glws7prd.mygreatlakes.org

- Great Lakes Higher Education Corp. -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:19:e8:04 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Great Lakes Higher Education Corp.

Organization: Great Lakes Higher Education Corp.
Organization unit: ISS
State / Province: Wisconsin
Locality: Madison
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:19:e8:04
Serial Number (int): 1276766212
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 32:c5:f9:85:7b:0f:03:7d:21:66:df:b3:6a:7b:51:e2:e9:67:1e:c1
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 67:1c:3f:1c:ae:86:08:05:4a:19:38:45:a9:a2:ef:c3:b9:84:fc:fd
Fingerprint (sha256): 94:6d:c5:9e:98:8f:82:0d:d8:c9:36:60:a5:c6:4c:3e:c2:bf:fb:4b:70:aa:d4:e9:3c:87:c9:0f:49:d7:7a:b5


Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate glws7prd.mygreatlakes.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for glws7prd.mygreatlakes.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

glws7prd.mygreatlakes.org

Other certificates including the domain name mygreatlakes.org

(limited to 100 certificates)
connect.mygreatlakes.org
securemail.mygreatlakes.org
connect.mygreatlakes.org
training.mygreatlakes.org
partners.mygreatlakes.org
securemail.mygreatlakes.org
partners.mygreatlakes.org
home.mygreatlakes.org
home.mygreatlakes.org
connect.mygreatlakes.org
schools.mygreatlakes.org
schools.mygreatlakes.org
studentloans.mygreatlakes.org
glws7prd.mygreatlakes.org
community.mygreatlakes.org
connect.mygreatlakes.org
home.mygreatlakes.org
securemail.mygreatlakes.org
home.mygreatlakes.org
schools.mygreatlakes.org
securemail.mygreatlakes.org
meteorap.mygreatlakes.org
mygreatlakes.org
securemessage.mygreatlakes.org
partners.mygreatlakes.org
iq.mygreatlakes.org
careers.mygreatlakes.org
glws.mygreatlakes.org
community.mygreatlakes.org
community.mygreatlakes.org
schools.mygreatlakes.org
schools.mygreatlakes.org
mygreatlakes.org
securemail.mygreatlakes.org
training.mygreatlakes.org
training.mygreatlakes.org
mygreatlakes.org
wwwuatb.mygreatlakes.org
community.mygreatlakes.org
careers.mygreatlakes.org
home.mygreatlakes.org
community.mygreatlakes.org
wwwted.mygreatlakes.org
mygreatlakes.org
home.mygreatlakes.org
securemail.mygreatlakes.org
securemail.mygreatlakes.org
securemail.mygreatlakes.org
m.mygreatlakes.org
mygreatlakesuat.org
home.mygreatlakes.org
training.mygreatlakes.org
netagent.mygreatlakes.org
careers.mygreatlakes.org
community.mygreatlakes.org
ibis.mygreatlakes.org
mygreatlakes.org
partnersted.mygreatlakes.org
schools.mygreatlakes.org
muat.mygreatlakes.org
m.mygreatlakes.org
compass.mygreatlakes.org
community.mygreatlakes.org
schoolsted.mygreatlakes.org
compass.mygreatlakes.org
community.mygreatlakes.org
glws7prd.mygreatlakes.org
schools.mygreatlakes.org
netagent.mygreatlakes.org
schools.mygreatlakes.org
community.mygreatlakes.org
home.mygreatlakes.org
careers.mygreatlakes.org
partners.mygreatlakes.org
mygreatlakes.org
glwsj.mygreatlakes.org
mygreatlakested.org
compass.mygreatlakes.org
wcprod.mygreatlakes.org
glws7prd.mygreatlakes.org
community.mygreatlakes.org
training.mygreatlakes.org
wwwuat.mygreatlakes.org
securemail.mygreatlakes.org
connect.mygreatlakes.org
mygreatlakested.org
glwsw.mygreatlakes.org
www.mygreatlakes.org
mygreatlakested.org
connect.mygreatlakes.org
community.mygreatlakes.org
careers.mygreatlakes.org
connect.mygreatlakes.org
schools.mygreatlakes.org
mygreatlakes.org
securemail.mygreatlakes.org
glws7prd.mygreatlakes.org
fa.mygreatlakes.org
muatb.mygreatlakes.org
m.mygreatlakes.org

Certificate

The complete raw certificate details for glws7prd.mygreatlakes.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVbNDcpFY9mB5kBSOzcX
QGxwN5n+pxR4TyV9UNclvs30jIspQNsd+jbQiYCofEkeO3vOtqbv+3rjtN3/4B1u
TJIYAB6RCaB3sK4mHXPKHlK034Ui9R4YILASuKUT7GE74bGKKadPZsP3bUN3L0E5
dxIHFAlYKZw0I1PikHkk0K0BTsRvRQFu7yq3e5KyFoX86FBtTUiRwNkgitKRywLB
DbFDELcYLium/mAgtZxYNKMyJWgy7a6kj+hB2H8F4qvUdRvPM8OIO37l8Fp7BZCf
wSyLBca7GOtP7AoiYYqD/biRhvlQaZ/FeF6ZOrujYT83RtLEaAdgwLFTDKp5ki5e
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276766212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-08 17:47:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-10 03:42:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Great Lakes Higher Education Corp.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ISS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'glws7prd.mygreatlakes.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22891936363145139852884432358070282563552578465069364324735443432376429094195162732389268956380403889755351220866935144379262073302176975467399208562335338575468406521252411371828712519531021458644589836819323024099574653615557807433160462208324567879965432039776315414686415685119880751395006385387879027941575447454318842718477794037869305461921084740232780896998142008313932985482614752985257822081568987242212438183023043915268726237973659661419790397363104355912732190639341285728932712461936431919152172517938112682776499701413337203685293348464195255118265573762632354181402732813733213389184620514255416745601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glws7prd.mygreatlakes.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32c5f9857b0f037d2166dfb36a7b51e2e9671ec1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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