wo.cristin-test.uio.no

- Universitetet i Oslo -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 01:9a:d5:16:d0:28:2f:92:d4:4b:13:de:0d:39:34:05 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitetet i Oslo

Organization: Universitetet i Oslo
Locality: Oslo
Country: NO

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9a:d5:16:d0:28:2f:92:d4:4b:13:de:0d:39:34:05
Serial Number (int): 2133163672685896182684262817852896261
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 73:de:8b:e7:6a:8f:08:10:c9:8b:d8:2c:72:78:d0:40:7c:71:56:ba
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 30:b1:37:c3:ac:be:d3:d7:ef:e3:5f:c1:25:5f:ec:dc:81:d3:27:00
Fingerprint (sha256): 01:8c:27:80:c7:c7:7c:19:a3:8e:54:4b:30:02:8e:14:81:42:e8:05:09:5b:0d:af:c7:8e:b3:a2:89:e4:6b:56

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate wo.cristin-test.uio.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wo.cristin-test.uio.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wo.cristin-test.uio.no

Other certificates including the domain name uio.no

(limited to 100 certificates)
devilry-test.ifi.uio.no
mag.uio.no
www.nhm.uio.no
csmn.uio.no
vortex12-failover01.uio.no
khm.uio.no
ora-cc-test.uio.no
intra.houston.uio.no
skjema.uio.no
rt-historisk.uio.no
ub.uio.no
www.childwatch.uio.no
es-aded-dev.uio.no
wo.uio.no
statsvitenskap.uio.no
www-dav.ub.uio.no
nyweb10.uio.no
dissco.uio.no
childhoods2005.uio.no
www-dav.khm.uio.no
nivlheim.uio.no
www-dav.hf.uio.no
rapport.uio.no
molar.uio.no
vidyo-gateway2.uio.no
stig.hf.uio.no
www.kjemi.uio.no
wo.cristin-test.uio.no
www.terminologi.no
rt-utv-03.uio.no
www-dav.studentparlamentet.uio.no
ceph-lb.uio.no
ceres-fs.logs.uio.no
psi.uio.no
dbpg-musit-utv01.uio.no
nyweb5.uio.no
sms-test02.uio.no
old-studweb.uio.no
mattermost-test.uio.no
*.okd-esx-test-apps.uio.no
admin.uio.no
www.vidyo-replay3.uio.no
echo.usit.uio.no
www-adm.sensorportalen.uio.no
hyperbrowser.uio.no
dbpg-manifoldcf01.uio.no
extest.uio.no
*.api.test.iaas.uio.no
wapp-jenkins01.uio.no
www-dav.personvern.uio.no
vortex-dev9-dav.uio.no
wo.uio.no
w3prod-so02.uio.no
jira-test.usit.uio.no
dbpg-so-prod.uio.no
wo.uio.no
vortex10-node01.uio.no
in2000-frostproxy.ifi.uio.no
mail.uio.no
api.cristin-demo.uio.no
www-dav.sustain.uio.no
www-dav.tf.uio.no
vortex05-node01.uio.no
dna.uio.no
tannkart.uio.no
vortex-ng.uio.no
alumnus.uio.no
www-dav.sv-forskerkurs.uio.no
vortex02-node02.uio.no
vra-test01.uio.no
w3test-wo01.uio.no
vortex-dev2.uio.no
vortex03-failover01.uio.no
vortex-dev10-dav.uio.no
nivlheim.uio.no
fourms.uio.no
extest.uio.no
utskrift.uio.no
plantid.uio.no
www-dav.unirand.uio.no
vortex-dev5-dav.uio.no
in2000-frostproxy.ifi.uio.no
childwatch.uio.no
programvare-test.uio.no
radius-otp02.uio.no
www.muspro.uio.no
www.uhit.no
uhskypepool01.uhad.no
github.uio.no
rt-utv-olemsv.uio.no
nofsa.uio.no
vortex11-node02.uio.no
www-dav.hisp.uio.no
fs.usit.uio.no
wiki-test.uio.no
www-dav.rf.uio.no
testunibind2021.uio.no
merg.uio.no
nyweb3-dav.uio.no
vrtx.uio.no

Certificate

The complete raw certificate details for wo.cristin-test.uio.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Ex1YnNHFZyZRRng2ej
9efE1h1+8zx9SXTmo7Y6X+6Btat9GREr/x+674Kzo/4tCWBQQ/+1GWja7aQZATJH
RYIqZmLgar4MrF02wZvaMywUa31T7ahAtuLh6rYHJ4PLIzsALF12geBCqUrC8pto
zYLgJ6DQthwEeQuRjkXCWG2opsioeZestdOnmlVwIQ/1lAcqhw8JsoJjx8McQshr
a6wbDhbfOG6mf9ZkLQ53O9u2yCgWl+fIGGGIvEutbBXI3PPdh6G3aAOazXvDNIlL
B6mSakFEGtiPB9+t+XY0aGiQLjPjgOTPEQsHg8eg568r5/HEmpR/w8lXc4DSZC8a
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2133163672685896182684262817852896261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitetet i Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wo.cristin-test.uio.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21121835510697343543737994861106509152966901427320509146488385912504995452164903034083870521973062658613912898893309535950415342104870195365470379311825903521186652955727296490793883839523005309682829470009932582748371404200990410093703767959333922097969244269560965993362193399488966775347045814998050980062159041540066617444127689057216536924283873324979308719409894208734197688632397999054411167571175866695278199606268183477342742538498596919867275950424933131709414247464735062185007519581508166827711536259864548545008978436379625783538799818286626316477681658335239994884210660716924610423468403985102834440749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73de8be76a8f0810c98bd82c7278d0407c7156ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wo.cristin-test.uio.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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