ingenius.cambiumlearning.com

- Cambium Learning Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b2:76:69:11:02:60:fd:18:00:00:00:00:50:e8:68:b0 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cambium Learning Group

Organization: Cambium Learning Group
State / Province: Texas
Locality: Dallas
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b2:76:69:11:02:60:fd:18:00:00:00:00:50:e8:68:b0
Serial Number (int): 237217405279645503304700227177228560560
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 39:1e:3a:a5:a5:61:0a:d3:ee:a1:7d:c8:e4:b3:54:c5:a5:6f:35:f2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 97:dd:0d:ba:51:98:03:27:d5:b4:a6:1a:8a:f7:d5:7d:cc:9a:a1:e5
Fingerprint (sha256): fa:86:32:42:2b:12:93:7b:4f:14:2e:bc:41:2b:b5:d4:00:9a:87:33:84:79:a2:d5:c0:e4:11:33:3a:44:d5:82

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ingenius.cambiumlearning.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ingenius.cambiumlearning.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ingenius.cambiumlearning.com

Other certificates including the domain name cambiumlearning.com

(limited to 100 certificates)
mail.cambiumlearning.com
unanet.cambiumlearning.com
unanet.cambiumlearning.com
dev.unanet.cambiumlearning.com
mail.cambiumlearning.com
qa.kws.cambiumlearning.com
email2.cambiumlearning.com
edi.cambiumlearning.com
kws.cambiumlearning.com
sso.cambiumlearning.com
vpntest.mi.cambiumlearning.com
support.cambiumlearning.com
secure.cambiumlearning.com
support.cambiumlearning.com
sslvpn.cambiumlearning.com
support.cambiumlearning.com
zabbix.mi.cambiumlearning.com
sslvpn.cambiumlearning.com
*.cambiumlearning.com
secure.cambiumlearning.com
mail.cambiumlearning.com
ftp2.cambiumlearning.com
unanet.cambiumlearning.com
*.cambiumlearning.com
connect.cambiumlearning.com
kws.cambiumlearning.com
mail.cambiumlearning.com
unanet.cambiumlearning.com
micucmsub.cambiumlearning.com
micucmsub.cambiumlearning.com
store.cambiumlearning.com
sslvpn.cambiumlearning.com
unanet.cambiumlearning.com
vpntest.mi.cambiumlearning.com
kws.cambiumlearning.com
backup.cambiumlearning.com
ingenius.cambiumlearning.com
unanet.cambiumlearning.com
miucmraexpe.cambiumlearning.com
mail.cambiumlearning.com
ingenius.cambiumlearning.com
dev.ingenius.cambiumlearning.com
store.cambiumlearning.com
sslvpn.cambiumlearning.com
*.cambiumlearning.com
mail.cambiumlearning.com
sslvpn.cambiumlearning.com
qa.kws.cambiumlearning.com
zabbix.tx.cambiumlearning.com
unanet.cambiumlearning.com
unanet.cambiumlearning.com
sso.cambiumlearning.com
as2.cambiumlearning.com
lab.ingenius.cambiumlearning.com
edi.cambiumlearning.com
email.cambiumlearning.com
store.cambiumlearning.com
pre.edi.cambiumlearning.com
txucmraexpe.cambiumlearning.com
zabbix.tx.cambiumlearning.com
backup.cambiumlearning.com
lab.ingenius.cambiumlearning.com
voip.cambiumlearning.com
micucmsub.cambiumlearning.com
vpntest.mi.cambiumlearning.com
store.cambiumlearning.com
*.cambiumlearning.com
store.cambiumlearning.com
support.cambiumlearning.com
store.cambiumlearning.com
vpntest.mi.cambiumlearning.com
*.cambiumlearning.com
sso.cambiumlearning.com
unanet.cambiumlearning.com
vpntest.mi.cambiumlearning.com
support.cambiumlearning.com
sslvpn.cambiumlearning.com
mail.cambiumlearning.com
support.cambiumlearning.com
micucmsub.cambiumlearning.com
*.cambiumlearning.com
Unity.cambiumlearning.com
ingenius.cambiumlearning.com
mail.cambiumlearning.com
mail.cambiumlearning.com
as2.cambiumlearning.com
unanet.cambiumlearning.com
txucmraexpe.cambiumlearning.com

Certificate

The complete raw certificate details for ingenius.cambiumlearning.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CHKOEJnjiVsspBwa6T2
rdJ4I/+bOF4jFLar8RDqZGio45KDthNbrFrVZanvoOvhNTw17P7dfPDqKZ0Hz9Jp
OC+4HSd2bbAc0DhSAEgf9UN/nV90FLmIBZ1i0XT1bEL4AcKaFPu+2AwiLmieJSxS
6wj0BDCnt4piBTvjXqynEzaf4+auiPo5HKslCS04eCl8jTNYAXCgBnGbsJyg7651
L2+s6W3cRxytygAEjPtQJ5DygLSlrmhhbyGXaI8rHKo6XTXTR31sAh18sIQ4Utyd
sO5KMPzKnsLojsgx+6gQUu8BB8J+poqQzWEeIPbCzEEUpJxIEbbNwiVuRz8PeZGT
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 237217405279645503304700227177228560560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-04 17:52:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 18:22:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambium Learning Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ingenius.cambiumlearning.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28294042743434986773219153182259531281924765600309391887893303326259251053265420960105944260552794535343382350733911139273968645643750718782571067925945000054004890442523336121783505795218847571126563777053428351437472167133205160566750992189954767288133821833694810892753850546212445997915445537927830639071039859968724133644457376096001166149871236238735294163984131430226954674722047678031826014866078682687441573273072645933788548051923320155180624635117476675145674758829846126089720101544039328637825237970530680538432602983762033774498385428444385445537089223376187980969420343820939069955652477086261283230527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingenius.cambiumlearning.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							391e3aa5a5610ad3eea17dc8e4b354c5a56f35f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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