mycargill.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:b6:8c:42:6c:97:17:b2:da:73:c5:96:34:99:a0:7f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mycargill.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:b6:8c:42:6c:97:17:b2:da:73:c5:96:34:99:a0:7f
Serial Number (int): 12910894790327859432990217584827277439
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 54:09:61:a5:02:bd:74:cc:11:e6:36:fd:43:2c:54:74:ae:b5:cc:18
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d4:23:05:24:fa:3f:64:b6:28:71:22:27:fc:5d:e4:4d:23:51:c5:bc
Fingerprint (sha256): fa:69:e5:07:ba:af:dd:2d:77:08:69:a4:3e:12:cf:d6:7b:f3:0d:02:af:8a:6a:3b:c1:c7:d7:96:08:92:ea:4b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate mycargill.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycargill.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycargill.com

Other certificates including the domain name mycargill.com

(limited to 100 certificates)
int.mycargill.com
cargillcustomer.stage.cglcloud.in
www.mycargill.com
stage.mycargill.com
int.mycargill.com
csbsui.cglcloud.com
sni.cloudflaressl.com
int.mycargill.com
sni.cloudflaressl.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mycargill.com
cptnuswebsiteallmccxcrcii.stage.cglcloud.in
mycargill.com
int.mycargill.com
csbsui.cglcloud.com
sni.cloudflaressl.com
sni.cloudflaressl.com
identity.mycargill.com
sni.cloudflaressl.com
int.mycargill.com
mycargill.com
login-stage.mycargill.com
mycargill.com
int.mycargill.com
mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
int.mycargill.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
mycargill.com
stage.mycargill.com
int.mycargill.com
mycargill.com
www.mycargill.com
sni.cloudflaressl.com
identity.mycargill.com
stage.mycargill.com
mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
www.mycargill.com
sni.cloudflaressl.com
mycargill.com
csbsui.cglcloud.com
www.mycargill.com
sni.cloudflaressl.com
login.mycargill.com
stage.mycargill.com
login-stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
csbsui.cglcloud.com
cascsilos-override.stage.mycargill.com
stage.mycargill.com
sni.cloudflaressl.com
mycargill.com
sni.cloudflaressl.com
sni.cloudflaressl.com
int.mycargill.com
cptnuswebsiteallmccxcrcii.cglcloud.com
www.mycargill.com
mycargill.com
sni.cloudflaressl.com
www.mycargill.com
www.mycargill.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for mycargill.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBPM+Ct2oFSuDEHu9HSb
fq0tCPRcma9HyQ11ZHBk0bRJY4qdc8GCbX0plHiFUECB6uKMZvs13gieBZ8PMrvz
GFw6SR6sLRZHrukg81JxajFoslUPj/DPw7vwkKW1y+dUmtAYV43pFHj/aUHVwhgH
FXSOwGjEoJx/QOPoVNkw5pfAuuT4h/48+O6Am6ZFNgTQlk69jSrWz0NUHrOdZWMt
JXFpch2ORmEnL0tSU2g4EM5tHEhRnNg3iqEkxNZXEGg2dVgrsDHDoGSI79GXvTnV
P+mVZPJZmkmcvLXJYd5JnrL8EYGAp8iTYtWXSqERrHmXtMgc7v2hcDE3m3QvKYtX
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12910894790327859432990217584827277439
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycargill.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21217799304528668076274297524183406327145575453667010135785698597346056735142847052995821236473263823850339820482593437687737602754170666144013510519390316844574274635930892317414051266714465697107586727049706613993062264664408333765379185187637421018049178721301177454763840873683437257896320004349683613725109365526279287021553093885708478409091102074129825387713999981424768827987013598225681390351562114418066157399187554783816330191202178633061294828899203245657849658678264652544663283058540950541299088375925376360010737569526884579191949104610149640528864806055122321804799327087584002543293378645137635891153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							540961a502bd74cc11e636fd432c5474aeb5cc18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycargill.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001800c8b16170000040300473045022100a26683be9d7c3b681f80fe4c56d26bb45684567af1427cd0a0f75861fc38b367022076625c2a381089390ea1b0ec18f6c98088a277b775eba3974ca799e4c6475b0800750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c000001800c8b16600000040300463044022070e78e856702b92884a16d712a77835c6618e61ad559cd4e7291929806e0c85602205f8e12d059907b7665d25b0b211619a6fecfe09ff3c4e15f5213f020ef678825007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001800c8b1649000004030046304402202d4e6e8daa2ae66b1cc1782384cecc062895a33b5f86893e027d8b8583060c6d02204d389275a93dff1ee60f300a52897fa99cf174df10134c7f067ade56ed24b404
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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