its-edu01.ad.queensu.ca

- Queens University at Kingston -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1d:a4:1a was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Queens University at Kingston

Organization: Queens University at Kingston
State / Province: Ontario
Locality: Kingston
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1d:a4:1a
Serial Number (int): 1277010970
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: b9:ce:50:bf:91:6e:e3:2f:6d:4d:c2:b7:cf:c2:8a:15:1b:63:fd:e6
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): a3:1b:dd:51:3c:58:a3:1a:c9:a9:a9:48:5d:b6:c2:35:bd:5b:bc:84
Fingerprint (sha256): 00:c6:fd:07:bb:5c:59:f1:a8:48:92:66:59:c1:20:fc:fc:cd:03:80:69:d1:c5:38:13:94:22:55:fe:7a:d3:37

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate its-edu01.ad.queensu.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for its-edu01.ad.queensu.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

its-edu01.ad.queensu.ca

Other certificates including the domain name queensu.ca

(limited to 100 certificates)
sleeptherapyservice.queensu.ca
healthsci.queensu.ca
biology.queensu.ca
accredible.tutor.com
it-365mgm-p-a01.ad.queensu.ca
statuspage.io
webapp.queensu.ca
booking.library.queensu.ca
kingkongdev.ctg.queensu.ca
healthsci.queensu.ca
azure-vhost.its.queensu.ca
flux.cs.queensu.ca
its-edu01.ad.queensu.ca
epay.queensu.ca
authoring.wp.queensu.ca
fsus-5.freshservice.com
aonhrlearningcenter.credentials.aon.com
www.skhs.queensu.ca
OHDP-INDOC-RDS.HDP.AD.QUEENSU.CA
www.path.queensu.ca
qloud.azure.queensu.ca
PRINTQ.QUEENSU.CA
my.queensu.ca
magneto.ctg.queensu.ca
academy-achievements.gong.io
staging.it.meds.queensu.ca
PRINTQ.QUEENSU.CA
vcentrev.ad.queensu.ca
VICHALL-D006-PCI-H01.pci.queensu.ca
vote.queensu.ca
badges.gmac.com
BOMGAR.SMITH.QUEENSU.CA
www.ctg.queensu.ca
nursing.queensu.ca
admissions.meds.queensu.ca
ROOMS.SMITH.QUEENSU.CA
academy-achievements.gong.io
saself.ps.queensu.ca
spiderman.ctg.queensu.ca
au.credential.getsmarter.com
econ.queensu.ca
geologyds.geol.queensu.ca
its-cppm01.pci.queensu.ca
cdms.phy.queensu.ca
jira.its.queensu.ca
webmail.cs.queensu.ca
biology.queensu.ca
kingkongdev.ctg.queensu.ca
statuspage.io
statuspage.io
statuspage.io
www.path.queensu.ca
helpdesk.stepstone.de
server2.advance.queensu.ca
magneto.ctg.queensu.ca
stores.phy.queensu.ca
uniweb.time.queensu.ca
portal.bhsc.queensu.ca
WEB.SMITH.QUEENSU.CA
statuspage.io
dev.law.queensu.ca
engsoc.queensu.ca
aonhrlearningcenter.credentials.aon.com
services.housing.queensu.ca
PCI-RDPGW.pci.queensu.ca
server3.advance.queensu.ca
engsoc.queensu.ca
listingservice.housing.queensu.ca
academy-achievements.gong.io
jay.phy.queensu.ca
ojs.library.queensu.ca
2fa.dfm.queensu.ca
healthsci.queensu.ca
RDS02.LAW.QUEENSU.CA
badges.gmac.com
etlab.cs.queensu.ca
statuspage.io
fsus-5.freshservice.com
wiki.queensu.ca
ad.queensu.ca
onq.queensu.ca
remote.its.queensu.ca
web-vhost.its.queensu.ca
wiredauth.queensu.ca
content.queensu.ca
statuspage.io
rehab.queensu.ca
autodrive.engineering.queensu.ca
dcp.vpn.queensu.ca
idptest.queensu.ca
mytimetable.queensu.ca
adminpix.vpn.queensu.ca
ROOMS.SMITH.QUEENSU.CA
remote.its.queensu.ca
edc.ctg.queensu.ca
akamaisecure4.qualtrics.com
statuspage.io
OHDPQ-RDS-0384.HDP.AD.QUEENSU.CA
qservices.queensu.ca
engsoc.queensu.ca

Certificate

The complete raw certificate details for its-edu01.ad.queensu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0i+qet+ue8SN0T3QHzN
XobI+y+zQ7QrgOyY8MG3nxJAxmMq4weWiM4eGQKmzCgp7v+vBH2qTRHaJdFXDVKj
U3hWjw+nzlyytiNi/mAXKk8aqP5BP/eKGP+TsSp4iwEL+E84x0JMB+ke3Bh4Xyc+
Y8ZgpTnSCN1dxIqiIpYn4RdXAZa0btAfQqinPpYSA2ONKlf5857wIJL3jZ/3p1mk
JA52c2riC+C/q4Hq41qzbrmx7HoDV2pPcXV7ynTkfYVNNzoe+gMVsRU7GscIZQ92
PNIbCRrD+JmKPVqXzIWudFrnwjBH654LCm2KNggU1BywOow2S2wOMs5HXoO3za8k
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277010970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-22 13:17:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-30 17:24:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kingston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Queens University at Kingston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'its-edu01.ad.queensu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20612715497579505445449808364339603626545634817061886627341905579943345342423589481904053463317043293672713933929813502563117934659947476096267876983449964770976545660206433824996470639347564974059398653298885967300626491839942373965403144552544813687222327620206430135149699642497768857788404033459580709184825576949167454007227438590918692224662417040847623999130106291141454884066331078888240976159416736358164366280005603333321052952478367887300321392135275378887872423901917746828593253634540897309680469157196867912016954424195910836754335465564114448565681923140184134480493977256763777361733918997431326811203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'its-edu01.ad.queensu.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9ce50bf916ee32f6d4dc2b7cfc28a151b63fde6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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