*.alj.com

- Abdul Latif Jameel Company Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number f7:45:57:a3:00:00:00:00:50:d6:ed:97 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Abdul Latif Jameel Company Limited

Organization: Abdul Latif Jameel Company Limited
Locality: Jeddah
Country: SA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f7:45:57:a3:00:00:00:00:50:d6:ed:97
Serial Number (int): 76526627160128935063222414743
Serial Number lenght: 96 bits, 12 octets

SubjectKeyId: 3e:40:45:5d:10:ee:31:4f:3b:7c:5f:51:4b:49:58:e3:38:41:d6:41
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 94:e6:5e:ad:d3:82:45:77:84:5f:5b:1e:86:0f:d7:92:3a:05:e6:79
Fingerprint (sha256): 0d:d1:4f:e9:04:ad:96:d8:e1:ef:8b:bf:60:d0:a0:bb:a5:68:ab:d4:db:2e:e3:b1:2f:2b:73:ee:6f:3c:74:f7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.alj.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.alj.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alj.com
*.alj.com

Other certificates including the domain name alj.com

(limited to 100 certificates)
helpdesk.caltimes.com
bcc2.talentera.com
servicedesk.gerkencompanies.com
c3helpdesk.c3insurance.com
bcc2.talentera.com
helpdesk.pirim.com.tr
helpdesk.pirim.com.tr
bcc2.talentera.com
alj.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
jameelacademy.alj.com
sjvtechhelp.stjosephsvilla.net
kmt.alj.com
aljportal.alj.com
sdp.tianjinjuilliard.edu.cn
brand.alj.com
*.alj.com
helpdesk.rdek.bc.ca
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
informatique.aubainerie.com
dmsbit.northeastern.edu
esm.tradefy.com.br
*.alj.com
c3helpdesk.c3insurance.com
JDC-EXPE01.alj.com
aljlwebservices.alj.com
bcc2.talentera.com
bcc2.talentera.com
helpdesk.valledelsol.com
bcc2.talentera.com
alj.com
servicedesk.januscontinental.com
bcc2.talentera.com
bcc2.talentera.com
servicehistory.alj.com
bcc2.talentera.com
*.alj.com
bcc2.talentera.com
bcc2.talentera.com
helpdesk.pirim.com.tr
sdp.tianjinjuilliard.edu.cn
helpdesk.pirim.com.tr
signature.alj.com
bcc2.talentera.com
bcc2.talentera.com
brand.alj.com
bcc2.talentera.com
www.vat.alj.com
signature.alj.com
bcc2.talentera.com
bcc2.talentera.com
STS.ALJ.COM
dsocrm.alj.com
bcc2.talentera.com
helpdesk.tamimi.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
servicedesk.voyav.com
bcc2.talentera.com
servicedesk.januscontinental.com
bcc2.talentera.com
login.alj.com
*.alj.com
signature.alj.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
bcc2.talentera.com
helpdesk.pirim.com.tr
aljlwebservices.alj.com
bcc2.talentera.com
bcc2.talentera.com
jsapportal.alj.com
servicedesk.gerkenpaving.com
bcc2.talentera.com
bcc2.talentera.com
eapproval.alj.com
devopshelpdesk.hcss.com
bcc2.talentera.com
servicedesk.voyav.com
bcc2.talentera.com
support.cornerstonechemco.com
sdp.tianjinjuilliard.edu.cn
helpdesk.valledelsol.com
cwa.alj.com
helpdesk.ksgroup.com.au
bcc2.talentera.com
esm.tradefy.com.br
desk.burgiss.com
sjvtechhelp.stjosephsvilla.net
ocsrp.alj.com
bcc2.talentera.com

Certificate

The complete raw certificate details for *.alj.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3q3lMyFyjRyuGGByQ13
7/V7/uD7ZVwRBpDSOId8TOMw1qTKW7qf3MUSk/f/g6MYnxXRknrvLi7QGxqx7Ym9
nEGvi+hGHo6ggNK3MJ3m+RuY7jdyYeh5VFeUmsXXohXyus/yR6Byx/7iHrynw67e
OPlW/3U++3Z81FEhtKwzxqcMH0Eaj71/kJMIRDzOm71FpaHKjiRnJvwYIYfqFYXC
bXd/x3pdLF5NSi1DV/6X+Og1CUy97ElzZRkHMP2yjIvOGVUid65SCmJciy8/YAGJ
c5vGAglnqjZesRRXZbziIGr/txdQfCHYeLK64hW8mY4PbnObwuC+Glmw1p97KeO6
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76526627160128935063222414743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-03 12:26:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 12:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jeddah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abdul Latif Jameel Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.alj.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23667077093075404765649996843951202212033414529674024807409663877216354409473778365626182133701487988977362635922575831239646221269442724293527501711775333722108418693864889694707383250644777887867920993224498230786636910232951287265681252785470056924635560769308329773071812713504158558417786618243722734206691874627897942026843457949408785211570649959445209168687163701104090304547782946484291913545073722268757872668267596918157675947709913014456486059554335408563899186501464680493007727698552583916166190021744122205994056476081175032160991683269339568648314011102788650800276846456615842883915958501916266445461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alj.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e40455d10ee314f3b7c5f514b4958e33841d641
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b7ad3fb8d599b284bfa9697a819ac615d61a5c4a457cf5539bf698f8de84964e27079b1a9022a9fa432a389a03080a873c2e76ba91d571fad2402eb0894f96e340ff564b3006114f7504b06e126e2895fb34025b3f9c537e435f8cabefce5fccdd9f17074240804b170c72c5aae2932765c304357c9622dc5e7d59bba5046dbf8a13d559963c474f8e60c2d021e6838faf5c8a651107d522bb05213ce3dac5f1290b5e728b7b762e5b590db35875d06b8b9a68dce5c679d7b9d61f3dd4ee241b884aea8e995aecfa3623baaf8ec82f9b33d72526c72e9b85aadd044277ec24d200b7749599c917f5fd74f7c20e1ceba85ec91ce0840fd3d655aae75d38cedd13