fe0201.n2.lhp.nextuc.net

- NextUC -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 02:cd:14:50:d2:0b:6d:25:c8:84:ef:25:de:47:72:5f was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NextUC

Organization: NextUC
State / Province: Utah
Locality: South Jordan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:cd:14:50:d2:0b:6d:25:c8:84:ef:25:de:47:72:5f
Serial Number (int): 3723288899020211265635177618733494879
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2f:68:01:4b:dd:3d:eb:a9:c0:09:a2:aa:87:4a:bf:3a:1f:53:75:05
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): e1:fb:e0:ca:66:e3:d4:18:bf:fe:14:8e:e4:05:00:5e:fb:d4:4e:e6
Fingerprint (sha256): 25:bf:de:f4:0f:98:13:1f:e3:11:16:31:be:f3:cb:83:62:67:fb:da:c5:e1:6e:11:96:77:ab:1e:7c:31:84:6e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g29.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g29.crl

Check the revocation status for certificate fe0201.n2.lhp.nextuc.net

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fe0201.n2.lhp.nextuc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fe0201.n2.lhp.nextuc.net
Spool01.nextuc.net
dialin.nextuc.net
ucupdates-r2.nextuc.net
lync.nextuc.net
dpool01.nextuc.net
fews02.nextuc.net

Other certificates including the domain name nextuc.net

(limited to 100 certificates)
sip02.nextuc.net
fe0201.n2.lhp.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
fe0201.n2.lhp.nextuc.net
fe0201.n2.lhp.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sipfed.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
fe0201.n2.lhp.nextuc.net
sipfed.nextuc.net
sip01.nextuc.net
sipfed.nextuc.net
fe0101.n1.lhp.nextuc.net
sip01.nextuc.net
fe0101.n1.lhp.nextuc.net
sip01.nextuc.net
sip.nextuc.net
sipfed.nextuc.net
sip01.nextuc.net
fe0101.n1.lhp.nextuc.net
sip01.nextuc.net
sip01.nextuc.net
fe0201.n2.lhp.nextuc.net
sip01.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
fe0101.n1.lhp.nextuc.net
sip02.nextuc.net
sip01.nextuc.net
sip01.nextuc.net
sip.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip01.nextuc.net
sipfed.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip01.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip01.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip01.nextuc.net
sip.nextuc.net
sip01.nextuc.net
sip02.nextuc.net
sip01.nextuc.net
sip02.nextuc.net
sip01.nextuc.net
sip02.nextuc.net
sip01.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sipfed.nextuc.net
sipfed.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip02.nextuc.net
sip01.nextuc.net
sip01.nextuc.net
sip01.nextuc.net
sip02.nextuc.net
sipfed.nextuc.net

Certificate

The complete raw certificate details for fe0201.n2.lhp.nextuc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8bYJfQcJfuJS8VHjw1g
NrF7MABLv1Sp2XJ+PM+arv5y1xbd9PyKPLqkxwZpDYSy4PHqXM42yAavoacCElcv
GcozhjXMSmtnhPPCsJwMVpzldBxgCkGfiLU+vmeLwx720uSYo/b+BypSnHfAbUax
3qobadseRbm4CHJB/datxZvJoszkAqYLSdwdHM6mvw6YOyU2svn0FNuUWhAb2W7w
Qkj4ayJ22l/6NIaE+3asxEQSscS9Q+tDZMLvGsXng/Lb52bHjCCI9952Gqbxvb+A
SdJVcXZUJD4GXCNzRYWwbHbIrO2e0zA6sOiv29AE/NGhlF/D2CBBijRT6O7x0eBF
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3723288899020211265635177618733494879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Jordan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NextUC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fe0201.n2.lhp.nextuc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23199663601995324505863819350946190348643918667164821322155991315311681000565668214568125838646532956428165202508423834349365081239188272395505844721774988116910654954277117748197161959144391545682085126289851437994878454393131848708258280493525284794669029477281273899996581996645548558063671747425279047587453782940941571893770448549620282098508841588776633821779018852426791750194728988631094442866673709069137883762817769524276071294638360168498658506004986398419373383312995156749208035364096753029818932945224527006221904444886179418034580174022115222497574465089153639180830954932207793728921936830770110809473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f68014bdd3deba9c009a2aa874abf3a1f537505
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fe0201.n2.lhp.nextuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Spool01.nextuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.nextuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucupdates-r2.nextuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.nextuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpool01.nextuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fews02.nextuc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g29.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g29.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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