*.uleth.ca

- University of Lethbridge -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 42:be:f8:a1:e9:fd:92:d0:d0:7a:ef:19:27:94:b8:a0 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Lethbridge

Organization: University of Lethbridge
State / Province: Alberta
Locality: Lethbridge
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 42:be:f8:a1:e9:fd:92:d0:d0:7a:ef:19:27:94:b8:a0
Serial Number (int): 88720626990658494110083302652177070240
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 86:62:7d:c6:20:a1:3c:3e:71:55:30:32:da:36:9b:e0:8a:ab:67:09
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9c:c7:c3:d5:bc:ae:ec:99:3e:2d:83:e9:29:6c:ac:96:76:fb:cb:f1
Fingerprint (sha256): 24:a6:d4:a5:ed:11:34:29:b9:3a:fb:60:29:96:cf:50:2d:46:bb:40:0c:27:30:fb:00:74:15:74:c6:79:a9:5f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.uleth.ca

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.uleth.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.uleth.ca
uleth.ca
www.uleth.ca

Other certificates including the domain name uleth.ca

(limited to 100 certificates)
login-test.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
oasis.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
libguides.uleth.ca
digitallibrary.uleth.ca
vpn.uleth.ca
vpn2.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
vpn.uleth.ca
campaigns.uleth.ca
*.uleth.ca
uslims.uleth.ca
vpn.uleth.ca
arrti.uleth.ca
webmail.uleth.ca
*.uleth.ca
login.uleth.ca
login-test.uleth.ca
bookstore.uleth.ca
*.uleth.ca
vpn.uleth.ca
*.uleth.ca
oasis.uleth.ca
*.uleth.ca
acs1.net.uleth.ca
webexchange.uleth.ca
ise.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
idp-test.uleth.ca
oasis.uleth.ca
campaigns.uleth.ca
idp.uleth.ca
*.uleth.ca
*.uleth.ca
expenseclaim.uleth.ca
login-test.uleth.ca
*.uleth.ca
*.uleth.ca
svnhost.cs.uleth.ca
*.uleth.ca
go.uleth.ca
bookstore.uleth.ca
*.uleth.ca
*.uleth.ca
campaigns.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
batman-ms.net.uleth.ca
*.uleth.ca
learning.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
cwms-admin.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
its-iseadm2-p.uleth.ca
*.uleth.ca
*.uleth.ca
millennium.uleth.ca
arrti.uleth.ca
libguides.uleth.ca
*.uleth.ca
its-iseadm2-p.uleth.ca
*.uleth.ca
webexchange.uleth.ca
*.uleth.ca
*.uleth.ca
libguides.uleth.ca
*.uleth.ca
acs2.net.uleth.ca
*.uleth.ca
libguides.uleth.ca
campaigns.uleth.ca
millennium.uleth.ca
digitallibrary.uleth.ca
*.uleth.ca
*.uleth.ca
anc-bbtsapps-p.online.uleth.ca

Certificate

The complete raw certificate details for *.uleth.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88720626990658494110083302652177070240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 17:36:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 17:36:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lethbridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Lethbridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uleth.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895262107048723337401984355055409560138212600964213541452428818045538864794990519734446391551234192564142165934372817599112005003862479697452236634321426859007823083273555828760245322213079347337137197769207674132078870832591756376918811851387346761635839513481033042775019500310036303331360769955012669965039367592621110563962438584824141028212656782871897919710588313503891516234915677248919731111299293744849376622159062399482519086423902366403465953056733979047070629219219149153777849935707000781760469155464371817074878227788679220470394037473422598183853948980784858306948446988316358466271979557440973476582205045458247910159826468974724595995117640599799773446032111822384929626193688689307835843321965157404224905940115069351663967110894282992232879535168778309465832344413549460811002687314420845606852232988407736273666312571113480320976626076021402493439538529595359591160229156265267005362506601055835951768231681446772503898668168214090962079778204256357437943236236037554497098730233397912895535152605439677936087864142223306314557230016507831660267618147047001268961327880965795355638913469033462924184222076877544329451810992156963742120278137930909990088912165885339867369778150356870205193637420782708505330287037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86627dc620a13c3e71553032da369be08aab6709
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uleth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uleth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uleth.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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