sandbox-hcilink.pall.com

- Pall Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number c4:c8:33:47:b0:3c:20:73:00:00:00:00:50:f3:d4:f9 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pall Corporation

Organization: Pall Corporation
State / Province: New York
Locality: Port Washington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c4:c8:33:47:b0:3c:20:73:00:00:00:00:50:f3:d4:f9
Serial Number (int): 261568186628181851877648503684874884345
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 86:f8:9d:5a:75:10:05:bf:81:d3:4a:ce:df:4a:7c:61:0d:d3:59:d2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 49:be:f0:af:ad:3e:f7:6a:57:a5:54:80:b2:7e:8e:b9:5e:0e:11:9c
Fingerprint (sha256): 3a:0a:06:94:0f:9c:a7:0f:10:2d:c7:32:e1:28:75:5d:a0:9d:82:02:bd:52:c8:76:b8:f0:5b:66:53:cb:c7:e7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sandbox-hcilink.pall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sandbox-hcilink.pall.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sandbox-hcilink.pall.com

Other certificates including the domain name pall.com

(limited to 100 certificates)
dedip.filesanywhere.com
dedip.filesanywhere.com
nyvpn.pall.com
preferred.pall.com
dedip.filesanywhere.com
ithelp.pall.com
dedip.filesanywhere.com
dedip.filesanywhere.com
acms.pall.com
msan4.myabsorb.com
feature-acms.pall.com
acms-ext.pall.com
reset.pall.com
msan4.myabsorb.com
bomgar-pi.pall.com
pall.com
pcm.pall.com
dedip.filesanywhere.com
preferred.pall.com
*.pall.com
dedip.filesanywhere.com
preferred.pall.com
stage-bps.pall.com
dedip.filesanywhere.com
bps.pall.com
pallwater.com
pallwater.com
acms-ext.pall.com
ldgate.pall.com
msan4.myabsorb.com
files.pall.com
go.pall.com
dev.crixus.pall.com
labfilters.pall.com
cnvpn.ap.pall.com
search.pall.com
msan4.myabsorb.com
webservices.pall.com
LSCSAKHO01.pall.com
msan4.myabsorb.com
preferred.pall.com
uat-acms.pall.com
shop.pall.com
msan4.myabsorb.com
dedip.filesanywhere.com
test-apps.pall.com
NYPW-ISE01.wh.corp.pall.com
go.pall.com
dedip.filesanywhere.com
test-apps.pall.com
palgt2ap01.hec.wh.corp.pall.com
nprvpn.pall.com
dedip.filesanywhere.com
palgp2ap01.hec.wh.corp.pall.com
dedip.filesanywhere.com
uat-acms.pall.com
msan4.myabsorb.com
dedip.filesanywhere.com
msan4.myabsorb.com
dedip.filesanywhere.com
dedip.filesanywhere.com
palshqap01.hec.wh.corp.pall.com
a.pall.com
dedip.filesanywhere.com
msan4.myabsorb.com
search.pall.com
palshxap01.hec.wh.corp.pall.com
acms-ext.pall.com
dedip.filesanywhere.com
pwc.pall.com
stage-bps.pall.com
dedip.filesanywhere.com
test-sls.pall.com
ukvpn.europe.pall.com
dedip.filesanywhere.com
dev2-shop.pall.com
smarteam.pall.com
msan4.myabsorb.com
dedip.filesanywhere.com
pwvpn.pall.com
dedip.filesanywhere.com
sandbox-hcilink.pall.com
sgsg-mecwise.ap.pall.com
dev2-shop.pall.com
dedip.filesanywhere.com
dedip.filesanywhere.com
ukvpn.europe.pall.com
dedip.filesanywhere.com
palshxap01.hec.wh.corp.pall.com
ukvpn.pall.com
palshpap01.wh.corp.pall.com
dedip.filesanywhere.com
smarteam.pall.com
palgp2ap01.hec.wh.corp.pall.com
a.pall.com
msan4.myabsorb.com
sts.pall.com
pallwater.com
dedip.filesanywhere.com
dedip.filesanywhere.com

Certificate

The complete raw certificate details for sandbox-hcilink.pall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrkgBHtbvLPA7p0OW4Nd
6e6mv5FDNlCTFjizF1hj5K//EmE4NYswj2QhRzNYqO0pfWaWGnNadz6FAQn4VMwI
PABuHLIVdh0/eYIYLDRdqeeoqxzNct8BLkE445B4FS/MkLtLJL6iZJVh2QqJRo5b
zeq6s3OsQ9nAd5sMHGbmuwmHg7T8e5wafyToey92mlBWgykLoMq8t0k5GCFtuH0S
mSWBBnZ6b04dTJcD5WHfBV0PwCd6b/tgiJIeDEqDKaE3IEbyCItdUHYg2BD4xyG3
I2/x7hhMJiq3AJm2nzvYw6V7Ejsv1mARS+VkBDzfnlcR7F8EV0six72wMef8kGs7
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261568186628181851877648503684874884345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 10:25:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 10:55:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Port Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pall Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandbox-hcilink.pall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26096379396601875048418153506567421628182418009171691141741332363671392286404154056444424410000408547155114718280539275702310982103243120431901265266132657451296281290208530633500084347420802929848967161487898616643075806306370519938752264669418795219635930304059658889656387026409335897880708332062917866206474071312479619442303910965985752587922993452409765940327576384010751442841956640787643897046877116952033029247071085445093151381093681653344445440472947457367309329534458990346256734584495080681059690886516804758087695259825278463005366312847309619865570268249613534850070580535674115757604446538422947625967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-hcilink.pall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86f89d5a751005bf81d34acedf4a7c610dd359d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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