qlik.dev.dai.wiley.com

- John Wiley & Sons, Inc -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:de:8f:cb:f4:f3:87:7b:a8:30:78:20:8c:92:d6:6b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

John Wiley & Sons, Inc

Organization: John Wiley & Sons, Inc
State / Province: New Jersey
Locality: Hoboken
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:de:8f:cb:f4:f3:87:7b:a8:30:78:20:8c:92:d6:6b
Serial Number (int): 7801746425218374853702540237970003563
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a1:3d:67:0a:21:ed:b1:63:58:a0:c3:9d:f4:96:0f:34:3b:d9:8d:72
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ba:62:7f:f3:a4:a1:ee:24:89:7a:9b:d8:ef:be:b5:c1:ac:b5:27:b6
Fingerprint (sha256): 06:c3:97:17:f9:41:c2:a8:ae:13:36:0f:0e:d2:64:07:56:6d:01:23:12:98:39:29:aa:83:b5:24:86:a1:dd:f6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate qlik.dev.dai.wiley.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qlik.dev.dai.wiley.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qlik.dev.dai.wiley.com

Other certificates including the domain name wiley.com

(limited to 100 certificates)
clinfx.wiley.com
videoresourcecenter.wiley.com
*.onlinelibrary.wiley.com
sni.cloudflaressl.com
cn.onlinelibrary.wiley.com
submissionhelp.wiley.com
sni.cloudflaressl.com
edservices.wiley.com
*.hybris.wiley.com
sni.cloudflaressl.com
sni.cloudflaressl.com
qap.api.wiley.com
mmsc.mobiledatacloud.wiley.com
accp1.onlinelibrary.wiley.com
drummond.createaplate.wiley.com
prod.22.slot.cdn.salesforce-communities.com
bookseller.wiley.com
integration.wiley.com
thewire.wiley.com
leopsoriasis.eprints.wiley.com
wileyglobalfinance.wiley.com
iubmb.onlinelibrary.wiley.com
preview.onlinelibrary.wiley.com
rmets.onlinelibrary.wiley.com
professor.wiley.com
insights.wiley.com
catalog-dev.wiley.com
test-sp.onlinelibrary.wiley.com
gianteagle.wiley.com
onlinelibrary.wiley.com
*.stage.edpub.wiley.com
www.onlinelibrarystatic.wiley.com
jqagateway.wiley.com
was-dev.api.wiley.com
cms.wja.mobiledatacloud.wiley.com
professor.sg.wiley.com
prod.22.slot.cdn.salesforce-communities.com
dev.api.wiley.com
dev-qa.api.wiley.com
*.wiley.com
test-sp.onlinelibrary.wiley.com
alcatellucenttestbanks.wiley.com
sni.cloudflaressl.com
stage.api.wiley.com
*.onlinelibrary.wiley.com
sni.cloudflaressl.com
ltitools-dev.wiley.com
customer.wiley.com
uat.api.wiley.com
jup-esearchp-3.aus-aws.wiley.com
maple18-01.wiley.com
ctl.learninghouse.com
ehs.aws.wiley.com
was.api.wiley.com
customer.ca.wiley.com
qlik.dev.dai.wiley.com
sni.cloudflaressl.com
www.onlinelibrarystatic.wiley.com
prod.22.slot.cdn.salesforce-communities.com
onlinerenewals.wiley.com
sni.cloudflaressl.com
wolbookstore.wiley.com
corporatesolutions.wiley.com
ltitools-qa.wiley.com
corporatesolutions.wiley.com
sni.cloudflaressl.com
sap-snappay-prd.wiley.com
esajournals.onlinelibrary.wiley.com
insights.wiley.com
qap.api.wiley.com
stage.api.wiley.com
kafka-dev1.elk.wiley.com
sni.cloudflaressl.com
img.wiley.com
ltitools.wiley.com
www.wiley.com
wileyemailrenewal.wiley.com
onlinerenewals.wiley.com
dev-sit.api.wiley.com
rss.onlinelibrary.wiley.com
pphys.edugen.wiley.com
sni.cloudflaressl.com
jupiter-snow.wiley.com
catalogimages.wiley.com
professor.au.wiley.com
openaccessaccount.wiley.com
ordering.onlinelibrary.wiley.com
caeprep.wiley.com
sni.cloudflaressl.com
cid.wiley.com
sni.cloudflaressl.com
ehs.aws.wiley.com
nsoc-dev.wiley.com
pphys.edugen.wiley.com
*.nsoc-nprod.wiley.com
oauth.wiley.com
jlb.onlinelibrary.wiley.com
jira.wiley.com
alcatellucenttestbanks.wiley.com
ke.wiley.com

Certificate

The complete raw certificate details for qlik.dev.dai.wiley.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjEPTrkG1C9kO4cSww7F
HbsLpJivwds3G5KRxPu/sVxHogzPZsVgAGGoT7xJ1i/EVkvp86xSNC/qpSHPT3/B
TRhKenXEmicrPgf3aVunYx6DUhQXPTkmA7k2+78Nr/URk9c2QUjW7Yw1qb723O30
g9PWC1cxynpuRzIvCdTVVbSvcwW4FxT4616wCHGXFayXbDsF5iET4oDslapYJkxn
5RqIgQZxXTsVSWx2mQ7mGTU8cDSTTtrfLtUX4CXbS838uTAiB5onTtJ9YmzPE7N2
vJrINSX+XeGK34heZhFdsw/Cw3A5wrqo+f8xLSWJ4EyXAqNyIufj2JbCFVatxjCU
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7801746425218374853702540237970003563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hoboken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'John Wiley & Sons, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qlik.dev.dai.wiley.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25524329889699455954594493962024611418720063091863484695986996625476621113741449343703405046897051319278286526060596939899894320060400610305400869523190960413634714415928034117666371191554881342799487347500702677270754450565521095823626329811558949040650688060441060202266326996694092775833690074879380980187622916494452250878117624899041317838647293760246484195361690443778213880711824017255890926297795326498814923646070066010533465497542203256127622942536843343775918752510940217941358231581851059714325685019683192420553731123206043495976790034044063232924735090221129645716285758868977831086058284743846402233371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a13d670a21edb16358a0c39df4960f343bd98d72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qlik.dev.dai.wiley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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