stage.mycargill.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:42:ce:1a:f8:a7:5c:88:9e:79:9e:1a:a6:e6:67:f9 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stage.mycargill.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:42:ce:1a:f8:a7:5c:88:9e:79:9e:1a:a6:e6:67:f9
Serial Number (int): 14968379859562560865867171301981317113
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:d7:6e:e2:54:20:94:05:ae:e3:90:4b:d8:9b:63:f9:3d:21:eb:fb
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 73:6f:07:7e:4b:02:41:0e:93:8e:1e:ae:ba:e9:db:d6:0b:e3:61:89
Fingerprint (sha256): cc:17:dd:c3:7b:32:0b:14:45:18:bf:fc:4b:17:fa:65:41:98:fd:0e:5c:bd:84:5a:28:d5:84:42:78:f6:94:d1

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate stage.mycargill.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.mycargill.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.mycargill.com
*.stage.mycargill.com

Other certificates including the domain name mycargill.com

(limited to 100 certificates)
int.mycargill.com
cargillcustomer.stage.cglcloud.in
www.mycargill.com
stage.mycargill.com
int.mycargill.com
csbsui.cglcloud.com
sni.cloudflaressl.com
int.mycargill.com
sni.cloudflaressl.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mycargill.com
cptnuswebsiteallmccxcrcii.stage.cglcloud.in
mycargill.com
int.mycargill.com
csbsui.cglcloud.com
sni.cloudflaressl.com
sni.cloudflaressl.com
identity.mycargill.com
sni.cloudflaressl.com
int.mycargill.com
mycargill.com
login-stage.mycargill.com
mycargill.com
int.mycargill.com
mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
int.mycargill.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mycargill.com
stage.mycargill.com
int.mycargill.com
mycargill.com
www.mycargill.com
sni.cloudflaressl.com
identity.mycargill.com
stage.mycargill.com
mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
www.mycargill.com
sni.cloudflaressl.com
mycargill.com
csbsui.cglcloud.com
www.mycargill.com
sni.cloudflaressl.com
login.mycargill.com
stage.mycargill.com
login-stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
csbsui.cglcloud.com
cascsilos-override.stage.mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
int.mycargill.com
cptnuswebsiteallmccxcrcii.cglcloud.com
www.mycargill.com
mycargill.com
sni.cloudflaressl.com
www.mycargill.com
www.mycargill.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for stage.mycargill.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17bSdhPtPa+1f6flFcf3
IwBJdxmLhWZDTEUviWItq0GjOPoC1VKKRDzlbX/gptH8rp7dII4oF+Swux7V74m7
IB//NpJXmsFOylj3qwlrKSDNCXLt6fKZn9X3NFK7AmsdUCgvEowHUCJgUBrnulZB
qXKx/HzPxhIVaX1jvaNcdnyVjJikEFZ/ixsT54/iSCStCSGAonf9YOMQTDvYQlr5
x+oDT0pn6eice/p8JmkXKsox8QXuybrbxiGeADSLixem5cvxjXrNcYMxSfdoY6+6
JC5n8i7b4lUG4zvafT1W1TIaPmls0fgLUD+231dsA9isupaeBJk7CcVXDOCLwelQ
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14968379859562560865867171301981317113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.mycargill.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27231388512273128292884929261020828928246699094449972093098884066946015997154307913359299757800834938301936850732523463332636423202473399919574810564310496363139820595134093049929891006760080404359266633711371200896532727098763008543478806724569430070746748812960093057306704063917231058575983743270876947239946948934710299810606536404290482819194081404985487855254376848493769083743221179120445218441181261657504988176064911507327701617901395109603702508817645247283349044655299705270058209996672534571784772168566035398396756209709594663795637106051275734422180587856564925534077493944438451054185324124230698750127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9d76ee254209405aee3904bd89b63f93d21ebfb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mycargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.mycargill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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