*.aurora.edu

- Aurora University -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:65:82:dd:f3:bd:3a:64:70:87:6e:2a:26:7e:0a:c6 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Aurora University

Organization: Aurora University
State / Province: Illinois
Locality: Aurora
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:65:82:dd:f3:bd:3a:64:70:87:6e:2a:26:7e:0a:c6
Serial Number (int): 17807040226021934424337794434712079046
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 59:dd:45:ed:9f:f5:90:88:20:cc:51:08:d3:a8:19:53:ed:f7:66:3a
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 7f:3d:e4:6c:f4:98:cb:26:09:8e:54:ee:cd:ec:f9:3e:5a:c8:04:92
Fingerprint (sha256): 2b:2b:46:3f:12:a7:2a:d6:95:13:4f:da:0f:7a:97:e0:a8:d3:c2:d6:46:a1:aa:41:f5:90:80:10:bc:24:1a:09

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.aurora.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aurora.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aurora.edu
aurora.edu

Other certificates including the domain name aurora.edu

(limited to 100 certificates)
securedns2.planmygift.org
cluster.technolutions.net
athletics.aurora.edu
libguides.aurora.edu
aurora.olc.learninghouse.com
athletics.aurora.edu
cluster.technolutions.net
securedns2.planmygift.org
cluster.technolutions.net
cluster.technolutions.net
*.aurora.edu
*.aurora.edu
cluster.technolutions.net
athletics.aurora.edu
*.aurora.edu
athletics.aurora.edu
cluster.technolutions.net
applynow.aurora.edu
cluster.technolutions.net
libguides.aurora.edu
cluster.technolutions.net
securedns2.planmygift.org
cluster.technolutions.net
*.aurora.edu
securedns2.planmygift.org
info.online.aurora.edu
technolutions.com
cluster.technolutions.net
cluster.technolutions.net
cluster.technolutions.net
cluster.technolutions.net
athletics.aurora.edu
*.aurora.edu
wa3.aurora.edu
athletics.aurora.edu
applynow.aurora.edu
cluster.technolutions.net
*.aurora.edu
securedns2.planmygift.org
cluster.technolutions.net
cluster.technolutions.net
athletics.aurora.edu
*.aurora.edu
nps2.aurora.edu
*.aurora.edu
cluster.technolutions.net
degrees.aurora.edu
cluster.technolutions.net
cluster.technolutions.net
www.aurora.edu
*.aurora.edu
*.aurora.edu
nps1.aurora.edu
cluster.technolutions.net
alumni.aurora.edu
applynow.aurora.edu
alumni.aurora.edu
*.au.aurora.edu
cluster.technolutions.net
*.aurora.edu
securedns2.planmygift.org
cluster.technolutions.net
*.aurora.edu
*.aurora.edu
cluster.technolutions.net
athletics.aurora.edu
securedns2.planmygift.org
online.aurora.edu
cluster.technolutions.net
degrees.aurora.edu
libguides.aurora.edu
cluster.technolutions.net
*.library.aurora.edu
cluster.technolutions.net
*.aurora.edu
*.aurora.edu
cluster.technolutions.net
applynow.aurora.edu
securedns2.planmygift.org
libguides.aurora.edu
securedns2.planmygift.org
securedns2.planmygift.org
securedns2.planmygift.org
*.aurora.edu
*.aurora.edu
athletics.aurora.edu
www.aurora.edu
athletics.aurora.edu
*.aurora.edu
securedns2.planmygift.org
cluster.technolutions.net
securedns2.planmygift.org
*.aurora.edu
libguides.aurora.edu
*.aurora.edu
cluster.technolutions.net
cluster.technolutions.net
cluster.technolutions.net
alumni.aurora.edu
alumni.aurora.edu

Certificate

The complete raw certificate details for *.aurora.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvwdaAWudUSxikIOrOhM
zB5ss24l4Kyn3mz6s6izd9DFpBjrtqWH1XN2P7nYm0Kb2GAJCZZpsvh+FnDZysXn
X8kVdDhVq5vI0LB+kLmYMCrZMYgxHcd/VOkvfnReIG/aVCWvw+wD6s1ImtiKcLs4
k3/sEMiJb4Dp1xBNAeKLEJs34cGqSkoZtLhjWB6yWQPzsJ2S8iUdirXFGnHQql5b
xX0QrSwox7Fyjcmb8miEx4m472Ed7gMFbdkSk9tcL6D6iYM5uhYcnwl58r7p5rCe
FklxuFbuwPQ72x9pVihmDz/F5Ax+gLImjNmYvXFYsqeJzScoagJ8spH8SXRY9kSC
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17807040226021934424337794434712079046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aurora'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aurora University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aurora.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25624460078364631658654412793790081930034311930715062869555289849410424383320791522521694200236315118741635643935355898388982511296131768020881320865700103998837359920791463241246746919129431977004810304999315923074695827474565739847766909327565638187469589477907237169343076288088202013218725817060551643955060429224870245795721925266039179430461925756265457392178306936379930304054466511145430483910742711348287203982618408118673816707268079372974741650660720613310617475885212545775651306755838869758970778501016973244793499257155316493209642558019526738136021819287975287153914111195458505746917845456380315861667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59dd45ed9ff5908820cc5108d3a81953edf7663a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurora.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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