*.uic.es

- Universitat Internacional de Catalunya -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 0a:d1:6b:c5:f2:75:08:f0:c8:e9:17:79:18:81:87:6b was issued on by TERENA.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitat Internacional de Catalunya

Organization: Universitat Internacional de Catalunya
Organization unit: DSI
Locality: Barcelona
Country: ES

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:d1:6b:c5:f2:75:08:f0:c8:e9:17:79:18:81:87:6b
Serial Number (int): 14379655902095402660498799797976794987
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8d:19:22:5d:51:d4:c2:e3:50:17:c8:0f:28:03:7a:6a:1f:05:c2:ce
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): c3:e6:a6:e1:32:c3:a3:83:8e:e4:56:31:57:34:ee:c6:90:b6:d4:d2
Fingerprint (sha256): 82:97:05:74:c5:c4:f3:12:37:0f:cc:c7:1b:74:fe:ad:48:de:b5:54:89:39:57:78:a6:1e:3c:da:c7:85:60:74

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.uic.es

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.uic.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.uic.es
uic.es
api.uic.es
app.uic.es
intranet.uic.es

Other certificates including the domain name uic.es

(limited to 100 certificates)
programas.uic.es
podl2.ithinkupc.com
tls.automattic.com
akamai-san121.exacttarget.com
podl2.ithinkupc.com
suport.uic.es
programas.uic.es
podl2.ithinkupc.com
programas.uic.es
programas.uic.es
histories.uic.es
drac.uic.es
valorip.uic.es
tls.automattic.com
ebooks.uic.es
tls.automattic.com
integralcare.uic.es
ebooks.uic.es
conversation.uic.es
tls.automattic.com
programas.uic.es
tls.automattic.com
tls.automattic.com
programas.uic.es
*.bibliotecadigital.uic.es
tls.automattic.com
jenkis.uic.es
app.uic.es
tls.automattic.com
podl2.ithinkupc.com
akamai-san121.exacttarget.com
podl2.ithinkupc.com
programas.uic.es
reserves-sc.uic.es
reserves-notifica.uic.es
histories.uic.es
podl2.ithinkupc.com
impars.uic.es
e-uic.uic.es
tls.automattic.com
histories.uic.es
zabbix.csc.uic.es
monitor.csc.uic.es
impars.uic.es
tls.automattic.com
biblioguias.uic.es
api.uic.es
*.uic.es
ments.uic.es
podl2.ithinkupc.com
programas.uic.es
biblioguias.uic.es
histories.uic.es
socialday.uic.es
atc.uic.es
socialday.uic.es
programas.uic.es
*.uic.es
podl2.ithinkupc.com
repositori.uic.es
jenkins.uic.es
impars.uic.es
*.uic.es
repositori.uic.es
tls.automattic.com
biblioguias.uic.es
reserves-api.uic.es
biblioguias.uic.es
programas.uic.es
www.uic.es
tls.automattic.com
uicsocialday.uic.es
histories.uic.es
conversation.uic.es
biblioguias.uic.es
socialday.uic.es
masteremergencyarchitecture.uic.es
e-uic.uic.es
impars.uic.es
suport.uic.es
tls.automattic.com
reserves-sc-api.uic.es
biblioguias.uic.es
monitor.csc.uic.es
tls.automattic.com
jenkins.uic.es
akamai-san121.exacttarget.com
tls.automattic.com
histories.uic.es
*.bibliotecadigital.uic.es
socialday.uic.es
masteremergencyarchitecture.uic.es
tls.automattic.com
www.uic.es
tls.automattic.com
zabbix.uic.es
counselors.uic.es
tls.automattic.com
histories.uic.es
*.uic.es

Certificate

The complete raw certificate details for *.uic.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9V8zt2lFKHXZ9lx2luL
Ibxp8XmBJl58v2e9vFQg6KUNTv8bUdUXrQgBwXrEImmZ+ssSRTp8PF9eGzihnHHJ
wbOWlXgwE4vIRSCaqkFFsIoZNcx1Bwkri/OFDVEBXQw3cK7VdJjFcZidxC6mD28a
6igVMxnsJX/QjX73GvjP1uZcp8+JdTBPa3V1Cn4Hs+XPL0+cJsIr02Oe9dcnmMtA
MsfQemVQgRWjmtPoPR2GgPv0Z+wZp5cVUDtWWrRIGB+VrbX/8FFhN2nawga385yi
D7nt4QzQkIVC5FWw3eDC5p6q8wGmP98hD6b25BeMsJmutKO09rwTe0YsUuzLKCkE
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14379655902095402660498799797976794987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universitat Internacional de Catalunya'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uic.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24216790873949524799559750951510368484968421299073280579894704770220130767636701120579322077783792154001863312209626216128707744226441962419467345312604782741383173318884383030884278772141845358768593144277623332599392309443444393420613508944805098442048355687595146375768417947520234992480234857877483119702169438567994406497821933769873043919913597427635668492772603190437030936882869562571685091298328710616871367975346183602352271538611411270265005168949038207356349703873135875438066032790630603190026438636185397043934313266000810400906232314143129064996037318389093254438110882184658035368167905777050234455203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d19225d51d4c2e35017c80f28037a6a1f05c2ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.uic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.uic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.uic.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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