webseriesqa.landolakes.com

- LAND O LAKES INC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 9f:b9:c8:bc:d7:1c:96:9f:00:00:00:00:50:fd:97:26 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LAND O LAKES INC

Organization: LAND O LAKES INC
State / Province: Minnesota
Locality: Arden Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9f:b9:c8:bc:d7:1c:96:9f:00:00:00:00:50:fd:97:26
Serial Number (int): 212311897692019688241306859002679629606
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cb:e5:21:c8:be:71:f8:58:6c:b7:0f:4d:6f:68:93:07:ed:55:ab:e1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 14:89:ae:c4:6f:65:46:c0:e5:8e:62:c2:9e:90:82:d4:39:db:6c:1d
Fingerprint (sha256): 12:f3:14:f2:47:ce:41:75:f9:f7:b1:ad:19:9d:b7:f1:da:20:a2:6c:9e:24:20:4f:f7:6a:73:b5:c5:51:78:77

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate webseriesqa.landolakes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webseriesqa.landolakes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webseriesqa.landolakes.com

Other certificates including the domain name landolakes.com

(limited to 100 certificates)
smartlabel.landolakes.com
collaboration.landolakes.com
blcom.landolakes.com
loldftst.landolakes.com
sip.landolakes.com
iddcrm.landolakes.com
brandtrademarkqa.landolakes.com
businesslink.landolakes.com
dsimobile.landolakes.com
stage.landolakes.com
workspace.landolakes.com
secure.landolakes.com
portal.landolakes.com
portal.landolakes.com
dairydownloadsqa.landolakes.com
cdmsres.landolakes.com
fleetmiles.landolakes.com
apidv.landolakes.com
collaboration.landolakes.com
azure.landolakes.com
portal.landolakes.com
ssr.landolakes.com
feedlabeling.landolakes.com
collaboration.landolakes.com
expemra2.landolakes.com
kentscorecarddev.landolakes.com
webseriesqa.landolakes.com
ECPrd.landolakes.com
adminstage.landolakes.com
dairydownloads.landolakes.com
partner.landolakes.com
blcom.landolakes.com
adminsmartlabel.landolakes.com
securedev.landolakes.com
carrier.landolakes.com
iddcrm.landolakes.com
specs.landolakes.com
vcs1.landolakes.com
stage.landolakes.com
fleetmiles.landolakes.com
gis.landolakes.com
ftp.landolakes.com
sgpoc.landolakes.com
loltms.landolakes.com
dairycrm.landolakes.com
www.board.landolakes.com
basicresearch.landolakes.com
dev1.landolakes.com
smetrics.landolakes.com
specs.landolakes.com
idd-reporting.landolakes.com
dccstage.landolakes.com
dairydownloads.landolakes.com
ftpqa.landolakes.com
tms.landolakes.com
careers.landolakes.com
blcom.landolakes.com
SIP.landolakes.com
espmysite2013.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
partner.landolakes.com
idd-time.landolakes.com
dev.landolakes.com
ECPrd.landolakes.com
mpis.landolakes.com
tms.landolakes.com
ftpsqa.landolakes.com
smetrics.landolakes.com
apidv-internal.landolakes.com
ssr.landolakes.com
IMWEB2.landolakes.com
dairydownloads.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
vpnlab.landolakes.com
www.landolakes.com
portal.landolakes.com
esp.landolakes.com
ftpqa.landolakes.com
rms.landolakes.com
rms.landolakes.com
dcc.landolakes.com
loltms.landolakes.com
bimobile.landolakes.com
ssr.landolakes.com
dairycrm.landolakes.com
secure.landolakes.com
adminsmartlabelstage.landolakes.com
smartlabel.landolakes.com
fleetmilesqa.landolakes.com
dairycrm.landolakes.com
mpoldev.landolakes.com
api.landolakes.com
purinaorderfulfillment.landolakes.com
www.landolakes.com
kentscorecarddev.landolakes.com
dairydownloads.landolakes.com
dfcm.landolakes.com
mpis.landolakes.com

Certificate

The complete raw certificate details for webseriesqa.landolakes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 212311897692019688241306859002679629606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 05:30:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-24 06:00:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arden Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LAND O LAKES INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webseriesqa.landolakes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843827433131104437760733237880345861862128527050893436430309196528762267048086886159825592186260936000985951894713564538463345424726934324150279825311739618954079939901336912096506790459897387109460805076863599034376660596504577119231630053629744008924708561734095109221708597384623748165074739929083904972691173541283002685341567708844572666539281715281778678137593839581710184387611080550028032466284825199025708133772322642674950650360824347188652831060706876444766077698231396418747670990194108742622791487859333743765383424094848026852355935900035189344900683274550863847016295257257445361188175953160053559033320035993402218073265209756204757508334368752574413338429457630315875002358778371485257574766233001398814689040558476702888713248066124004668814065873786858004028958486272339913382938630587734252114068107839901367589964497525697857925333408142288407954008768007588069202189308823350111677687681560305582554816290150007336063919862099117795366825196940729513894777011110568401422369858218327485579998110827387980009357555314416725708559996610053586015184968059904437752218142054522849061366922673513920745702413733750667232770914821705321977274024489625532614923022686238309649637063307348734033335207153053972950903571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webseriesqa.landolakes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbe521c8be71f8586cb70f4d6f689307ed55abe1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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