vpn.noc.unlv.edu

- University of Nevada, Las Vegas -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1b:2f:fb was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

University of Nevada, Las Vegas

Organization: University of Nevada, Las Vegas
Organization unit: OIT
State / Province: Nevada
Locality: Las Vegas
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1b:2f:fb
Serial Number (int): 1276850171
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 7c:31:a8:df:d9:eb:b3:3a:4d:03:64:e8:03:c5:be:1f:b6:18:3e:91
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 3d:0c:d3:82:82:0f:25:6c:50:0c:14:30:fd:0d:ba:34:87:e6:ba:b9
Fingerprint (sha256): 03:53:13:63:69:fd:4b:e9:2b:3d:0b:5f:b7:a1:ba:48:5e:6d:51:77:84:09:aa:45:f3:26:ef:b4:15:62:67:51

Issuing Certificate URL: http://aia.entrust.net/l1c-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate vpn.noc.unlv.edu

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.noc.unlv.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name unlv.edu

(limited to 100 certificates)
carruthers.faculty.unlv.edu
5717495361044480-fe1.pantheonsite.io
bernacki.faculty.unlv.edu
thompson-robinson.faculty.unlv.edu
test-web-lws.edu.help
abarbanel.faculty.unlv.edu
jeewoongpark.faculty.unlv.edu
tux.cs.unlv.edu
jchoi.faculty.unlv.edu
jwood.faculty.unlv.edu
tux.cs.unlv.edu
smadala.faculty.unlv.edu
wriver.sites.unlv.edu
5733311175458816-fe3.pantheonsite.io
radiography.sites.unlv.edu
cdclv.unlv.edu
sangseo.faculty.unlv.edu
5739238230327296-fe3.pantheonsite.io
*.ezproxy.library.unlv.edu
asera.faculty.unlv.edu
albrecht.faculty.unlv.edu
ace.unlv.edu
nartc.fcm.arizona.edu
gov-status.mulesoft.com
sfunder8cert.net
garyr.faculty.unlv.edu
splunk-dev.oc.unlv.edu
5698311486963712-fe2.pantheonsite.io
5733311175458816-fe3.pantheonsite.io
matthewmurray.faculty.unlv.edu
kctan.faculty.unlv.edu
5733311175458816-fe3.pantheonsite.io
eelabs.faculty.unlv.edu
cdclv.unlv.edu
pbrewer.faculty.unlv.edu
fifes2.faculty.unlv.edu
mpirouz.faculty.unlv.edu
banking-business-review.com
rebelrundown.unlv.edu
assessment.sites.unlv.edu
cho.faculty.unlv.edu
5718998062727168-fe2.pantheonsite.io
arlonline.unlv.edu
mjameson.faculty.unlv.edu
fifes2.faculty.unlv.edu
scs-border.net.unlv.edu
administration.unlv.edu
gnaylor.faculty.unlv.edu
pushkin.faculty.unlv.edu
5733311175458816-fe3.pantheonsite.io
pthistle.faculty.unlv.edu
sbansal.faculty.unlv.edu
nxterra.ucop.edu
youngrebels.unlv.edu
5642684278505472-fe2.pantheonsite.io
5665497936822272-fe2.pantheonsite.io
tbe-fp4k.net.unlv.edu
banking-business-review.com
unlv.edu
wdonati.faculty.unlv.edu
aalberts.faculty.unlv.edu
5698311486963712-fe2.pantheonsite.io
tseng.faculty.unlv.edu
academicsuccess-barexamprep.faculty.unlv.edu
crrwmsd.unlv.edu
facultyweb.faculty.unlv.edu
mlutz.faculty.unlv.edu
nslife.faculty.unlv.edu
gatlinga.faculty.unlv.edu
schulte.faculty.unlv.edu
208.lsnc.net
5735735550279680-fe2.pantheonsite.io
gov-status.mulesoft.com
5733311175458816-fe3.pantheonsite.io
andykirk.faculty.unlv.edu
scs-fp4k.net.unlv.edu
jeewoongpark.faculty.unlv.edu
streamlab.faculty.unlv.edu
jwhite.faculty.unlv.edu
webdev.colorado.edu
wleavitt.faculty.unlv.edu
spo.sysapps.unlv.edu
gphelps.faculty.unlv.edu
virtual2.unlv.edu
5734183724908544-fe2.pantheonsite.io
research-pp.stonybrook.edu
5717495361044480-fe1.pantheonsite.io
essapps.unlv.edu
wonda.faculty.unlv.edu
erickson.faculty.unlv.edu
5718998062727168-fe2.pantheonsite.io
5698311486963712-fe2.pantheonsite.io
banking-business-review.com
5642684278505472-fe2.pantheonsite.io
upenn-it.asc.upenn.edu
5739238230327296-fe3.pantheonsite.io
vpn.noc.unlv.edu
facultysenate.unlv.edu
anjala.faculty.unlv.edu
muleshko.faculty.unlv.edu

Certificate

The complete raw certificate details for vpn.noc.unlv.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWZ2dPoq1ifZO6ydqjp8
QdQshcr3dVJ/j9S+Rzuu+GK4YRDwB9FKySXxULFBcjq16VES8BNDU9zWi1XZrOmf
SRB0rHATR++omA7xmggZ05dKe2xYFeF7WajJcUX8yZC01uQc+tCqiLwepQyHqqb/
khEIFh8OnGu7gxkCGlt/SpGmu5w6HeSuJt/NOKqIBhyDMZt6QIgz+gQmd7zcs/FD
x31I1OymUsFOjmTcTsQy6C3b6ynsiTHKTUKFjMuoqx4YaEciz+gb3mTkLgVfiW2m
k4HF7dVm+gT+zSF20UaxhbP00mSwSgyRHZA9ueZrnfV60uPA+l0dM0kvpLxNNSKA
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276850171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-09-19 23:08:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-20 16:07:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nevada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Las Vegas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Nevada, Las Vegas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.noc.unlv.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19869940131240949958112688438531677065710568304397484706331752527374611683945038109440747136367792223549610297290730761046703132770857257111844492959903943517078911068569197129988497114319100641912477133590256043308612675799358378930231527858322372098232034626440728580105385317422238854665596286850581153431468991454652649502246634390337080459268129168259421519135348282140396009556862810438096208035576133831417132586563270075303344125982284887330297267236453481865568682373163140102342943581502343464179272855535842915154667170837290539352165350534804732019965934812346759454090244872458969097154843059069049274403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1c-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c31a8dfd9ebb33a4d0364e803c5be1fb6183e91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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