ECPrd.landolakes.com

- LAND O LAKES INC -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:22:0a:92 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

LAND O LAKES INC

Organization: LAND O LAKES INC
State / Province: Minnesota
Locality: Arden Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:22:0a:92
Serial Number (int): 1277299346
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 0b:6a:19:44:98:dc:b2:6c:b2:b4:90:c9:a9:05:fa:4e:39:8c:a5:fe
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): c8:17:1a:9a:77:92:18:88:22:e9:76:cf:95:cd:3e:b7:cf:5e:27:db
Fingerprint (sha256): 27:ab:cf:83:9b:34:36:f2:3f:3e:45:88:ce:05:71:b4:bc:eb:e1:53:eb:d9:c7:fb:d2:ea:6b:94:ea:31:be:38

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate ECPrd.landolakes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ECPrd.landolakes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ECPrd.landolakes.com

Other certificates including the domain name landolakes.com

(limited to 100 certificates)
smartlabel.landolakes.com
collaboration.landolakes.com
blcom.landolakes.com
loldftst.landolakes.com
sip.landolakes.com
iddcrm.landolakes.com
brandtrademarkqa.landolakes.com
businesslink.landolakes.com
dsimobile.landolakes.com
stage.landolakes.com
workspace.landolakes.com
secure.landolakes.com
portal.landolakes.com
portal.landolakes.com
dairydownloadsqa.landolakes.com
cdmsres.landolakes.com
fleetmiles.landolakes.com
apidv.landolakes.com
collaboration.landolakes.com
azure.landolakes.com
portal.landolakes.com
ssr.landolakes.com
feedlabeling.landolakes.com
collaboration.landolakes.com
expemra2.landolakes.com
kentscorecarddev.landolakes.com
webseriesqa.landolakes.com
ECPrd.landolakes.com
adminstage.landolakes.com
dairydownloads.landolakes.com
partner.landolakes.com
blcom.landolakes.com
adminsmartlabel.landolakes.com
securedev.landolakes.com
carrier.landolakes.com
iddcrm.landolakes.com
specs.landolakes.com
vcs1.landolakes.com
stage.landolakes.com
fleetmiles.landolakes.com
gis.landolakes.com
ftp.landolakes.com
sgpoc.landolakes.com
loltms.landolakes.com
dairycrm.landolakes.com
www.board.landolakes.com
basicresearch.landolakes.com
dev1.landolakes.com
smetrics.landolakes.com
specs.landolakes.com
idd-reporting.landolakes.com
dccstage.landolakes.com
dairydownloads.landolakes.com
ftpqa.landolakes.com
tms.landolakes.com
careers.landolakes.com
blcom.landolakes.com
SIP.landolakes.com
espmysite2013.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
partner.landolakes.com
idd-time.landolakes.com
dev.landolakes.com
ECPrd.landolakes.com
mpis.landolakes.com
tms.landolakes.com
ftpsqa.landolakes.com
smetrics.landolakes.com
apidv-internal.landolakes.com
ssr.landolakes.com
IMWEB2.landolakes.com
dairydownloads.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
vpnlab.landolakes.com
www.landolakes.com
portal.landolakes.com
esp.landolakes.com
ftpqa.landolakes.com
rms.landolakes.com
rms.landolakes.com
dcc.landolakes.com
loltms.landolakes.com
bimobile.landolakes.com
ssr.landolakes.com
dairycrm.landolakes.com
secure.landolakes.com
adminsmartlabelstage.landolakes.com
smartlabel.landolakes.com
fleetmilesqa.landolakes.com
dairycrm.landolakes.com
mpoldev.landolakes.com
api.landolakes.com
purinaorderfulfillment.landolakes.com
www.landolakes.com
kentscorecarddev.landolakes.com
dairydownloads.landolakes.com
dfcm.landolakes.com
mpis.landolakes.com

Certificate

The complete raw certificate details for ECPrd.landolakes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA223fe+SDXhbDvqBrVROT
TohMhZ33zfs7A9WhOwiEq4ogoDh0a27Rl86n62zb/GzsuQaqnyBLauPxawte2op3
QNdxHDdIDeZAG6OQ8Z18PwbmmxmKTD3X4TIqKqdynIy+FXgV5RZRwMTI7tPV5egB
C011x+xT9KuZa2lu56j98Ku6rAw3niiF/MHLEJ7gpYghrgLaVaCz7U5CijZUrTrn
1Q04ai1GjAjrAgjGwurKhvNLTAAFd44Ag/LdO4wuiHMEWoTFA5aWkaOb1ZCC20ir
x5Yrb+TsFPvBGXzhyjOeqYvWXLk7KS2tqVsk9+GfVi6jAP7pDOQIJ6rlk7v+uZSt
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277299346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-06 04:48:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-05 12:32:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arden Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LAND O LAKES INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ECPrd.landolakes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27700369175407306669753964921807451366266317189509491175446345536258431972167424228432857806434928587689000039584312707787173477652053999115166916544559026998325753596825212061179350324858188492858528392027935903771040438224712940917530560564276097729693761071432504196676290640683776909639022036048733763191246140033428867730732625649021382359074193615854822409080631424128437232896036901132783445131432213021548658974396275279473898192738698504025366222958928536758509689367822821589451828667646094674014681112548718291778331520644654975467118200850938439293391613410961695861568211298282065702266494733367425412457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ECPrd.landolakes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b6a194498dcb26cb2b490c9a905fa4e398ca5fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00663cdd14690d4cb09296f3832634d74a7ba16140892ec5e127b6e9163d62320b5d964c16094d9c77f95ba080022c19ae5fed377569edd40244adab14aae44d5b15378b3ee8da6cebd307e020f78cc76977fe0f581649bf6301c6bdff3674719b2ba842448b7cf7e48f0a0c256604d666dacd68713d814957b3c8e2e3dc5f1eac89402cff07e0b42bc729982e0659976c334ca74f69e21d1ddd39bad4e9829fdfb71f5548fcc835647bcec2700594907ce64b0461a2c06629c0e6db47a0cefc198e9529305423d1f0bed2cadd4a8b86de79613dc70ccffa5758f37d92d849fb0ae1dff2c88c8369782593d52a492690e31d3bf7da0f285b59652dcbd22df97c31