login.uvation.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0f:d5:80:6e:60:04:53:b6:f0:74:5c:6b:56:3b:68:e0 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=login.uvation.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:d5:80:6e:60:04:53:b6:f0:74:5c:6b:56:3b:68:e0
Serial Number (int): 21046984060884592338505162152776263904
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bd:45:37:f7:8c:39:66:f7:37:73:87:92:f5:ff:bf:28:83:ff:55:28
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 85:59:d2:14:ad:22:15:ad:09:ec:59:d6:a8:20:da:ee:18:b4:bd:9a
Fingerprint (sha256): 81:e8:b7:41:89:ed:38:37:42:de:13:27:3d:a1:58:4c:d8:16:27:d2:d2:4d:00:4e:1f:44:ef:76:af:eb:a2:ab

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate login.uvation.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.uvation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.uvation.com

Other certificates including the domain name uvation.com

(limited to 100 certificates)
support.uvation.com
braveg.status.geoikt.no
support.uvation.com
servicestatus.uvation.com
xonode.uvation.com
dev.uvation.com
support.uvation.com
uvation.com
braveg.status.geoikt.no
support.uvation.com
whmcs.uvation.com
store.uvation.com
*.uvation.com
store.uvation.com
servicestatus.uvation.com
support.uvation.com
servicestatus.uvation.com
servicestatus.uvation.com
manage.uvation.com
yardleyshop.com
braveg.status.geoikt.no
support.uvation.com
servicestatus.uvation.com
braveg.status.geoikt.no
support.uvation.com
yardleyshop.com
braveg.status.geoikt.no
citymade.com
support.uvation.com
support.uvation.com
braveg.status.geoikt.no
store.uvation.com
magento.uvation.com
*.uvation.com
dev.uvation.com
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
login.uvation.com
servicestatus.uvation.com
store.uvation.com
servicestatus.uvation.com
braveg.status.geoikt.no
support.uvation.com
SIPFED.UVATION.COM
braveg.status.geoikt.no
braveg.status.geoikt.no
uvation.com
braveg.status.geoikt.no
servicestatus.uvation.com
sni.cloudflaressl.com
uvation.com
servicestatus.uvation.com
yardleyshop.com
adfs.uvation.com
support.uvation.com
uvation.com
uvation.com
support.uvation.com
braveg.status.geoikt.no
USPOOL.UVATION.COM
support.uvation.com
servicestatus.uvation.com
braveg.status.geoikt.no
braveg.status.geoikt.no
store.uvation.com
whmcs.uvation.com
dev.uvation.com
servicestatus.uvation.com
sni.cloudflaressl.com
support.uvation.com
support.uvation.com
*.uvation.com
marketplace.uvation.com
servicestatus.uvation.com
support.uvation.com
sni.cloudflaressl.com
servicestatus.uvation.com

Certificate

The complete raw certificate details for login.uvation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hgs+B7EcANZ+rFaL+aj
RxRE/5ld2THZCrzLY34b62vyrf2yt6Ea9jceKd8UOy2vwZ+heRVYbVkOYHL9qPz5
nkyHNY+9fxdIBSDtyBqX//Is1xHu42h8wWeCGAwVQMxnpKt4WnrjexUYzb1bfW8y
QRijrpFHNZIDOsC0PLTUPqDorPGT2rgSpthIavyJwN4vQ4S92wTP804EqluLbk+Q
3FNgGofVCNSrmXwmT7HpbJ1Strf7vv+zYhAxpgvU71MGXv0q2nLpqMtCRkFOWEdd
IsguRTkmwYfKDTFiMAGV0BmFtN6TU4edxf1zQy2tbfvvXPahoUphP7aUJi0CSABz
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21046984060884592338505162152776263904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.uvation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27026918725501335345634844681109974948191226622889755207728003338550323309709901621754662381268807917748853469090508225620595679135955650505515660000101006035588304222671912068784038720344375665369882762910273472482925729377959874989659529498689498574969460569896789666578492274764036275571051486764726953493567753039374965963351437487474117077492557715150490427259945421864569238367570191780838449805359184613069088219877344902429266583496213305657269704635064857696858389766792949814620143041153980679717231149999469002791704910569084713385282100421699272657889107467630844647295545135359634395622181598120363717513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd4537f78c3966f737738792f5ffbf2883ff5528
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.uvation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c3bb7d68200000403004630440220730cba3fca0087b67d24212f3ad8461a90611871b0e178989c66ac1ca5a06e3702205625a47ea29ecf5ae329cf4146369034d329b34566ec8531a5b9af867066f16f00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3bb7d624000004030046304402201d1403593117458d24ee97e0df69bc708fef92c55c08909f911fe82077f0c2460220759e3c397ea564dce535bf52b9905b88d086ac76a74ad6afb028ccf11ee20abb007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c3bb7d6250000040300483046022100d533c0671331e20629dd305c0df1995234e8e96735d9aa233bc13bccaf490b7a022100d91e22dc81e267a12ebe361aeb9cc36c5bb29af1b53d704271547a736a7039ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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