signon.minnstate.edu

- Minnesota State Colleges and Universities -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number c8:d9:e2:e5:b4:0f:9d:7e:00:00:00:00:50:ee:68:3c was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Minnesota State Colleges and Universities

Organization: Minnesota State Colleges and Universities
Organization unit: ITS
State / Province: Minnesota
Locality: St Paul
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c8:d9:e2:e5:b4:0f:9d:7e:00:00:00:00:50:ee:68:3c
Serial Number (int): 266976929598831052611165546391005980732
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 85:df:17:44:3f:c3:d5:55:82:04:15:6f:13:e8:81:92:4c:7a:07:da
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 53:7b:03:fe:84:75:30:e1:69:21:d9:46:8f:a7:71:2a:a7:e5:6d:7e
Fingerprint (sha256): 38:fb:2d:10:37:a5:11:ef:bd:8d:ff:5e:e2:e9:61:cf:50:ec:4d:28:ec:f9:ba:29:56:6f:f5:b7:7b:68:3c:e4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate signon.minnstate.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for signon.minnstate.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

signon.minnstate.edu

Other certificates including the domain name minnstate.edu

(limited to 100 certificates)
controlsystems.newcenturyresources.com
iseek.org
www.viveportstatus.com
status.moishehouse.org
eservices.minnstate.edu
status.fbdfrozen.com
programnavigator.minnstate.edu
accountability.minnstate.edu
opendora.minnstate.edu
status.skynetexpress.com
*.learn.minnstate.edu
servicedesk.minnstate.edu
webmeeting.minnstate.edu
opendora.minnstate.edu
www.viveportstatus.com
www.viveportstatus.com
*.learn.minnstate.edu
www.viveportstatus.com
www.viveportstatus.com
reportsBI.minnstate.edu
monitor.mss.brainwalk.net.br
careerwise.minnstate.edu
status.skynetexpress.com
status.minnstate.edu
webmeeting.minnstate.edu
securefileshare.minnstate.edu
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
24x7.holzundgarten.de
www.ire.minnstate.edu
webmeeting.minnstate.edu
careerwise.minnstate.edu
*.lib.minnstate.edu
status.minnstate.edu
mediaspace.minnstate.edu
www.viveportstatus.com
www.ire.minnstate.edu
www.viveportstatus.com
eservices.minnstate.edu
www.viveportstatus.com
ire.minnstate.edu
opendora.minnstate.edu
www.viveportstatus.com
signon.minnstate.edu
www.viveportstatus.com
accountability.minnstate.edu
starid.minnstate.edu
signon.minnstate.edu
www.viveportstatus.com
xostatus.crownpeak.com
mediaspace.minnstate.edu
opendora.minnstate.edu
*.learn.minnstate.edu
eservices.minnstate.edu
minnstate.edu
www.viveportstatus.com
ire.minnstate.edu
status.fire.com
minnstate.edu
careerwise.minnstate.edu
www.viveportstatus.com
securefileshare.minnstate.edu
24x7.holzundgarten.de
www.viveportstatus.com
securefileshare.minnstate.edu
xostatus.crownpeak.com
*.bookitcalendar.minnstate.edu
ire.minnstate.edu
status.entrecloud.com
signon.minnstate.edu
careerwise.minnstate.edu
status.globalvisioninc.com
signon.minnstate.edu
status.skynetexpress.com
status.eu.premium.salusconnect.io
opendora.minnstate.edu
www.ire.minnstate.edu
*.learn.minnstate.edu
status.us.deptagency.com
*.bookitcalendar.minnstate.edu
mycpl.minnstate.edu
askus.minnstate.edu
www.viveportstatus.com
eservices.minnstate.edu
status.caznet.com.au
www.programnavigator.minnstate.edu
*.lib.minnstate.edu
www.ire.minnstate.edu
status.sentrygroup.com.au
ire.minnstate.edu
www.viveportstatus.com
monitoring.i-beheer.nl
ire.minnstate.edu
mediaspace.minnstate.edu
mediaspace.minnstate.edu
www.viveportstatus.com
*.learn.minnstate.edu
*.lib.minnstate.edu
*.lib.minnstate.edu

Certificate

The complete raw certificate details for signon.minnstate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo88uPlQHT6tq979FSK5s
2Ytqx5S04XdKnx8SQfGMrCUsV+8Qv0tXmaVnsyd2BV2C0j51eCO/bA8IrL5Neu6u
Y5LXigCpkmIZ8dSBlh8u9VgeJ74BQ/it5NkxQiSRZUk4jVk3GDeuxuute9NQkTZA
NttNwSvIgmRUR5BTsGCNJ0V25QJjJMQeht0I+UNp6TgPy8cnyDr8p3WaTMMEf90u
ZJDAWDvFkHDXkpbN3eDI/C9Usz483g6Dc50l9oCpH41or7Hq13j1DrjqEuCAN34S
HwQjGrQ7OUkDNUuGsHabtpLNvt8F3/3AhhhAKShaNrC0Qd2JTzSPZP5aJOh3zB+p
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266976929598831052611165546391005980732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 00:34:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 01:04:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Paul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota State Colleges and Universities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'signon.minnstate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20679008290064308078618366609357056104616816725621534192459034255339994695487694817741749511644813839129913324503281159958648880763094079110036722201299504344430132188227212532185916836282613220154847893936375615484536817970957074148213903024018407955083395941194398138791631465595833881621415571200139396740217402804693132570572116056002726981291823608790182274353425936800360862761530882967761784118834949555555982740408995992779913693244870148182667971621073317265169252155609528776502285570556823204845588676930507505692856033784239215088548433151044063382361389851292141775273732806840555130320976235177411848613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signon.minnstate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85df17443fc3d5558204156f13e881924c7a07da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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