fsi-vpn.campusfc.unibo.it

- ALMA MATER STUDIORUM - Università di Bologna -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0e:49:ef:c2:fe:8d:ac:df:aa:93:3f:97:15:b3:81:36 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ALMA MATER STUDIORUM - Università di Bologna

Organization: ALMA MATER STUDIORUM - Università di Bologna
Organization unit: CeSIA
State / Province: emilia romagna
Locality: Bologna
Country: IT

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:49:ef:c2:fe:8d:ac:df:aa:93:3f:97:15:b3:81:36
Serial Number (int): 18993092556601132562186371528637251894
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 45:54:46:8d:a3:70:d6:b8:45:bc:c4:ed:e5:40:e4:a7:25:1c:91:05
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 5b:61:e2:7d:66:75:e7:51:eb:ef:74:aa:5f:69:de:5a:f9:1b:e3:1d
Fingerprint (sha256): 03:02:fd:e1:5f:25:08:fe:95:93:00:44:17:8f:c5:bd:61:d5:3a:da:06:df:07:5c:10:23:d6:8f:40:87:52:b6

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate fsi-vpn.campusfc.unibo.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fsi-vpn.campusfc.unibo.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fsi-vpn.campusfc.unibo.it

Other certificates including the domain name unibo.it

(limited to 100 certificates)
intranet.cirsfid.unibo.it
www.virtlab.unibo.it
mail.sslmit.unibo.it
sol.unibo.it
tirocini.sslmit.unibo.it
projects.dharc.unibo.it
moodle2.bbs.unibo.it
gemma.dm.unibo.it
mail.sslmit.unibo.it
rehab.cs.unibo.it
cirsfid-web.cirsfid.unibo.it
rehab.cs.unibo.it
biocomp.unibo.it
uniboinlaurea.unibo.it
italmontaggi.com
smtpauth.almaweb.unibo.it
cs.unibo.it
wacky.sslmit.unibo.it
ulisse.unibo.it
ordini.bbs.unibo.it
gitlab.students.cs.unibo.it
idptest.unibo.it
economia.ei.unibo.it
rsddm.dm.unibo.it
projects.difa.unibo.it
ssl.cs.unibo.it
i2-ve139.ingce.unibo.it
calma.unibo.it
fsi-vpn.campusfc.unibo.it
dipsa.unibo.it
idp.unibo.it
ngs-ptl.unibo.it
wacoma.unibo.it
muwo1.unibo.it
wacoma.unibo.it
journals-staging.unibo.it
wacoma.unibo.it
fsi-applicativi.campusfc.unibo.it
tester.dm.unibo.it
uniboinlaurea.unibo.it
archiviostoricoastronomia.unibo.it
aif.difa.unibo.it
www.siam-is18.dm.unibo.it
projects.dharc.unibo.it
journals-test.unibo.it
www.siam-is18.dm.unibo.it
tw.cs.unibo.it
hippy.ing.unibo.it
tester.dm.unibo.it
agora.unibo.it
etabeta.ing.unibo.it
apps.difa.unibo.it
vdesktop1.unibo.it
i2-ve139.ingce.unibo.it
biocomp.unibo.it
www.bbs.unibo.it
athenamusica.dar.unibo.it
solaps.cib.unibo.it
micrel-web-services.dei.unibo.it
moodle2.bbs.unibo.it
gbm.difa.unibo.it
www.siam-is18.dm.unibo.it
wor.dar.unibo.it
aif.difa.unibo.it
vision.disi.unibo.it
cs.unibo.it
icinga.unibo.it
internal.crm.unibo.it
athenamusica.dar.unibo.it
moodle.sslmit.unibo.it
bilo.sslmit.unibo.it
i2-ve139.ingce.unibo.it
archiviostoricoastronomia.unibo.it
cle2.unibo.it
www.sincem.unibo.it
lists.cs.unibo.it
campus.cib.unibo.it
shib.unibo.it
csi-vpn.campusfc.unibo.it
zonemoda.unibo.it
archiviostoricoastronomia.unibo.it
globalmba-infokit.bbs.unibo.it
wacoma.unibo.it
ssl.cs.unibo.it
oraliter.sslmit.unibo.it
wacoma.unibo.it
motorsport.unibo.it
aif.difa.unibo.it
oval.edu.unibo.it
home.sslmit.unibo.it
dropbox.ing.unibo.it
uniboimmagine.unibo.it
celebrity.dar.unibo.it
vpn.unibo.it
journals-staging.unibo.it
toth.sslmit.unibo.it
aif.difa.unibo.it
proxyssl.unibo.it
bugx.ing.unibo.it
rpr.aric.unibo.it

Certificate

The complete raw certificate details for fsi-vpn.campusfc.unibo.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K+mr6UhLS92ABzzkN+4
fm6V5NME0H8NpBnXuqe1KbZ4jKjR43LoJsHfr8+F62fD8eaY2TeWRNNsRd8HylJr
mkcpedmwIj+yoU6kYzujy9iiTbEqpfyxWB3wGrdNmoO4JqvsbtU67/bqOqLIK0Gg
VDY+L/UEiE5JvZr2hyoF6aG3DVDxLOudYzWoX793DUe80QpbxZfdH30SVgu70KmV
B3oml6/VMVRnncjW4jO4+7WsGYvVvGYmrBM9JrARhDVERELC0aYymzpjLtK8gxlC
OmCpo9Rl0cOF4j3pBfpOuNOaxpdzwT5CDV8poKpkE9uL9zhAtGQy66Kj8PqEh0U3
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18993092556601132562186371528637251894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'emilia romagna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ALMA MATER STUDIORUM - Università di Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CeSIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsi-vpn.campusfc.unibo.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27354090667024435045063167269255712883655172885665444445883238254636159100819496303100156633760587322228813226870011585501896899709128865515663290774993170499991781408714490015572791566376567503471452667563413999182040563491807115880625328065006421086549658135570336577723665385269397170976002049958586139025614932988264091428389004202163143414896813111676311689836065254652705966589644072393790734520163513947714904787525729989012837298902785787347660091487449198923914586117928869359381355406302174273447898586750725604881027584714234784054348156862505934876886871731851810574358019592403853386939261071026727237547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4554468da370d6b845bcc4ede540e4a7251c9105
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsi-vpn.campusfc.unibo.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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