*.unifi.com

- Unifi, Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 01:bb:ca was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Unifi, Inc.

Company registration number: DX9SRvkL7Eze0AuazOVUieqB2OQ4eB6v
Organization: Unifi, Inc.
Organization unit: Internet Services
State / Province: North Carolina
Locality: Greensboro
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:bb:ca
Serial Number (int): 113610
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId: 22:74:c1:24:08:7c:94:43:71:a8:2b:c1:d1:ee:b0:4b:9c:a6:19:19
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): b7:dd:6b:e1:b0:93:40:13:0c:84:f6:b7:75:61:02:06:7f:5f:47:6c
Fingerprint (sha256): 69:6a:96:7b:41:d3:a0:92:61:6d:16:d5:e7:e2:2b:84:65:b5:73:b6:44:4a:6c:46:ba:22:a3:44:9b:c9:1d:92

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate *.unifi.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.unifi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.unifi.com
unifi.com

Other certificates including the domain name unifi.com

(limited to 100 certificates)
jobs.nodusearch.com
mail.unifi.com
careers.brevitasconsulting.com
leapfrog-ssl-57.gcs-web.com
careers.brevitasconsulting.com
leapfrog-ssl-57.gcs-web.com
jobs.nodusearch.com
careers.ironflametech.com
careers.brevitasconsulting.com
jobs.erecruiterafrica.com
careers.brevitasconsulting.com
*.unifi.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
leapfrog-ssl-57.gcs-web.com
careers.brevitasconsulting.com
jobs.nodusearch.com
careers.avancercorp.com
jobs.mforchange.org
unifi.com
jobs.nodusearch.com
*.unifi.com
jobs.directhireresource.com
careers.ommincorp.com
careers.ommincorp.com
work.hsbintel.com
career.walser-personal.at
careers.vendeur-afrique.com
careers.unifi.com
unifi.com
careers.avancercorp.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com

e-literature.unifi.com
jobs.nodusearch.com
*.unifi.com
careers.brevitasconsulting.com
jobs.nodusearch.com
careers.avancercorp.com
mail.unifi.com
careers.avancercorp.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.elearnio.com
unifi.com
careers.avancercorp.com
jobs.hackingworld.online
careers.brevitasconsulting.com
careers.brevitasconsulting.com
*.unifi.com
emploi.trylon.ca
careers.brevitasconsulting.com
careers.brevitasconsulting.com
jobs.4sightsolutions.ca
careers.4sightsolutions.ca
careers.brevitasconsulting.com
careers.vendeur-afrique.com
jobs.erecruiterafrica.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
jobs.nodusearch.com
jobs.pauliglesia.com
careers.brevitasconsulting.com
e-literature.unifi.com
e-literature.unifi.com
careers.avancercorp.com
leapfrog-ssl-57.gcs-web.com
*.unifi.com
careers.avancercorp.com
jobs.nodusearch.com
unifi.com
careers.brevitasconsulting.com
careers.avancercorp.com
careers.brevitasconsulting.com
careers.brevitasconsulting.com
careers.avancercorp.com
careers.cfabllc.com
careers.avancercorp.com
vagas.topworkrh.com.br
careers.brevitasconsulting.com
careers.vetjobsok.org
careers.avancercorp.com
recruit.imie.fr
*.unifi.com
unifi.com
jobs.simplesolutions.us
jobs.bgawe.info
careers.brevitasconsulting.com
recruit.imie.fr
leapfrog-ssl-57.gcs-web.com
jobs.nodusearch.com
careers.brevitasconsulting.com
e-literature.unifi.com
jobs.nodusearch.com
careers.brevitasconsulting.com

Certificate

The complete raw certificate details for *.unifi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTHfEljj6tUP+Zbwh8XU
/XprlYRcWYNgV57tOnLJCLx93NjNV3rjLVxkPyb9hGgo5LR3OFtqnX9/K8vgPUkF
j63wLsEr6iV4VAY/NRBh6sdhA7FUdfy41RX6Om+n8rinYcLr6TgcR+xiyUZp+seS
MnFwx+JDhY0GN/5iHzU0npNRA05owAkqvw+xJm0ePADl3QHeoQMIYkl0+jjf1jaH
DcSn8QVJlMXrfobZ9qbyicBEvULACOjxKI50AxHqM4E3x5BY0C9nHA+qwuU7jAFe
AFz7moHZUXUG0QaFCGjMNQiGlRnHs7U3JAc3R/w4c1GMaaANkKaBa1j9iDE9N0NB
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-07 16:25:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-10 21:17:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DX9SRvkL7Eze0AuazOVUieqB2OQ4eB6v'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greensboro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unifi, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.unifi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22873725689805964720871097072188077149266149357511958646854049212378717744989316649451503032448951771973753669622268338927495286891076377110877406798470095484501312658029810668749952986077631199451678602113289332214553165283908284602084912613893002246968408487452830105500537172964617154775687032503189087861013526753064727183713048255434141404966039621029891188744791003983578362822008014993679787862752523957085099990539007102804134649829537086250847409638385083133342757275189231117376900787835496809209200746408792798151801538498266250218885565155096610633080825857652181989145149368575335774368890869249281835409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2274c124087c944371a82bc1d1eeb04b9ca61919
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00480071e6601d0dde850aed9472e65cbed1794787a466a741278062ede98308f65489c48d4974f656477c5c1a686872b44797e4fd18b3fac7ab52f3bdbf97dd7433cc59c92baa18e97bef344b0f0c2b221b9d7d06389a3df70ca03906c904431ce94e1a8f9470ccf5f8768199b9d170b90804321a9f15eff1df2c2de3da85f524a22137fbdaa9fbd5337bbc8c886cb59f0562f95f949bfbe35da9683fe4543a0bc47073022566f25d0e15a79431823fcc352f6f4f1c5bada928079db643c8b16b136b996ba4b7be5ff2fa5c322353eb68bb45de12faa13e9592f7498efcbda677444fa5b1c9117b78febc04d7fbdffa933097e5e17f78e171772c794790157e49