oasis.lindenwood.edu

- Lindenwood University -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:a7:0d:6d:12:f1:f0:85:9d:69:8f:49:92:c1:21:b2 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lindenwood University

Organization: Lindenwood University
State / Province: Missouri
Locality: Saint Charles
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:a7:0d:6d:12:f1:f0:85:9d:69:8f:49:92:c1:21:b2
Serial Number (int): 19476577829421917093173142810500604338
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 34:16:24:7f:1a:7c:84:86:f0:92:47:55:5e:96:bf:6a:99:8f:a0:b1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 90:c3:1c:71:3c:c1:4f:29:f3:8e:8c:a6:21:a0:f2:37:ef:04:b3:e2
Fingerprint (sha256): 1c:63:83:94:d7:d4:d8:11:27:71:71:68:b3:f6:35:d2:6f:d7:00:d6:ef:8c:6f:cd:ef:1b:e6:af:8c:51:99:26

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate oasis.lindenwood.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oasis.lindenwood.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oasis.lindenwood.edu
www.oasis.lindenwood.edu

Other certificates including the domain name lindenwood.edu

(limited to 100 certificates)
luvpn.lindenwood.edu
digitalcommons.lindenwood.edu
mylu.lindenwood.edu
*.lindenwood.edu
shoppe.lindenwood.edu
www.lindenwood.edu
admin.archives.lindenwood.edu
lindenconnect.lindenwood.edu
landing.online.lindenwood.edu
oasis.lindenwood.edu
digitalcommons.lindenwood.edu
*.lindenwood.edu
pccommon.lindenwood.edu
admin.archives.lindenwood.edu
live-web-lin1.edu.help
admin.archives.lindenwood.edu
felix.lindenwood.edu
*.ezproxy.lindenwood.edu
adfs.lindenwood.edu
admin.archives.lindenwood.edu
www.lindenwood.edu
mylu.lindenwood.edu
*.lindenwood.edu
digitalcommons.lindenwood.edu
training.lindenwood.edu
digitalcommons.lindenwood.edu
*.lindenwood.edu
lu-sccldaps01.lindenwood.edu
online.lindenwood.edu
luvpn.lindenwood.edu
*.lindenwood.edu
lu-sccwebsvc01.lindenwood.edu
digitalcommons.lindenwood.edu
www.lindenwood.edu
admin.archives.lindenwood.edu
lindenconnect.lindenwood.edu
*.lindenwood.edu
luvpn.lindenwood.edu
luvpn.lindenwood.edu
landing.online.lindenwood.edu
online.lindenwood.edu
landing.online.lindenwood.edu
LUACSSVR001.LINDENWOOD.EDU
portal.lindenwood.edu
training.lindenwood.edu
slate.lindenwood.edu
vpn.lindenwood.edu
*.lindenwood.edu
apps.lindenwood.edu
*.lindenwood.edu
online.lindenwood.edu
training.lindenwood.edu
online.lindenwood.edu
admin.archives.lindenwood.edu
admin.archives.lindenwood.edu
ezproxy.lindenwood.edu

Certificate

The complete raw certificate details for oasis.lindenwood.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19476577829421917093173142810500604338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Charles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lindenwood University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oasis.lindenwood.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 621848021073858292367434634320960659308223623342236465914247765363456030850955119277374454405348900915753376959281968773866103226901489416505879065261460450672892591842283078294995967875034857124053584456123825400137996616533649329527257110712226461024123401109686481840179047113614794090133958547618479574785376472121094456368014227907607661171653820260150969140574972309193390101026148917468644455418645556986095696388677722374268699015683689049442768105777983208331956117062612402723903363991553736941988119268979273266647791601168247054454179699548174306734202480199365678190788320568090295293627672213109626377484900451980617601461827181463179295651497226867039933611829009542169822115972593300942277015486129077015954468102042402238182141071422975355222952526442689899921616071341034672701617162386783614210885579334458510783742195396225928267784001966117222128632058260097442565064011672154877338826540650816456163295574562002402840691738402267358854718164742254765194683498955564929177510723702169488576451051306394452383439305620155370503985887494333452874839482399350959471170352795911001087457248347802730029115663664169750452445023487362059750984995288353814522307670052358426551581818652920540607751662053344168883608029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3416247f1a7c8486f09247555e96bf6a998fa0b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasis.lindenwood.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oasis.lindenwood.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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