085102235456535776610192792377351173484464917478130490590673814265876258859602906500639209061848478312066682004629120672492691074714803418547746409254206884767923104942444302699703470997583083216512705644035284580492079133736185756490914252005178282047688123995025468082408586112917264708701818329876867194515302758951761735960759522418430656595918014785788032003614909408118308429733464768392934676205362987810295915963820674275791579516723724507747928690197619774952817762681339267897891064443615053086143336578890722257138540502621005589377559144583330229796288536698238342066303284419805355038992954057914570597878036302471094854002343249068623230611637436057062635990845385410048694939950912611469878395529474407061678378239747077002904759016507498768533638163383480645118513827545091746628710889088763871854718876783794794744969007699247767733690751339957040052240171497773482097224635463405716912228356250846001841773814781879439816168124992881381313965852211446205860674463563154606992221565142582715164040586158219932826439472922277409726790746622808280589076196298780350813589592868333397603332267317729675903885192385152577775777160573064712367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Mobile.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Legacy.engen.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.mw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.engen.mu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ea287764a476f85d08e0e84122d5d47ecc42311
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a75573edcc23a42cc0eba30621e8ca7ad0a711483d75d718c3177f2221ae904b813e88a90ec20b3ffcf0be51395930d7966a50b9af7567ffbeb66613c6313b040b2e9cd80e07f88b1329e37542afe28d84a0827f1fe73fe2bace6e089f07addf7e738d456b46af5ae4fd273e565dc20c33902d3515460ac302b53459ab5e271c804491254830c1b989e01bb39b77901e44a2f0f99f3135b859b3f6319785ee9b6ed6eea521ab8dda8263649eabb5247a19eaebdce0172bc721847399bff08df2233c81065ec493d3b194f7ef52369fdc861b06956aa64586516a662bf5ac55d613c3f5c5b83d90e084f337b2d303d236c4c953a514b5166883c4c528e713a0f4