intranet.aramark.co.uk

- ARAMARK -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:d3:40:65 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

ARAMARK

Organization: ARAMARK
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d3:40:65
Serial Number (int): 1356021861
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 0b:f8:c1:8a:07:10:ee:a6:af:a1:79:b8:13:f1:39:0e:6b:92:71:f2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9d:46:a1:63:ce:34:73:4f:9c:0e:b0:54:56:c8:3d:fe:41:43:d0:49
Fingerprint (sha256): 51:0f:15:31:32:6e:c7:f6:e7:9b:f2:d1:fb:aa:6c:f3:0d:18:3e:02:9b:47:b9:08:2e:3e:4a:3b:16:8d:59:77

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate intranet.aramark.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.aramark.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intranet.aramark.co.uk
www.intranet.aramark.co.uk

Other certificates including the domain name aramark.co.uk

(limited to 100 certificates)
webmail.aramark.co.uk
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
microsites.aramark.co.uk
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
intranet.aramark.co.uk
sunderlanduni.aramark.co.uk
sip.aramark.com
intranet.aramark.co.uk
mmc.aramark.co.uk
lync01.fss.aramark.com
hrdatawarehouse.aramark.co.uk
webmail.aramark.com
pwcep.aramark.co.uk
sunderlanduni.aramark.co.uk
my.aramark.co.uk
game.606.gg
webmail.aramark.com
pwcml.aramark.co.uk
intranet.aramark.co.uk
USDGR0LYCPOOL01.aramarkuc.net
hrdatawarehouse.aramark.co.uk
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
webmail.aramark.com
kronos-central.aramark.co.uk
pwcml.aramark.co.uk
pwcep.aramark.co.uk
pwcml.aramark.co.uk
intranet.aramark.co.uk
DGRsip.aramarkuc.net
squizy.app
pwcep.aramark.co.uk
gief.app
pwcep.aramark.co.uk
DGRsip.aramarkuc.net
neo.aramark.co.uk
USPHL0LYCPOOL01.aramarkuc.net
webmail.aramark.com
PHLSIP.aramarkuc.net
qr.respublikapark.com.ua
intranet.aramark.co.uk
sunderlanduni.aramark.co.uk
USPHL0LYCPOOL01.aramarkuc.net
webmail.aramark.com
kronos-central.aramark.co.uk
pwcml.aramark.co.uk
DGRsip.aramarkuc.net
hrdatawarehouse.aramark.co.uk
sip.aramark.com
pwcep.aramark.co.uk
pwcml.aramark.co.uk
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
mmc.aramark.co.uk
pwcep.aramark.co.uk
mmc.aramark.co.uk
microsites.aramark.co.uk
USPHL0LYCPOOL01.aramarkuc.net
playgo.vonder.io
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
microsites.aramark.co.uk
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
pwcml.aramark.co.uk
USDGR0LYCPOOL01.aramarkuc.net
neo.aramark.co.uk
webmail.aramark.co.uk
PHLSIP.aramarkuc.net
hrdatawarehouse.aramark.co.uk
webmail.aramark.com
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
sunderlanduni.aramark.co.uk
aramark.co.uk
pwcep.aramark.co.uk
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
pwcep.aramark.co.uk
squizy.app
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
webmail.aramark.com
webmail.aramark.com
lync01.fss.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
pwcml.aramark.co.uk
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net

Certificate

The complete raw certificate details for intranet.aramark.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2qxqHRDr/u4tlICLdvJ
HQuAzTQ6b7QkY96bZ/Fdkned9GOOCQx82rdkfoDamEqGHcJq9mllkyet9DYk87CP
Tt4HMsPC4aoYgPCWGLXkCovbyzafZKMTe/P0R5UnL91bOM/Hf/xSyN2APiDPp/xW
qYJjZeg9Kti3mmZIQ5ga2tzxBcSXDuDbrTwbXKlJv0Lyq9l+kyZusvKg09ZRqn7j
rSQqXfU8VIhRIlRbNoM1WY3Eu9iTSy1HNYVQAa/KgQefbxuZ5qO0CszuT265prZK
RFlSlfNwY4mjKP9tqZbQHvbRIGpVnZtc2xa8qE86AA5wSqPQoGnbiTO0UJ6bSGik
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1356021861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-11 17:42:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-11 19:03:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ARAMARK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intranet.aramark.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21639362909989773875657373217864413292174862876540344688959213454764641912657003395944907878174222639170315693544246532550329811406217872936949550961938402378071754717216260187821767415772311185232694903772793222181657775966250599173954317796800986455117194160703249873687408673856006397854337337604903592707258249581129979945576414693610153752089107561836861783285356119705997738518392092966420191505106424022974950278862169153635186237487323854650946189690271460116248794460747308252814457510645339574647907812272622380746105759737919821455381119806963197666562609285384575649257970048918428891976197917513924256783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intranet.aramark.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bf8c18a0710eea6afa179b813f1390e6b9271f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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