catalog.ben.edu

- Benedictine University -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 25:e5:07:77:ec:e2:25:2c:c3:b6:5a:39:37:a4:94:d8 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Benedictine University

Organization: Benedictine University
State / Province: Illinois
Locality: Lisle
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 25:e5:07:77:ec:e2:25:2c:c3:b6:5a:39:37:a4:94:d8
Serial Number (int): 50370623302976782689912992469828801752
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 0a:65:e5:63:c2:a9:95:dd:44:77:5b:18:ed:b1:76:68:3c:af:2c:08
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 8b:a5:e4:97:d7:33:c0:ad:99:b9:40:6e:98:9a:2f:11:a9:c5:70:32
Fingerprint (sha256): 45:02:dc:48:d1:57:d0:e9:36:0c:98:53:76:2f:4f:25:56:5d:9b:42:37:fd:cd:b0:b8:4e:af:ac:9d:12:3e:2e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate catalog.ben.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for catalog.ben.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catalog.ben.edu

Other certificates including the domain name ben.edu

(limited to 100 certificates)
*.libweb.ben.edu
benueagles.com
benueagles.com
benueagles.com
myfin.ben.edu
servicedesk.massageenvy.com
benueagles.com
live-web-bdt.edu.help
adfs.ben.edu
servicedesk.massageenvy.com
benueagles.com
*.libweb.ben.edu
archivesspace.ben.edu
benueagles.com
secure.ben.edu
servicedesk.massageenvy.com
webvpn.ben.edu
benueagles.com
landing.online.ben.edu
servicedesk.massageenvy.com
forticlient-ems.ben.edu
illiad.ben.edu
landing.online.ben.edu
alumnicommunity.ben.edu
mybenu.ben.edu
online.ben.edu
illiad.ben.edu
webvpn.ben.edu
landing.online.ben.edu
servicedesk.massageenvy.com
*.ben.edu
*.BEN.EDU
servicedesk.massageenvy.com
alerts.ben.edu
*.libweb.ben.edu
landing.online.ben.edu
servicedesk.massageenvy.com
mybenu.ben.edu
servicedesk.massageenvy.com
servicedesk.massageenvy.com
wirelesscert.ben.edu
*.libweb.ben.edu
online.ben.edu
helpdesk.mercurymed.com
5639274879778816-fe4.pantheonsite.io
servicedesk.massageenvy.com
landing.online.ben.edu
benueagles.com
servicedesk.massageenvy.com
benueagles.com
lisle-ipt-cuc01-ms.ben.edu
servicedesk.massageenvy.com
alumnicommunity.ben.edu
benueagles.com
helpdesk.naa.edu
lisle-ipt-cer01.ben.edu
helpdesk.countrypure.com
benueagles.com
alumnicommunity.ben.edu
archivesspace.ben.edu
www.ben.edu
lisle-ipt-cimp01.ben.edu
online.ben.edu
benueagles.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
online.ben.edu
servicedesk.mazakcorp.com
www.ben.edu
servicedesk.massageenvy.com
helpdesk.countrypure.com
vbenise.ben.edu
benueagles.com
researchguides.ben.edu
servicedesk.massageenvy.com
servicedesk.massageenvy.com
benueagles.com
researchguides.ben.edu
benueagles.com
www.ben.edu
researchguides.ben.edu
servicedesk.massageenvy.com
live-web-bdt.edu.help
housing.ben.edu
researchguides.ben.edu
www.ben.edu
landing.online.ben.edu
benueagles.com
benueagles.com
servicedesk.massageenvy.com
online.ben.edu
help.gmfus.org
print.ben.edu
servicedesk.massageenvy.com
alumnicommunity.ben.edu
servicedesk.massageenvy.com
archivesspace.ben.edu
catalog.ben.edu
leaservicedesk.lea.co.bw
benueagles.com

Certificate

The complete raw certificate details for catalog.ben.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50370623302976782689912992469828801752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 16:50:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-10 16:50:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lisle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Benedictine University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'catalog.ben.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679473062335738902931038339517471071681503641293576551106788985278189247678068577764425351182262639577808692865759411730155887415242113842732519192583509406370615259691925946826442216212369685999970949132164039069015368860753014541124342471886192477850810519272066780060065517468218121589290619063964880654496008969277686644281360629338566371095840731719849029512300951575743386347224704198335108380468963286170282124207664348985603468004130621560638123357138786743889132599802771240151728423219879859634426475404130372227216363815759264645134840832926933256648809248268910049239302160935375402044808894379612091939879195162744658865594561362899101904829730917812535541489300028328509274095193660086751024172426017251863377717862667479620591367446844094308757466450394002960160779113151497542474095079120031515783822334731846018104386948776117628120919766191486492061014666550772523674547587453629172664689089584549746136148158426826386002390217545855569180358007866633893832347841459844389651525415350896973512410648040127359813699543606634923225631261477692030877650309623467682009818525040604996350743454982260042005904318914692920324170557645243748793631403078824746972340077083239051017970845473776316235759550067292438925506527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a65e563c2a995dd44775b18edb176683caf2c08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.ben.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c44b943d51b2b9977d0351181c408ea8319d41f3962a8cab48ddb81751d56b848c3b676d6baa8511ede941126b06f03467c5c06f56b267cb79bbff61d6933414110420eb3dcfb5120295e93e170f022bcbc6c31d039b8935437ccdc7b902696c9a25f8591ffa874f021ae7cdab297d06b94b17f4115471e5cea0a5a2ad42addddaeecc7e83ba1e81246c4ab9fb70d503d81c9f0e14d6a22daded7a7a9d567aa911b45f4b0fb9f382ed23a3b789660b4784ac24e589e69020434e5b9500527d7db953f49eb5e16e9b6c06bb6c9b6f7f2cd6507f6fcbdab023e8ba91c65afd685f3138f8b2ec994abf369918e88a7467322f1e2e1b8ea9c0527992d16e2f297089