events.ciena.com

- Ciena Corporation -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1f:84:75 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Ciena Corporation

Organization: Ciena Corporation
State / Province: Maryland
Locality: Linthicum
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1f:84:75
Serial Number (int): 1277133941
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: aa:5d:de:dc:62:c6:fa:d6:ec:2d:74:12:48:5a:48:9b:38:c4:6d:b4
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 19:55:3e:c3:81:ec:00:b4:54:ce:34:9f:94:45:69:df:7e:fa:ad:f6
Fingerprint (sha256): 19:90:dd:88:cb:84:a6:be:d8:0b:ce:80:3f:56:11:55:80:b8:3f:b2:42:4d:b7:4b:b8:16:16:3c:5d:1f:5f:f6

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate events.ciena.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for events.ciena.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

events.ciena.com

Other certificates including the domain name ciena.com

(limited to 100 certificates)
investor.ciena.com
rogueblocktest.ciena.com
myciena.com
cavpn.ciena.com
timewatch.ciena.com
svn.infra.bpi.ciena.com
euvndev.ciena.com
mynetwork.ciena.com
play.ciena.com
learning.ciena.com
artifactory.ciena.com
developer.ciena.com
recruiting.ciena.com
vanity4.jiveon.com
onvcenter-support.ciena.com
*.ciena.com
ger-lantolan.embratel.com.br
md2vpn.ciena.com
staging.cloudsvcs-api.ciena.com
*.cs.ciena.com
caavcppm01.ciena.com
dev.dev.ciena.com
connect.ciena.com
vanity4.jiveon.com
vedp.ciena.com
ger-lantolan.embratel.com.br
ger-lantolan.embratel.com.br
careers.ciena.com
onpartner.ciena.com
mktextfw.ciena.com
ger-lantolan.embratel.com.br
first.ciena.com
partners.ciena.com
vanity4.jiveon.com
*.ciena.com
ger-lantolan.embratel.com.br
onavvcgts01.ciena.com
portalservices.ciena.com
golinks.ciena.com
oracle-ebs.ciena.com
demoinsights.ciena.com
euvndev.ciena.com
engservicestools.ciena.com
learning.ciena.com
partnernews.ciena.com
aze2pwalteryx13.ciena.com
cloudsvcs.ciena.com
testreporter.ciena.com
portal.ciena.com
my.ciena.com
mynetwork.ciena.com
on2vpn.ciena.com
myciena.com
salesforce.ciena.com
go.ciena.com
ger-lantolan.embratel.com.br
partners.ciena.com
community.ciena.com
plc-pmo.ciena.com
smetrics.ciena.com
events.ciena.com
ger-lantolan.embratel.com.br
micore.ciena.com
myciena.com
citpartnerservice.ciena.com
ciena.com
first.ciena.com
misentry.ciena.com
mft.ciena.com
softwaretest.ciena.com
argus-reporting.ciena.com
dev.ocean.ciena.com
cb2bt.ciena.com
gps-mcp01.ciena.com
captiveportal.ciena.com
learning.ciena.com
go.ciena.com
springboard.ciena.com
onvsphere-vdi.ciena.com
cloudsvcs.ciena.com
insights.ciena.com
e.ciena.com
onboard.ciena.com
mobilex.ciena.com
bpsq.bpi.ciena.com
learning.ciena.com
e.ciena.com
ger-lantolan.embratel.com.br
td.ciena.com
md2vpn.ciena.com
cde-test03.sce-automation.ciena.com
va-unidesk.ciena.com
portalservices.ciena.com
portal.ciena.com
cb2bd.ciena.com
ciena.com
npi.ciena.com
ger-lantolan.embratel.com.br
learningsupport.ciena.com
learning.ciena.com

Certificate

The complete raw certificate details for events.ciena.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWeOH4bxY6iROHhcyCpc
lMt/t14SskyvwTeOcykz0JY3vkZWMJKRQT69xcJ7rppMGZqcqXXf8Zi71a7xy6ot
mo0lXEb6/dF+O58nRl0tTgAmqHPloq0NJyR4EOxokHnCi3RvUBkQ9ERkzKvdwbg8
k8y8DGw/6vonJPdO3xRK36EhFSnyCizQwe03vB6pQ2z0hsRpdBonRjOBoBVDK64j
hvILvYOzB+TLQAkPEO3DCqFvVeXhfjSHZMBbci90ZglvLfF7ZDQRxqCcBOly8l05
rH0dYQLNqBbwcvg3Fl4MRkgWyAXNFKlDXD+hjJ1lpdsD7H82835SvPvqyf1sOIoh
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277133941
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-16 12:23:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-15 06:21:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Linthicum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciena Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'events.ciena.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24415057815286059008276896197603811604184521091596944353048092525147081408949877715472551815986726154058544048037272339313199757567483573944704022088001323776963281876878592497258500450921153138302808677658020874837725851539290033342841919715559522717034333304603658530022871477790867370128147587615276388161663664203499501772759420701524315774650453670901088739257377674243193342479460587672327514739566191505612905221863106207269033204532695136064659521031747596423700927346310097755739468658134460966528740744008645127073192494778746211472724065898105002546160950609106657038588215526572834343604383670998869352741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.ciena.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa5ddedc62c6fad6ec2d7412485a489b38c46db4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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