service.uvm.dk

- Undervisningsministeriet -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 06:df:46:0f:f5:42:22:f9:67:e1:4e:d0:bf:60:80:53 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Undervisningsministeriet

Organization: Undervisningsministeriet
State / Province: Danmark
Locality: København K
Country: DK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:df:46:0f:f5:42:22:f9:67:e1:4e:d0:bf:60:80:53
Serial Number (int): 9134671207161236800989033252702421075
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 16:23:b5:3b:de:bf:60:8e:10:d9:c0:91:dd:b3:d2:37:b0:52:34:f2
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 04:16:ed:13:ba:df:57:29:7c:d9:d9:03:a5:18:cb:b2:21:a9:8d:20
Fingerprint (sha256): 2d:39:5e:69:50:35:c4:73:06:fd:a4:77:7c:86:b4:35:eb:cd:a4:d2:7e:d1:a2:58:51:41:46:35:0d:3a:c7:a1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for certificate service.uvm.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for service.uvm.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

service.uvm.dk

Other certificates including the domain name uvm.dk

(limited to 100 certificates)
lyncwebext.statens-it.dk
lyncwebext.statens-it.dk
mail.statens-it.dk
lyncwebext.statens-it.dk
uvm.dk
mail.statens-it.dk
uvm.dk
webmeet.statens-it.dk
www.service.uvm.dk
lyncwebext.statens-it.dk
lyncwebext.statens-it.dk
lyncwebext.statens-it.dk
xprstest.uvm.dk
uvm.dk
webmeet.statens-it.dk
vpn.uvm.dk
service.uvm.dk
mail.statens-it.dk
service.uvm.dk
lyncwebext.statens-it.dk
webmeet.statens-it.dk
mail.statens-it.dk
webmeet.statens-it.dk
mail.statens-it.dk
indberetninger.uvm.dk
lyncwebext.statens-it.dk
webmeet.statens-it.dk
mail.statens-it.dk
xprstest.uvm.dk
mail.statens-it.dk
uvm.dk
webmeet.statens-it.dk
service.uvm.dk
lyncwebext.statens-it.dk
prod.dkal.uvm.dk
webmeet.statens-it.dk
eng.uvm.dk
mail.statens-it.dk
*.uvm.dk
mail.statens-it.dk
traveler.uvm.dk
www.uvm.dk
lyncwebext.statens-it.dk
lyncwebext.statens-it.dk
xprs.uvm.dk
webmeet.statens-it.dk
qa.uvm.dk
webmeet.statens-it.dk
webmeet.statens-it.dk
uvm.dk
test.dkal.uvm.dk
*.uvm.dk
mail.statens-it.dk
mail.statens-it.dk
mail.statens-it.dk
service.uvm.dk
www.uvm.dk
webmeet.statens-it.dk
lyncwebext.statens-it.dk
service.uvm.dk
mail.statens-it.dk
mail.statens-it.dk
webmeet.statens-it.dk
webmeet.statens-it.dk
lyncwebext.statens-it.dk
lyncwebext.statens-it.dk
webmeet.statens-it.dk
xprs.uvm.dk
lyncwebext.statens-it.dk
lyncwebext.statens-it.dk
mail.statens-it.dk
webmeet.statens-it.dk
webmeet.statens-it.dk
uvm.dk
lyncwebext.statens-it.dk
www.uvm.dk
qa-eng.uvm.dk
lyncwebext.statens-it.dk
qa-trivselskommissionen.uvm.dk
lyncwebext.statens-it.dk
lyncwebext.statens-it.dk
lyncwebext.statens-it.dk
webmail.uvm.dk
mail.statens-it.dk
webmeet.statens-it.dk
eng.uvm.dk
mail.statens-it.dk
webmeet.statens-it.dk
mail.statens-it.dk
mail.statens-it.dk
webmeet.statens-it.dk
mail.statens-it.dk
quickr.uvm.dk
lyncwebext.statens-it.dk
uvm.dk
mail.statens-it.dk
prod.dkal.stil.dk
webmeet.statens-it.dk
mail.statens-it.dk
webmeet.statens-it.dk

Certificate

The complete raw certificate details for service.uvm.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+yNwFgriDmJ2TqJUjQzw
X3Epurwg47+jo2il7koaP0IhPN02iu6rKEIJsyk8pSXhq2BTmQT6TyTWzml8CHfF
QSWM1ExUdFqky2u7fk8qpUTpW0+SUdm2x80TUmNM7kc3g9rdHeVT2xV5AqNJDBCM
qOA/40yJqP2hCFkYW7DCvIog3WGSd4/Z9RZXXwWzAmJ1jxfJM9qGTZhaNdGhfo91
htHhg7bnwwls5igvFhpJ4HKL5B4wBAjNuxYOaawfPQUHRMuS/+FTJSZSBMVYO7t8
FQFR5kV+j3n5k7QIY81SPsrmqaYU763ItVN7V23ZJR+uItEuNMjgBFYAQgBO93Wr
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9134671207161236800989033252702421075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Danmark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'København K'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Undervisningsministeriet'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'service.uvm.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31703289594884946798852431665057492978543609685572434443829156717869045054946879884997337756466166941032619707970975658019544365365453208781866110072226433778382855607512006419488499252760056479675583509360778336964882367705958184018016482083047509671611897393424695496497221015988875137602573220399047919700462624039009333669923317647812738781667426888606556917064131054157275532126456789927616981255928305336833155151486434456398722993870761169685001992107692186021939681337308599215855402195108399040173748752199338411994675280827691721808785961000897271398467630907962536085808906817536242519051899375480823196501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1623b53bdebf608e10d9c091ddb3d237b05234f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.uvm.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f2793b12bbd75890b60da954ff12daa3bcbbbe49ea0c0c15d12c156560f44f4a5d7faffb51b7c4325b7d863aa4de83cfa8040f0bdc7dacbfbfe519dd17f81a40546cdca4676a3446f31679719189168342464396de78ac4b1f3db11bc204aa9f7f854d14940d433d5bac7ca3fba442e71811d8fdd66a4092ceaeaa3e927f69352bbd0d57e6c2ff2ca279b8ab23241161370f18f1d5aff3ca0770ed405138db5399766345b76fe6228baa65e5619457e01ab6d2370a28b00efa2f5ea44bb0f355b54bc291b140855dd5b063771df4fdd2f36edf6255428f4f6d88b111f0fdd7ff5b4319df928c03c706a2aaa59c1b83c1575906a6eeb1bb86eedbb0d84582f4c