www.ruckuswireless.com

- CommScope, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1b:b7:1d:54:a8:8a:90:b2:f0:d1:8f:df:39:94:e9:d8 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

CommScope, Inc.

Organization: CommScope, Inc.
State / Province: North Carolina
Locality: Hickory
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 1b:b7:1d:54:a8:8a:90:b2:f0:d1:8f:df:39:94:e9:d8
Serial Number (int): 36839941108509755855810101533021104600
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b0:7c:70:66:92:42:1a:c1:2a:4e:f1:c4:4d:b8:80:db:45:61:c6:d0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 52:80:78:ea:c2:2b:79:a5:df:c7:a0:ae:e3:d6:b4:38:c9:9c:f6:ce
Fingerprint (sha256): 39:43:4c:02:ba:00:00:1f:c4:84:cb:f9:df:31:12:f3:f0:7f:e8:3e:94:7d:25:ff:11:16:49:f7:76:2f:87:0b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.ruckuswireless.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ruckuswireless.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ruckuswireless.com
ruckuswireless.com

Other certificates including the domain name ruckuswireless.com

(limited to 100 certificates)
onelogin.ruckuswireless.com
device.qaalto.ruckuswireless.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sendgrid.trytuesday.com
supportqa.ruckuswireless.com
secure03.stage.lithium.com
*.donatello-lab.ruckuswireless.com
supportmdm.ruckuswireless.com
aip-uat.ruckuswireless.com
*.ruckuswireless.com
devalto.ruckuswireless.com
sni.cloudflaressl.com
ruckusci.ruckuswireless.com
ap-registrar.ruckuswireless.com
info.ruckuswireless.com
support-preuat.ruckuswireless.com
*.ruckuswireless.com
*.donatello.ruckuswireless.com
sni.cloudflaressl.com
*.cloud.ruckuswireless.com
marketing.ruckuswireless.com
secure01.lithium.com
ssl509636.cloudflaressl.com
sni.cloudflaressl.com
partners.ruckusdev.ruckuswireless.com
sni.cloudflaressl.com
*.ruckuswireless.com
secure03.stage.lithium.com
ap-registrar.ruckuswireless.com
BDC-BITBUCKET.RUCKUSWIRELESS.COM
secure03.stage.lithium.com
secure01.lithium.com
TM.ruckuswireless.com
apr-client.ruckuswireless.com
devalto.ruckuswireless.com
ssl4731.cloudflare.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.donatello.ruckuswireless.com
scalealto.ruckuswireless.com
intalto.ruckuswireless.com
secure01.lithium.com
msan7.myabsorb.com
sni.cloudflaressl.com
secure01.lithium.com
devalto.ruckuswireless.com
renewals.ruckuswireless.com
store.ruckuswireless.com
qaalto.ruckuswireless.com
training.ruckuswireless.com
git-stage.ruckuswireless.com
sni.cloudflaressl.com
msan7.myabsorb.com
ssl509634.cloudflaressl.com
secure03.stage.lithium.com
qaalto.ruckuswireless.com
sni.cloudflaressl.com
ssl4731.cloudflare.com
sni.cloudflaressl.com
elastigirl.ruckuswireless.com
refer.dotloop.com
sni.cloudflaressl.com
devstagealto.ruckuswireless.com
myft-api-test.ft.com
forums.ruckuswireless.com
ssl323110.cloudflaressl.com
mc-ios-dev.masterclass.ninja
groove.spin.pm
msan7.myabsorb.com
sni.cloudflaressl.com
sni.cloudflaressl.com
secure03.stage.lithium.com
sni.cloudflaressl.com
*.ruckuswireless.com
ssl509636.cloudflaressl.com
sni.cloudflaressl.com
devstagealto.ruckuswireless.com
myft-api-test.ft.com
qaalto.ruckuswireless.com
alto.sg.dataexplorer.int.cloud.ruckuswireless.com
myft-api-test.ft.com
sni.cloudflaressl.com
apr-client.ruckuswireless.com
sni.cloudflaressl.com
ssl509634.cloudflaressl.com
sni.cloudflaressl.com
msan7.myabsorb.com
ru.ruckuswireless.com
msan7.myabsorb.com
sni.cloudflaressl.com
www.ruckuswireless.com
*.ruckuswireless.com
sni.cloudflaressl.com
sni.cloudflaressl.com
serviceloc.ruckuswireless.com
ssl509636.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
de.ruckuswireless.com

Certificate

The complete raw certificate details for www.ruckuswireless.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WCE9tXmmlkJTVwO7zNZ
w84yoEcY3L03mZzKypaq2SWowhVzbO0a+TPGhJPRhrDx2qrJ+IqOe5M8HZjGOoEP
Ed+F9PoQY+uK0Q7KIGPZBW817XCQMVWl1Ecj5WfhHB1deuUf4j4MilLgAA3jiXHS
J1yVf2l7I9Bxb4mPfiQ9aJyLP0i6/YUe330RDXCwNfxZOZDOPpPL5TCYTWiJ/KcY
4FuJrLu+tRdk8fw1nIHSW07NQHczSKPbcMkcBNIgjFaw19uipDaQZsPqVyhAy7+0
45eFhcAPa+pFBuXqI8vnlayVeh/cKSdcZ/ACX9Ra5Lv+d4BTlhmow7UYAd9bVcBX
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36839941108509755855810101533021104600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 19:50:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-14 19:50:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hickory'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CommScope, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ruckuswireless.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29966073762768997756295777982069556805546613243984709229718585834872367913195608879583234621245845385424013822690328205578536850630838504895435481105783251512393958229521590683897895033516904400174483375287095091516417777348598216263700818189431605932813665522834210704284276535226159363399458619824194647492134051928095724662123512739675414785591009763534444460806202076342862656136611949420726132662762890031138108817131308066982285046720244004113546889938808092555448302488378059965934244814332484638065898482517667228605559117208364392547340985898855090068755255456332673354663935599858655481019529748053942622073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b07c706692421ac12a4ef1c44db880db4561c6d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruckuswireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruckuswireless.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c16a1e029fa8fd32b4f0133411c3fb694603fee039aaa521a90e652e446a96c074dbeb475eb032495b6e59fbf127a8bbb42f2087294828831893fe3a9f8d4aa39c908921f19537cc2e1aa95a4c682933cca75d18b837d1dade9450ea20d006afef14d05f267334d67bc97cc727e92db6e0da2682d7649b5d8e5a4a18c8ab7d624e349fd7d54266ab46a9578cdf79096db8ac2469dc736d7a69e0086707a33eed3fc81093f2169926703d70665c5f76d822cca5d3651bb51a43f93892d96b1ca8320ac88de8d2c391850fff8178dae8eb67bc5abea562c7a88b7567c6c068e8abef28f18ae8c955224344c895f7447d7ea1dc31a8c208f168ebfe52a37fbd5b5