tunnel.ccac.edu

- CCAC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4f:01:8d:a3:09:09:52:98:00:00:00:00:51:02:2a:74 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CCAC

Organization: CCAC
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:01:8d:a3:09:09:52:98:00:00:00:00:51:02:2a:74
Serial Number (int): 105017076700608128956371424365785524852
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e6:73:63:02:9b:25:35:14:7c:03:65:38:37:f8:e9:d4:6c:7b:d4:3f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 89:b0:6f:81:89:be:e1:4f:49:ff:b6:db:a5:91:c6:32:84:37:4a:d0
Fingerprint (sha256): 45:8a:d3:7b:5b:73:10:5c:e1:b7:31:3d:ca:3e:7a:fc:32:65:0a:6f:90:44:41:8b:64:48:b7:b5:fd:0b:d4:31

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate tunnel.ccac.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tunnel.ccac.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tunnel.ccac.edu
www.tunnel.ccac.edu

Other certificates including the domain name ccac.edu

(limited to 100 certificates)
san-30-s12.tlsprovisioning.exacttarget.com
libguides.ccac.edu
onlinetutoring.ccac.edu
helpcenter.ccac.edu
*.ezproxy.ccac.edu
www-cgi.ccac.edu
courses.ccac.edu
lectures.ccac.edu
SO-ISE-02.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
libguides.ccac.edu
*.ccac.edu
col-app-live.ccac.edu
outlook.ccac.edu
arc.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
webapps.ccac.edu
docimg.ccac.edu
libguides.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
outlook.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
col-app-test.ccac.edu
col-webapi-ext.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
www.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
col-webapi.ccac.edu
libguides.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
www.ccac.edu
webmail.acd.ccac.edu
webapps.ccac.edu
webconf.ccac.edu
lyncext.ccac.edu
CO-ISE-01.ccac.edu
*.ccac.edu
libguides.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
webconf.ccac.edu
shopcommunityed.ccac.edu
col-webapi.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
san-30-s12.tlsprovisioning.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
*.ezproxy.ccac.edu
remote.ccac.edu
register.ccac.edu
shopcommunityed.ccac.edu
lyncext.ccac.edu
timekeeper.ccac.edu
tunnel.ccac.edu
ecommerce.ccac.edu
gartner.ccac.edu
vpn.ccac.edu
webapps.ccac.edu
libguides.ccac.edu
academicvpn.ccac.edu
colleague.ccac.edu
libguides.ccac.edu
ccaccentral.ccac.edu
webmail.acd.ccac.edu
servicedesk.ccac.edu
catalog.ccac.edu
ccaccentral.ccac.edu
cp-pub.ccac.edu
courses.ccac.edu
ocsext.ccac.edu
helpcenter.ccac.edu
arc.ccac.edu
VC.CCAC.EDU
libguides.ccac.edu
ccac.edu
sip.ccac.edu
ecommerce-test.ccac.edu
courses.ccac.edu
cp-pub.ccac.edu
sip.ccac.edu
ics.ccac.edu
ccaccentral.ccac.edu
san-30-s12.tlsprovisioning.exacttarget.com
*.ccac.edu
webmail.acd.ccac.edu
lyncext.ccac.edu
ccaccentral.ccac.edu
vc.ccac.edu
*.ccac.edu
cluster-cp.ccac.edu
myservices.ccac.edu
www.ccac.edu
libguides.ccac.edu
guest.ccac.edu
www-cgi.ccac.edu
sip.ccac.edu
remote.ccac.edu
sip.ccac.edu
libguides.ccac.edu
libguides.ccac.edu

Certificate

The complete raw certificate details for tunnel.ccac.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105017076700608128956371424365785524852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 15:14:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-07 15:44:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CCAC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tunnel.ccac.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845505586813671216685715537262067939561730623453994429916099106823307678699716782672211548346012938251162535455658966096508143815999218433813262357883548305046023122478236372992059202559076010506564509459415485892200457601972263091267126965415361262807308720750792881298846190417006083442928497910909793142089489332860396900703951177671326554568703702452815398935321860660186533934004954374924308885606381925788939987271780513624934625620894297848944436950403307706275641555462370799481964957751715857920268086584705772672618335678151869997786902370592871134561596084944511502800320435202646930890877123383386153136558522105202221796745822906473201836662685891873632198520578348463823149510583295550822082552179615812201906606427446999813074132694275885510439382707791206876759776240772734228767277528472124066602156284462579613742960386784407305858899256944604793606130091663111615324208405404299291639327224896387479567870360189343353769975974429875782650011048245109835428813767638585439916273772675607859773866865003179459080534595404959723952848106569186841655710779953853587610484353872916224363378553423264201821802896235629323592847218465854136991261749946759387707014963975925566124176573488430652322034737176301545761980711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunnel.ccac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tunnel.ccac.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e67363029b2535147c03653837f8e9d46c7bd43f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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