sgw04.rbcroyalbank.com

- Royal Bank of Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 7f:97:d2:fe:e4:83:d4:c3:26:df:5a:12:df:0a:72:a5 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Royal Bank of Canada

Organization: Royal Bank of Canada
State / Province: Ontario
Locality: Toronto
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 7f:97:d2:fe:e4:83:d4:c3:26:df:5a:12:df:0a:72:a5
Serial Number (int): 169600271791015076567869090643879555749
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 10:a5:0c:fa:28:1a:11:17:f5:76:de:ea:25:81:9e:43:13:82:0c:b0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): dc:70:df:ab:0b:53:5a:8c:03:52:c7:ee:67:e2:5d:d2:dd:7b:17:38
Fingerprint (sha256): 49:d1:f9:3d:b3:fb:72:5b:f9:1d:62:a5:6e:72:50:f7:66:b4:ce:b9:fc:0b:c0:4c:c4:20:ea:34:79:8c:7a:13

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sgw04.rbcroyalbank.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sgw04.rbcroyalbank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sgw04.rbcroyalbank.com

Other certificates including the domain name rbcroyalbank.com

(limited to 100 certificates)
rbcroyalbank.com
rbcroyalbank.com
silver.rbcroyalbank.com
recs.rbcroyalbank.com
social.rbcroyalbank.com
rbcroyalbank.com
silver.rbcroyalbank.com
rbcroyalbank.com
mobile.rbcroyalbank.com
silver.rbcroyalbank.com
www1.rbcinsurance.com
account-b-nonprod.rbcventures.ca
rbcits.com
www1.rbcinsurance.com
rbcroyalbank.com
rbcroyalbank.com
rbc.com
sso01.rbcroyalbank.com
silver.rbcroyalbank.com
swernick.com
www1.rbcinsurance.com
rbc.com
sso01.rbcroyalbank.com
rbcroyalbank.com
silver.rbcroyalbank.com
silver.rbcroyalbank.com
rbcroyalbank.com
mgw5.rbcroyalbank.com
discover.rbcroyalbank.com
rbcroyalbank.com
mobile.rbcroyalbank.com
www1.rbcinsurance.com
wpvip.rbcroyalbank.com
www.bdl.me
covarity.rbcroyalbank.com
rbcroyalbank.com
www1.rbcinsurance.com
www1.rbcinsurance.com
silver.rbcroyalbank.com
rbcroyalbank.com
www1.rbcinsurance.com
www.cards.rbcroyalbank.com
collect.rbcroyalbank.com
rbc.com
www4.rbc.com
mgw.rbcroyalbank.com
mgw.rbcroyalbank.com
rbcits.com
sgw04.rbcroyalbank.com
rbcroyalbank.com
www1.rbcinsurance.com
rbcroyalbank.com
logon.rbc.com
recs.rbcroyalbank.com
webmill.com.au
rbcroyalbank.com
rbcroyalbank.com
rbcroyalbank.com
rbcroyalbank.com
mwl.rbcroyalbank.com
silver.rbcroyalbank.com
www1.rbcinsurance.com
www1.rbcinsurance.com
rbcroyalbank.com
rbcroyalbank.com
www1.rbcinsurance.com
maps.rbcroyalbank.com
rbc-akamai-prod.rbc.com
mobile.rbcroyalbank.com
mobile.rbcroyalbank.com
rbcroyalbank.com
logon.rbc.com
rbcroyalbank.com
rbcroyalbank.com
www1.rbcinsurance.com
wwwx3.rbcroyalbank.com
www.rbcroyalbank.com
silver.rbcroyalbank.com
www4.rbc.com
mobile.rbcroyalbank.com
silver.rbcroyalbank.com
recs.rbcroyalbank.com
silver.rbcroyalbank.com
stweb.rbcroyalbank.com
rbcrtdes.rbcroyalbank.com
rbcroyalbank.com
caribbean.rbcroyalbank.com
logon.rbc.com
www1.rbcinsurance.com
silver.rbcroyalbank.com
www1.rbcinsurance.com
mobile.rbcroyalbank.com
rbcroyalbank.com
rbcroyalbank.com
www1.rbcinsurance.com
recs.rbcroyalbank.com
royalbank.com
www.rbcroyalbank.com
mgw5.rbcroyalbank.com
rbcroyalbank.com

Certificate

The complete raw certificate details for sgw04.rbcroyalbank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1adpHU50cwkfGtjDtMnD
VQSbDs4fqonfMqxup0HQ1+PtqmVb6v452XDCK3gd8k3J453UT6bLnnU2eucL5RgB
ciUxHNW4KimIDIwKslYq9062koa1ZZgzY+5173J6Je8I1ybVMUptUeZl2I0T1E51
Q27brQI+ilIhwKWNTIKyC3zZGhc1I33ojxgRg9HYU/wkTAaQwUP0BpThnpNiAPYj
LxdYi9z6jsJGcmUWSSx/esCPqhoi52l6kvPtecVVwET4FVQK7QOBpH8uU1v+odvQ
IckWSu7uu1b25avFrvAOsw23oowE366FZOHkTVzG4b5Z5RJB5KCz0lBKDfJBmt8c
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169600271791015076567869090643879555749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 19:20:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-11 19:20:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Royal Bank of Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sgw04.rbcroyalbank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26971312203123980426674661167211643556248096836467000599428654810138461644122542824916222907176365335531384938414449444163369609389020692446296401359388876182061946385177104728929588211625024622854832559840493032520101933274267813041442303214784473260605706110280556029541614545417838947807876290294856406272428842991968296072434639820192058258422919074268884565374674237370597581743784832654087474037354882727420642203834515865672881165546250610403998193766959507169270086033101277415893712616437817195963288473643088480706756685125775171330624018783930426740802616841484060834209495063603917911768720337845754993771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10a50cfa281a1117f576deea25819e4313820cb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgw04.rbcroyalbank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cc7906402ed5a09380808c6a23f63df09ae71c09bd54f42c8755c2bf342b070cfb6fd0a7502495d33a06df3f8f871c23dac487e87f0872fb734f82b5e8fff4d8ab238d33f9f6eeb361d3eb53e5fbfd0ee48297e8986b5ef57742a63f7905716f870e75a118457f942a41e34acaf39c9b1172763b1cebca532ef0ac124e593ec2248bdbb406db0e3f741f77ca4936e640288ae9cb84b2bf09674f760d4405bd8a2fa9e67b0d0f811bf6c0602f43b709047d737622e36d9ea37fc3429a5667ac4d8f539fa1ee2221280906d7e06e2f7c6fc0802f6a94c3d112e3e9e67d45f32eafce2d6ccbba48d846734f71c6bace97cdc5406dcc91d9772650ab58d75018e9ad