aljportal.alj.com

- Abdul Latif Jameel Company Limited -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:19:b7:2d was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Abdul Latif Jameel Company Limited

Organization: Abdul Latif Jameel Company Limited
Organization unit: IT Division
Locality: Jeddah
Country: SA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:19:b7:2d
Serial Number (int): 1276753709
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: d5:49:fc:66:b6:b7:8e:12:b4:92:8a:ae:95:24:e4:67:b5:86:af:8c
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): d3:67:40:ce:78:e3:c5:94:84:60:fd:89:31:80:58:33:f5:49:d8:1b
Fingerprint (sha256): 06:72:7b:d8:e4:8e:0b:a0:16:99:85:2f:0e:9b:c3:f8:2f:c4:e5:2e:db:ff:6d:a3:d9:75:49:ee:5a:22:08:bb


Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate aljportal.alj.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aljportal.alj.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aljportal.alj.com
aljportal.aljnet

Other certificates including the domain name alj.com

(limited to 100 certificates)
helpdesk.caltimes.com
bcc2.talentera.com
servicedesk.gerkencompanies.com
c3helpdesk.c3insurance.com
bcc2.talentera.com
helpdesk.pirim.com.tr
helpdesk.pirim.com.tr
bcc2.talentera.com
alj.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
jameelacademy.alj.com
sjvtechhelp.stjosephsvilla.net
kmt.alj.com
aljportal.alj.com
sdp.tianjinjuilliard.edu.cn
brand.alj.com
*.alj.com
helpdesk.rdek.bc.ca
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
informatique.aubainerie.com
dmsbit.northeastern.edu
esm.tradefy.com.br
*.alj.com
c3helpdesk.c3insurance.com
JDC-EXPE01.alj.com
aljlwebservices.alj.com
bcc2.talentera.com
bcc2.talentera.com
helpdesk.valledelsol.com
bcc2.talentera.com
alj.com
servicedesk.januscontinental.com
bcc2.talentera.com
bcc2.talentera.com
servicehistory.alj.com
bcc2.talentera.com
*.alj.com
bcc2.talentera.com
bcc2.talentera.com
helpdesk.pirim.com.tr
sdp.tianjinjuilliard.edu.cn
helpdesk.pirim.com.tr
signature.alj.com
bcc2.talentera.com
bcc2.talentera.com
brand.alj.com
bcc2.talentera.com
www.vat.alj.com
signature.alj.com
bcc2.talentera.com
bcc2.talentera.com
STS.ALJ.COM
dsocrm.alj.com
bcc2.talentera.com
helpdesk.tamimi.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
servicedesk.voyav.com
bcc2.talentera.com
servicedesk.januscontinental.com
bcc2.talentera.com
*.alj.com
signature.alj.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
helpdesk.pirim.com.tr
aljlwebservices.alj.com
bcc2.talentera.com
bcc2.talentera.com
jsapportal.alj.com
servicedesk.gerkenpaving.com
bcc2.talentera.com
bcc2.talentera.com
eapproval.alj.com
devopshelpdesk.hcss.com
bcc2.talentera.com
servicedesk.voyav.com
bcc2.talentera.com
support.cornerstonechemco.com
sdp.tianjinjuilliard.edu.cn
helpdesk.valledelsol.com
cwa.alj.com
helpdesk.ksgroup.com.au
bcc2.talentera.com
esm.tradefy.com.br
desk.burgiss.com
sjvtechhelp.stjosephsvilla.net
ocsrp.alj.com
bcc2.talentera.com
*.alj.com

Certificate

The complete raw certificate details for aljportal.alj.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5s8lJDg+Lowymubrwuma
POtUrHBiUJq3/QbReroQvNPA9hGJSydsDhVZ4I4asovRRHVD3VVVcajA8g6CSeWD
ZwT43YdhYNQNC4NMktllktob9OtZXKPy8pau5K/9pwCBdMegJY7tZCogFi7yOutP
xXPtkikeFWuaYTWW5OFGobBeF7yJYNgjAPcgTLLaMTRcvT3j4lznOw8B/huAxF/o
DNsWWOoOUU4XPIqXljjGTnI3ZgMRYJ+wWl42JDNqX/AGwIgLqdnVwLP563sEJ3bV
DjqLVC50GaY5URwDwwJyu5b14GVZT4sx//xtIZkgxEYut1x/IgRuUjGub+BINzqa
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276753709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-02-05 17:08:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-25 20:18:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jeddah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abdul Latif Jameel Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aljportal.alj.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29136957190146429352240776105337053228331955415238412598822444426022026337788937536961914963796328701569169668858199325375025592602809199676126002082950452541470615203048859640730062543205348010257319503298680534938154490995759887029599139990839340641131792986666774041760771181485631797899553200506901072557656732147818230454119392800757775127291605511126091089261572270340768510723417719044293137011048942873821281807695199263063864818880209511279665967342096695799929198161163643269029580883394668730296528700150386925129311394064241641567470519945785755227838229768281651976306742266378302348752040659720448154237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aljportal.alj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aljportal.aljnet'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d549fc66b6b78e12b4928aae9524e467b586af8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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