careerwise.minnstate.edu

- Minnesota State Colleges and Universities -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3d:00:fd:0d:1d:27:3c:b7:96:67:30:43:db:52:e0:e2 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Minnesota State Colleges and Universities

Organization: Minnesota State Colleges and Universities
State / Province: Minnesota
Locality: Saint Paul
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3d:00:fd:0d:1d:27:3c:b7:96:67:30:43:db:52:e0:e2
Serial Number (int): 81088040231498204925550677342431666402
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 85:40:6f:21:60:fb:df:b4:90:27:64:82:0b:2c:d7:58:b0:76:ea:e8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): c1:be:02:1e:49:2d:7d:4d:05:46:cd:5d:ab:55:52:2b:31:fe:46:05
Fingerprint (sha256): 50:79:83:16:ec:00:4d:5d:2d:31:ab:ae:68:48:50:c3:ff:2f:41:4d:c4:84:6f:0b:fd:03:29:8e:5e:78:45:ec

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate careerwise.minnstate.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careerwise.minnstate.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careerwise.minnstate.edu
www.careerwise.minnstate.edu

Other certificates including the domain name minnstate.edu

(limited to 100 certificates)
controlsystems.newcenturyresources.com
iseek.org
www.viveportstatus.com
status.moishehouse.org
eservices.minnstate.edu
status.fbdfrozen.com
programnavigator.minnstate.edu
accountability.minnstate.edu
opendora.minnstate.edu
status.skynetexpress.com
*.learn.minnstate.edu
servicedesk.minnstate.edu
webmeeting.minnstate.edu
opendora.minnstate.edu
www.viveportstatus.com
www.viveportstatus.com
*.learn.minnstate.edu
www.viveportstatus.com
www.viveportstatus.com
reportsBI.minnstate.edu
monitor.mss.brainwalk.net.br
careerwise.minnstate.edu
status.skynetexpress.com
status.minnstate.edu
webmeeting.minnstate.edu
securefileshare.minnstate.edu
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
24x7.holzundgarten.de
www.ire.minnstate.edu
webmeeting.minnstate.edu
careerwise.minnstate.edu
*.lib.minnstate.edu
status.minnstate.edu
mediaspace.minnstate.edu
www.viveportstatus.com
www.ire.minnstate.edu
www.viveportstatus.com
eservices.minnstate.edu
www.viveportstatus.com
ire.minnstate.edu
opendora.minnstate.edu
www.viveportstatus.com
signon.minnstate.edu
www.viveportstatus.com
accountability.minnstate.edu
starid.minnstate.edu
signon.minnstate.edu
www.viveportstatus.com
xostatus.crownpeak.com
mediaspace.minnstate.edu
opendora.minnstate.edu
*.learn.minnstate.edu
eservices.minnstate.edu
minnstate.edu
www.viveportstatus.com
ire.minnstate.edu
status.fire.com
minnstate.edu
careerwise.minnstate.edu
www.viveportstatus.com
securefileshare.minnstate.edu
24x7.holzundgarten.de
www.viveportstatus.com
securefileshare.minnstate.edu
xostatus.crownpeak.com
*.bookitcalendar.minnstate.edu
ire.minnstate.edu
status.entrecloud.com
signon.minnstate.edu
careerwise.minnstate.edu
status.globalvisioninc.com
signon.minnstate.edu
status.skynetexpress.com
status.eu.premium.salusconnect.io
opendora.minnstate.edu
www.ire.minnstate.edu
*.learn.minnstate.edu
status.us.deptagency.com
*.bookitcalendar.minnstate.edu
mycpl.minnstate.edu
askus.minnstate.edu
www.viveportstatus.com
eservices.minnstate.edu
status.caznet.com.au
www.programnavigator.minnstate.edu
*.lib.minnstate.edu
www.ire.minnstate.edu
status.sentrygroup.com.au
ire.minnstate.edu
www.viveportstatus.com
monitoring.i-beheer.nl
ire.minnstate.edu
mediaspace.minnstate.edu
mediaspace.minnstate.edu
www.viveportstatus.com
*.learn.minnstate.edu
*.lib.minnstate.edu
*.lib.minnstate.edu

Certificate

The complete raw certificate details for careerwise.minnstate.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyvn2R3h433dCeQLgI7m
DRBc3vcEDpwd53piLsCiWII/kk2S83j0eGtMSuqyL4elr2Yr8CN8opqTnzbqriMw
LSRuDP7tFv0Nh3a0M8ukmj8fUktnoOBK1Zs1q1zS7JgO3iD9waVU8hLYG8PqdwJQ
IZH6h6ksk8nKJF7nEEcVs/DUUabBdz2xTUtzI6Htb0yic5MZNbLKJkEolWhrPpB6
evDG/ROM5AYdaozD4B402yvX7CCibybubIcBk2xJJkfx2rK0AxYsbaWjulPNvdy3
6b6cE2qE+6X0UDGo/RBAc+Zb57nAHa4dfBPnOzkk2gIlnZru1AT9tVn9V+SorYSL
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81088040231498204925550677342431666402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 13:43:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 13:43:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Paul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota State Colleges and Universities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careerwise.minnstate.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20093541175848475773940177854992462907559125208672503516796073961808661714111622071898917837747283099427670195301751772959182087703247943003898626917185544575404448743800719559841752694049015047538367375574950737016002630722380760108299269402465420986738454267891306388483056518047225535431681953649830809725398703471419248794442521910854931658895043963869767557827936842660109037937436950972169137859825731992704403938320688124640811374252197044307604657165229534421450995270139113380188478060135773073294372745801433538713467191466015315751288757440321190868055475506936621118532620097786835028644720856060452440839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85406f2160fbdfb4902764820b2cd758b076eae8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerwise.minnstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careerwise.minnstate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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