*.uni.edu

- University of Northern Iowa -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:80:88:96:c7:38:e5:43:3d:cf:8b:25:a9:97:c9:1d was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Northern Iowa

Organization: University of Northern Iowa
State / Province: Iowa
Locality: Cedar Falls
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:80:88:96:c7:38:e5:43:3d:cf:8b:25:a9:97:c9:1d
Serial Number (int): 15288892305113305767878526598668339485
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d5:cc:3b:1e:39:1a:af:1a:18:79:31:e4:a1:d5:11:80:b8:69:ec:64
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): fe:b2:94:86:4a:cf:65:89:76:18:49:81:d8:4a:2f:b7:37:10:9a:05
Fingerprint (sha256): 0c:52:e6:13:ab:4e:31:2c:f0:ce:37:33:ad:5c:81:3b:96:43:09:7a:be:a6:db:a2:dd:f2:78:21:2b:a1:d2:38

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.uni.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.uni.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.uni.edu
uni.edu
ss-pw-titanium1.sde.uni.edu

Other certificates including the domain name uni.edu

(limited to 100 certificates)
*.uni.edu
scalefunder.net
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
askus.library.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
scalefunder.net
scalefunder.net
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
smtp-relay.uni.edu
*.uni.edu
*.uni.edu
advanceiowa.com
*.uni.edu
pls-fmpdb.pls.uni.edu
*.uni.edu
askus.library.uni.edu
scalefunder.net
scalefunder.net
*.uni.edu
*.proxy.lib.uni.edu
scalefunder.net
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
lovelace.it-nis.uni.edu
*.uni.edu
catalog.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
pls-fmpdb.pls.uni.edu
scholarworks.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
scalefunder.net
uni.edu
servicehub.uni.edu
www.ir.uni.edu
*.uni.edu
*.uni.edu
scalefunder.net
*.uni.edu
*.uni.edu
catalog.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
scalefunder.net
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
scalefunder.net
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
askus.library.uni.edu
*.uni.edu
advanceiowa.com
scalefunder.net
*.uni.edu
scholarworks.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
*.uni.edu
mail.collab.uni.edu
*.uni.edu

Certificate

The complete raw certificate details for *.uni.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15288892305113305767878526598668339485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cedar Falls'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Northern Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uni.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816165243028712325877056827085747456277197423360084758349824394100725395285323504842177207796037790482520253844261900543401265489842867044928351888328856168135906549150298363371125752652111226063003967350901227092159762832018635140734419597842475656293403969496252811028852374711882698259113447122407366350317651450277823631323674136673692338664148696480353955964836930399178464421249670518552934068711653555482703071815833998167615954085118944852076625515171768524233106174529100157466275148130034672188287864923697177606916425335597720555057559449307181188045428334801487550012752822191071935439463595957268010938838269056740964267864902954790755184093365367071177429180574199564575438173662397682577372642719407135318126015586282330945591211960289835466246123422420939648955452453984962476893790460500767012579052623625700736508913648584649425311955514714596383398441113446228521021298046857662021442054048669444942278360692593975337906964519978581663475204937708977291733210649510329334093429122193415566985477366901685256056341721647458691752603150859066666189938494290185189026622756540694476958889607314636462920505061600676595648902676216480151261348250904558026006651768473051440297873204142170928856913428602224805885273429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5cc3b1e391aaf1a187931e4a1d51180b869ec64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uni.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss-pw-titanium1.sde.uni.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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