contacts.gianteagle.com

- Giant Eagle, Inc. -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1c:1e:10 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Giant Eagle, Inc.

Organization: Giant Eagle, Inc.
Organization unit: Contact Lens Sales
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1c:1e:10
Serial Number (int): 1276911120
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 2f:dc:35:30:bd:ab:aa:35:43:f8:15:ce:dc:b7:bd:e4:50:9e:dc:1a
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 6d:fb:c3:48:e0:c6:89:67:e3:df:c2:5b:07:94:2d:d1:8c:6c:8a:8f
Fingerprint (sha256): 27:51:1a:f1:97:1f:6d:89:d3:b5:97:8f:ce:ad:6a:14:3a:8f:b3:dd:00:6b:fc:17:83:56:de:72:cb:89:9f:6c

Issuing Certificate URL: http://aia.entrust.net/l1c-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate contacts.gianteagle.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for contacts.gianteagle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name gianteagle.com

(limited to 100 certificates)
m.gianteagle.com
enrollgateway.gianteagle.com
sip.gianteagle.com
geapi-cc.gianteagle.com
servicesdev.gianteagle.com
pickup.belkdev.com
sso.gianteagle.com
myappssecure.gianteagle.com
api.gianteagle.com
protocolphysicianportal.pharmacy.gianteagle.com
account.gianteagle.com
mp.shop.gianteagle.com
*.api.gianteagle.com
tlmprodtp.gianteagle.com
uc13.janrainengage.com
contacts.gianteagle.com
sso.gianteagle.com
rad.gianteagle.com
www.jobs.gianteagle.com
portal.gianteagle.com
rxinformed.gianteagle.com
servicesdevnb.gianteagle.com
specialtyrx.gianteagle.com
eoffers.gianteagle.com
mymail.gianteagle.com
adfsservice.gianteagle.com
curbsideexpress.gianteagle.com
ctsecure.mywebgrocer.com
incs.gianteagle.com
hybrid.gianteagle.com
account.gianteagle.com
myapps.gianteagle.com
talent.gianteagle.com
3.janrainsso.com
my.gianteagle.com
account-qa.gianteagle.com
geapi.gianteagle.com
www.gianteagle.com
*.opx.janrain.ws
payment.gianteagle.com
jobs.gianteagle.com
shop.gianteagle.com
curbsideexpress.gianteagle.com
marketpartnersqa.gianteagle.com
ecoupons.gianteagle.com
portal.gianteagle.com
vendorconnect.gianteagle.com
mymail.gianteagle.com
services.gianteagle.com
myapps.gianteagle.com
rdcb.gianteagle.com
sso.gianteagle.com
order.gianteagle.com
curbsideexpress.gianteagle.com
forms.gianteagle.com
try.gianteagle.com
cakes.gianteagle.com
marketpartners.gianteagle.com
login.accounts.gianteagle.com
tlmprodca.gianteagle.com
www.gianteagle.com
geapi-cc.gianteagle.com
curbside.cpk.com
curbsideexpress.gianteagle.com
try.gianteagle.com
msbi.gianteagle.com
bsnee.gianteagle.com
payment-int.gianteagle.com
*.gianteagle.com
fhf.shopthefastlane.com
rad.gianteagle.com
partners.gianteagle.com
pickup.shop.gianteagle.com
mynetinfosec.gianteagle.com
share.gianteagle.com
forms.gianteagle.com
partners2.gianteagle.com
cakes.gianteagle.com
uc13.janrainengage.com
b2b-gtwy.gianteagle.com
flybuy.radiusnetworks.com
sso.gianteagle.com
passwordreset.gianteagle.com
mymail.gianteagle.com
ctsecure.mywebgrocer.com
*.janrainsso.com
tlmprodmip.gianteagle.com
contacts.gianteagle.com
exop.gianteagle.com
try.gianteagle.com
expenses.gianteagle.com
QA.gianteagle.com
share.gianteagle.com
Login.maximuscle.com
expenses.gianteagle.com
curbside.cpk.com
www.gianteagle.com
contacts.gianteagle.com
passwordreset.gianteagle.com
geapi-test.gianteagle.com

Certificate

The complete raw certificate details for contacts.gianteagle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprOky2qRCRAWPrtK96+q
ai6rfQyl/Z+ZtMJ9NJgD1FEe1bAvjpSLokyPDptEJsaRaNAClOUclbY7OAXLJVYy
dlbigAi+sEASxDw2rsB9NYzfUJaI14t9MARw5Jjqs5EO/2ovZQKPQVMjjTJtqSOx
GmJaekGcbiS2WFoort+6rQZRIX8pRWZY84JwGgn4n+qavd1u2w+qn/R/zp1VJ5uO
pni8QYwGUb6eVA+jsaDtfT9Ovl9I8T1CfRRk4S9CEDQQIyH2N73OegCxLLBknmee
DABTJRJav5g3O5LqMv4YqeagJ3UQiT7ZoGYPbFKz/qrMLa89u9vt8WzBrciU3pgC
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276911120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-02-02 19:04:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-25 20:57:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Giant Eagle, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Contact Lens Sales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'contacts.gianteagle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21044144248710871776820166025484703278287801216723888886535111506952897426488382174464290414921300725786462435011498072692568613742562574181118832632468341270801591737736785249488619994276115690148897682722533694271889285318307461413018625963381257952924363974673884971989023786642424974180894415207034523164201066488015393758678913008029374472817329107319294739025544239980521456247010437228182137023371490107678411559681284676589228804216945675878943396171211551659151035379523586193141318648686854826746300227338418551186288916973235588771714744931533173608897596512151485046506382271513620723819716424098704261787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1c-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fdc3530bdabaa3543f815cedcb7bde4509edc1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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