media.albertus.edu

- Albertus Magnus College -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1b:92:6c was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Albertus Magnus College

Organization: Albertus Magnus College
Organization unit: ITS
State / Province: Connecticut
Locality: New Haven
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1b:92:6c
Serial Number (int): 1276875372
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 8c:bd:56:2a:9c:54:e7:f5:bc:f1:82:29:7b:3a:04:c4:d3:5c:88:bf
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): af:9c:d1:16:89:c1:c2:16:30:12:6b:b7:db:a0:2d:86:87:58:b2:c0
Fingerprint (sha256): 04:ef:c8:2a:69:ba:51:10:9a:fd:a7:b3:d7:c8:a0:bd:05:11:0c:4c:40:c0:62:3c:d2:6c:62:8f:a1:69:4f:15

Issuing Certificate URL: http://aia.entrust.net/l1c-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate media.albertus.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for media.albertus.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media.albertus.edu

Other certificates including the domain name albertus.edu

(limited to 100 certificates)
adp.albertus.edu
albertus.edu
devblog.albertus.edu
elearning.albertus.edu
media.albertus.edu
*.albertus.edu
vanckohall.delhi.edu
admissions.albertus.edu
webservices.albertus.edu
reservations.albertus.edu
cluster.technolutions.net
adp.albertus.edu
admissions.albertus.edu
masters.albertus.edu
reservations.albertus.edu
sfunder1cert.net
webservices.albertus.edu
cluster.technolutions.net
elearning.albertus.edu
admissions.albertus.edu
reservations.albertus.edu
adp.albertus.edu
soar.albertus.edu
sfunder1cert.net
elearning.albertus.edu
admissions.albertus.edu
*.albertus.edu
handshake.albertus.edu
vanckohall.delhi.edu
elearning.albertus.edu
albertus.edu
reservations.albertus.edu
mba.albertus.edu
elearning.albertus.edu
admissions.albertus.edu
handshake.albertus.edu
albertus.edu
admissions.albertus.edu
albertus.edu
my.albertus.edu
vanckohall.delhi.edu
handshake.albertus.edu
sfunder1cert.net
albertus.edu
elearning.albertus.edu
vanckohall.delhi.edu
reservations.albertus.edu
devblog.albertus.edu
cluster.technolutions.net
sfunder1cert.net
albertus.edu
sfunder1cert.net
mba.albertus.edu
nd.albertus.edu
*.albertus.edu
vanckohall.delhi.edu
vanckohall.delhi.edu
reservations.albertus.edu
cluster.technolutions.net
*.ezproxy.albertus.edu
aruba-master.albertus.edu
sfunder1cert.net
vanckohall.delhi.edu
*.albertus.edu
elearning.albertus.edu
janus.albertus.edu
reservations.albertus.edu
albertuspresblog.albertus.edu
admissions.albertus.edu
webservices.albertus.edu
handshake.albertus.edu
reservations.albertus.edu
adfs.albertus.edu
adp.albertus.edu
its.albertus.edu
cluster.technolutions.net
cluster.technolutions.net
cluster.technolutions.net
sfunder1cert.net
albertus.edu
sfunder1cert.net
albertus.edu
admissions.albertus.edu
vanckohall.delhi.edu
sfunder8cert.net
vanckohall.delhi.edu
nd.albertus.edu
webservices.albertus.edu
webservices.albertus.edu
sfunder8cert.net
albertus.edu
admissions.albertus.edu
admissions.albertus.edu
webservices.albertus.edu
albertus.edu
cluster.technolutions.net
soar.albertus.edu
soar.albertus.edu
media.albertus.edu
sfunder8cert.net

Certificate

The complete raw certificate details for media.albertus.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf8H2Q51sXvk7tJnqk/n
4sTuggMNQ3QagY+Ihc+RnKFS9nOesDl7LDVgNHjl3eb5e3yTw4c0jPKQeJLLrvmu
ykUn8W8MTsqfWwFioZYvkgSlk3wQyzysDD+CeasTWQokiGUzVTaycAeW/wvCbOC0
c/kQ9mBytiqt/hzyNjkpg5z+h/jpkIfY6tp9p06+okoPLsOzCc933wgwRDsauCU6
wmnZYsaea75ZvV4hMckPglPx1n/u57yH/enGCIq9M1zMMq5ru/yBlXpSduauoKec
5XtjVIhPEcTJ/AVXFbxq4hxnPdrdEok8Xuo6JZd65kU/fHN6ZKATrbp5tHTuE3a8
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276875372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-11 16:07:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-12 03:17:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Haven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albertus Magnus College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media.albertus.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18430314523588940974195073713722481094330233587722922019233790839515719862287635377685881360820721330951554236257394713199182420419816240600132879548989137529284900810132235981992718981589512293437301730213082052491685574745265122461337412304519900479433091861561675272092333150299383285923883610651612912842926657812347061930311279736819180399571360201642090475059753131345081464122723544812020961928834184361990439304991231565983215829612579447022830135724044841644952803104942007354707031316291789966253823910215019515916408300883577920320573910710790534868996339424037758920798865873874723135357365246223170583557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1c-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.albertus.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cbd562a9c54e7f5bcf182297b3a04c4d35c88bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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