wac.engenoil.com

- Engen Petroleum Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2a:1f:3b:3a:8b:8a:03:de:f4:d4:8a:33:29:21:69:0d was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Engen Petroleum Limited

Organization: Engen Petroleum Limited
State / Province: Western Cape
Locality: Cape Town
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:1f:3b:3a:8b:8a:03:de:f4:d4:8a:33:29:21:69:0d
Serial Number (int): 55989738326166354002523229175320504589
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 64:33:87:5a:ff:5b:b2:07:6c:fe:32:94:bf:d6:33:cf:4d:2f:34:41
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e0:67:b5:40:75:61:77:3a:b1:98:bc:5d:f3:f7:f4:60:d1:a0:70:b4
Fingerprint (sha256): ef:11:84:0c:35:ce:20:11:06:9f:7f:79:76:3c:5f:20:91:79:46:73:c8:11:10:df:cf:b0:31:6c:94:00:17:81

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate wac.engenoil.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wac.engenoil.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wac.engenoil.com
www.wac.engenoil.com

Other certificates including the domain name engenoil.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for wac.engenoil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55989738326166354002523229175320504589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 06:11:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 06:11:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Engen Petroleum Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wac.engenoil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767608312954142832055311284344425605848048076937811128442548964502343046804069712043777046964707436498445426957662022490645958400126429705610012797838979551661944840534472964538113145887988934498011467926580333868313472477851046213487783006456316752832580001687094026525344272996009671292246535458495662160617771051814429207365290027044281450681919093382473535445771073741470076534226210653376123940765049855327337114441821806958721994019611833569350101427538753813041965243702609037968440857900609912908471608497758818287569399762480009101517134619367880128341897223243297578715110686569030136387385827989339863778481659026951732410421190282185046089373009740518732171234565984349993277620007890180313434524760097239244206789422402086007776683642243370134224441406632133499425162742298434062514980981528910949306615314596843477185888823273503437342385408531488158380058756362060011638944335609727752198348460260081792124141394995038456779888241906441254301544780353044009094013552499010584951510180384186276311019648317893017166590979134339942339191494693135147294308819413215421789962206666622555022217409348878926790117408724797183102690576316508752627309339903307474137342412066422052491184941976761784184972282102617231251837443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6433875aff5bb2076cfe3294bfd633cf4d2f3441
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wac.engenoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wac.engenoil.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000182d8c72ad3000004030047304502210081d22d6e5604dfedd328c5f2da5b72c9b162759009f4b375fa4f9607cc94f861022041b21637b4d6526b63a368f2ac633d219922bfecef6ba69010f50585b5b0b5c80076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000182d8c72aea00000403004730450220305a76983bbf4b94cd50542ac53bfdfe47cf77a18d1051d5311f07deef7eceea022100fec68b8173d40a9beb30190b152361ab1fc0f01cf3fb8abbee2b024cf280805d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000182d8c72b310000040300473045022100ee7242d7bf0aea345ed1c04a82ac4728dc4c47cda33a36b006e217f6d797deec022038c9a3411d84c8dc2081c5b171bac48d353e505c76222b2d53b168d4612631c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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