aruba-master.albertus.edu

- Albertus Magnus College -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1d:f9:2f was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Albertus Magnus College

Organization: Albertus Magnus College
State / Province: Connecticut
Locality: New Haven
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1d:f9:2f
Serial Number (int): 1277032751
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: d3:ab:e7:a6:72:dc:5e:7f:b6:80:35:4c:89:95:3d:f2:1b:9c:e2:07
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): a8:e5:06:49:76:c6:c4:a0:3e:d2:48:6e:9c:89:fb:9a:72:1b:63:88
Fingerprint (sha256): 4f:61:a7:45:d2:18:87:ed:28:43:69:b4:1d:82:a0:f1:d5:43:36:4c:90:cd:78:92:ea:cb:0a:14:9d:f9:75:a3

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate aruba-master.albertus.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aruba-master.albertus.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aruba-master.albertus.edu

Other certificates including the domain name albertus.edu

(limited to 100 certificates)
adp.albertus.edu
albertus.edu
devblog.albertus.edu
elearning.albertus.edu
media.albertus.edu
*.albertus.edu
vanckohall.delhi.edu
admissions.albertus.edu
webservices.albertus.edu
reservations.albertus.edu
cluster.technolutions.net
adp.albertus.edu
admissions.albertus.edu
masters.albertus.edu
reservations.albertus.edu
sfunder1cert.net
webservices.albertus.edu
cluster.technolutions.net
elearning.albertus.edu
admissions.albertus.edu
reservations.albertus.edu
adp.albertus.edu
soar.albertus.edu
sfunder1cert.net
elearning.albertus.edu
admissions.albertus.edu
*.albertus.edu
handshake.albertus.edu
vanckohall.delhi.edu
elearning.albertus.edu
albertus.edu
reservations.albertus.edu
mba.albertus.edu
elearning.albertus.edu
admissions.albertus.edu
handshake.albertus.edu
albertus.edu
admissions.albertus.edu
albertus.edu
my.albertus.edu
vanckohall.delhi.edu
handshake.albertus.edu
sfunder1cert.net
albertus.edu
elearning.albertus.edu
vanckohall.delhi.edu
reservations.albertus.edu
devblog.albertus.edu
cluster.technolutions.net
sfunder1cert.net
albertus.edu
sfunder1cert.net
mba.albertus.edu
nd.albertus.edu
*.albertus.edu
vanckohall.delhi.edu
vanckohall.delhi.edu
reservations.albertus.edu
cluster.technolutions.net
*.ezproxy.albertus.edu
aruba-master.albertus.edu
sfunder1cert.net
vanckohall.delhi.edu
*.albertus.edu
elearning.albertus.edu
janus.albertus.edu
reservations.albertus.edu
albertuspresblog.albertus.edu
admissions.albertus.edu
webservices.albertus.edu
handshake.albertus.edu
reservations.albertus.edu
adfs.albertus.edu
adp.albertus.edu
its.albertus.edu
cluster.technolutions.net
cluster.technolutions.net
cluster.technolutions.net
sfunder1cert.net
albertus.edu
sfunder1cert.net
albertus.edu
admissions.albertus.edu
vanckohall.delhi.edu
sfunder8cert.net
vanckohall.delhi.edu
nd.albertus.edu
webservices.albertus.edu
webservices.albertus.edu
sfunder8cert.net
albertus.edu
admissions.albertus.edu
admissions.albertus.edu
webservices.albertus.edu
albertus.edu
cluster.technolutions.net
soar.albertus.edu
soar.albertus.edu
media.albertus.edu
sfunder8cert.net

Certificate

The complete raw certificate details for aruba-master.albertus.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18OFkXhLqa4Wg5qFxvPs
WRRspbjqRr44GxGFgqGsddfgySNDvWAyBlO+cx4MxMQv9KSbsaZdwRxMQ5zIr1kb
0JfqHrn3uc0XrOKpXxBqfT+ah7ed9ZHpXV2T/PLoyp2Y8jgK2PdNdVQAcpZRkb0h
w4LBFm4Mgcy4zGdx9iz3iBiz10IUeGfI9SVqvMYomRwg3ewakBi+Olc/D2KEhkRk
3Rx25Gejk0sOVeXadJkDmDDHnyGljf74viBa+1R2VImnOo/MjDmTs+62kMfFVUE/
gcWAWlUD1zsKwufcIDXLxdw0crE5jqSNqVIwLdONK4xauqD38VE+5lXpAZPvFZXT
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277032751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-03 12:45:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-04 06:49:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Haven'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albertus Magnus College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aruba-master.albertus.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27237650936543387645616123060042327780791463562993051881096271344116852283776931463940441338722430996688207945147011143495512704099891479357764266849844046412678745111406312667742719905427197114008909210681514706222925700049594534109760339338499105540094077342159343108495884196203592573905106236975071286393882304990779614895653452314287915708383620606552744077130985953905605968121450160601702779489844809553759239083986655360568486694875968130593260428935161439210554894093282655912111555882642014585984561531287150825132534103755382376901408125979411294221777778455696265900963807846773914955600278252936978879319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aruba-master.albertus.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3abe7a672dc5e7fb680354c89953df21b9ce207
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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