expenses.gianteagle.com

- Giant Eagle, Inc. -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1f:5e:ae was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Giant Eagle, Inc.

Organization: Giant Eagle, Inc.
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1f:5e:ae
Serial Number (int): 1277124270
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 9e:08:59:ac:e3:72:b0:a9:ec:db:b0:50:cc:f6:9a:e9:76:ce:42:1c
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): b0:c9:7f:87:56:e1:bf:a1:4e:ad:56:ec:74:3d:3c:8e:4e:1d:12:6c
Fingerprint (sha256): 26:ca:d4:04:85:15:43:55:d1:64:6e:e9:15:80:40:ad:9e:a8:6f:e5:ee:63:e9:2e:ec:bf:2b:f5:fd:2e:32:81

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate expenses.gianteagle.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expenses.gianteagle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expenses.gianteagle.com

Other certificates including the domain name gianteagle.com

(limited to 100 certificates)
m.gianteagle.com
enrollgateway.gianteagle.com
sip.gianteagle.com
geapi-cc.gianteagle.com
servicesdev.gianteagle.com
pickup.belkdev.com
sso.gianteagle.com
myappssecure.gianteagle.com
api.gianteagle.com
protocolphysicianportal.pharmacy.gianteagle.com
account.gianteagle.com
mp.shop.gianteagle.com
*.api.gianteagle.com
tlmprodtp.gianteagle.com
uc13.janrainengage.com
contacts.gianteagle.com
sso.gianteagle.com
rad.gianteagle.com
www.jobs.gianteagle.com
portal.gianteagle.com
rxinformed.gianteagle.com
servicesdevnb.gianteagle.com
specialtyrx.gianteagle.com
eoffers.gianteagle.com
mymail.gianteagle.com
adfsservice.gianteagle.com
curbsideexpress.gianteagle.com
ctsecure.mywebgrocer.com
incs.gianteagle.com
hybrid.gianteagle.com
account.gianteagle.com
myapps.gianteagle.com
talent.gianteagle.com
3.janrainsso.com
my.gianteagle.com
account-qa.gianteagle.com
geapi.gianteagle.com
www.gianteagle.com
*.opx.janrain.ws
payment.gianteagle.com
jobs.gianteagle.com
shop.gianteagle.com
curbsideexpress.gianteagle.com
marketpartnersqa.gianteagle.com
ecoupons.gianteagle.com
portal.gianteagle.com
vendorconnect.gianteagle.com
mymail.gianteagle.com
services.gianteagle.com
myapps.gianteagle.com
rdcb.gianteagle.com
sso.gianteagle.com
order.gianteagle.com
curbsideexpress.gianteagle.com
forms.gianteagle.com
try.gianteagle.com
cakes.gianteagle.com
marketpartners.gianteagle.com
login.accounts.gianteagle.com
tlmprodca.gianteagle.com
www.gianteagle.com
geapi-cc.gianteagle.com
curbside.cpk.com
curbsideexpress.gianteagle.com
try.gianteagle.com
msbi.gianteagle.com
bsnee.gianteagle.com
payment-int.gianteagle.com
*.gianteagle.com
fhf.shopthefastlane.com
rad.gianteagle.com
partners.gianteagle.com
pickup.shop.gianteagle.com
mynetinfosec.gianteagle.com
share.gianteagle.com
forms.gianteagle.com
partners2.gianteagle.com
cakes.gianteagle.com
uc13.janrainengage.com
b2b-gtwy.gianteagle.com
flybuy.radiusnetworks.com
sso.gianteagle.com
passwordreset.gianteagle.com
mymail.gianteagle.com
ctsecure.mywebgrocer.com
*.janrainsso.com
tlmprodmip.gianteagle.com
contacts.gianteagle.com
exop.gianteagle.com
try.gianteagle.com
expenses.gianteagle.com
QA.gianteagle.com
share.gianteagle.com
Login.maximuscle.com
expenses.gianteagle.com
curbside.cpk.com
www.gianteagle.com
contacts.gianteagle.com
passwordreset.gianteagle.com
geapi-test.gianteagle.com

Certificate

The complete raw certificate details for expenses.gianteagle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xNCmmqWqiDxmuv29JPn
+hZpDi4KnxuilxAZmkhRbXDa8RRkerdhrgbdFeBkMgXgIqFBOEVe1A9DxVsbDQ1J
41Av46eK18VUQNn3/IP21+RA7Pwy5HE/34s0X5iB0HNEE1elXXP4rosp8RYAR9mE
D+Zhf/TQkVwZkwHbHn4PSSA3ttTj7tbDSnDlkZ0Jy2NIdCJMbw4Sat+f216bf00B
YbtuZNSOxXdIRjEru6icf/44rGDiTPfeuzCrNnd10JSnwBXpG2t+0t16Jq4hE/3u
xB+uSeQNs2SBpJ4MOkTa+FLp32p13PJSZ5YntHOG22YRd1CJ9E/Tmf3zxKqLK62f
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277124270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-27 19:38:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-28 02:33:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Giant Eagle, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expenses.gianteagle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29170545990327090689763078282200732341944932244668032104834285986360805566770335140862216219691479739195623277689262251223728682442448677426269520046968130539846520661415909824751995824054693376982786319805617779772346365660923620735823597049365066950268391025810075442542151563393235324418336467881987277101113552816172914240945553548240146044978399751817035359132444902373433781874230555361345858524261874531223106485247919206137531370534210990296528678837214811436087803815661819370908129352200844069787781784387354924304349378531536363996174784281491888552066377358964770325206548049648316368685571655096268070801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expenses.gianteagle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e0859ace372b0a9ecdbb050ccf69ae976ce421c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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