*.ulacit.ac.cr

- ULACIT SOCIEDAD ANONIMA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:52:ca:ff:27:7c:4b:19:b4:f8:7e:21:29:e0:de:ec was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ULACIT SOCIEDAD ANONIMA

Organization: ULACIT SOCIEDAD ANONIMA
State / Province: San José
Locality: Tibás
Country: CR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:52:ca:ff:27:7c:4b:19:b4:f8:7e:21:29:e0:de:ec
Serial Number (int): 15051393558175486078672902226559688428
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 44:f2:ce:97:15:bf:4f:cb:4e:d9:0f:60:ab:77:cd:86:f6:78:10:23
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 18:96:49:db:1e:d3:80:45:0a:1b:19:3c:c8:b2:71:02:94:32:50:58
Fingerprint (sha256): 87:c1:b4:33:94:a9:fd:e3:c1:27:8b:e1:df:b0:1c:4c:f6:4d:44:44:f9:b5:5e:0b:19:bf:72:3d:b2:c5:d0:3b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for certificate *.ulacit.ac.cr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ulacit.ac.cr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ulacit.ac.cr
ulacit.ac.cr

Other certificates including the domain name ulacit.ac.cr

(limited to 100 certificates)
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
*.ulacit.ac.cr
revistas.ulacit.ac.cr
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
*.ulacit.ac.cr
ventas.ryzeone.online
marketing.zohodemo.com.cn
helpdesk.cayusetechnologies.com
*.ulacit.ac.cr
marketing.zohodemo.com.cn
*.ulacit.ac.cr
marketing.zohodemo.com.cn
*.ulacit.ac.cr
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
ventas.ryzeone.online
marketing.zohodemo.com.cn
helpdesk.cayusetechnologies.com
*.ulacit.ac.cr
*.ulacit.ac.cr
support.bvg-i.com
canvas.ulacit.ac.cr
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
*.ulacit.ac.cr
marketing.zohodemo.com.cn
*.ulacit.ac.cr
marketing.zohodemo.com.cn
ulacit.ac.cr
marketing.zohodemo.com.cn
support.unify.services
marketing.zohodemo.com.cn
helpdesk.modustulsa.org
centrodeservicios.ulacit.ac.cr
support.unify.services
helpcenter.hearolife.com
*.ulacit.ac.cr
marketing.zohodemo.com.cn
helpdesk.modustulsa.org
helpdesk.modustulsa.org
ventas.ryzeone.online
helpcenter.hearolife.com
ventas.ryzeone.online
marketing.zohodemo.com.cn
ulacit.ac.cr
support.bvg-i.com
soporte.grupotransforma.mx
support.dhari.ca
marketing.zohodemo.com.cn
*.ulacit.ac.cr
ulacit.ac.cr
helpdesk.cayusetechnologies.com
ulacit.ac.cr
support.dhari.ca
*.ulacit.ac.cr
support.unify.services
*.ulacit.ac.cr
ulacit.ac.cr
*.ulacit.ac.cr
helpdesk.modustulsa.org
support.bvg-i.com
support.unify.services
*.ulacit.ac.cr
*.ulacit.ac.cr
*.ulacit.ac.cr
marketing.zohodemo.com.cn
*.ulacit.ac.cr
*.ulacit.ac.cr
support.dhari.ca
soporte.grupotransforma.mx
*.ulacit.ac.cr
helpcenter.hearolife.com
*.ulacit.ac.cr
*.ulacit.ac.cr
*.ulacit.ac.cr
centrodeservicios.ulacit.ac.cr
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
*.ulacit.ac.cr
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
*.ulacit.ac.cr
support.dhari.ca
marketing.zohodemo.com.cn
centrodeservicios.ulacit.ac.cr
marketing.zohodemo.com.cn
helpcenter.hearolife.com
marketing.zohodemo.com.cn
support.bvg-i.com
marketing.zohodemo.com.cn
marketing.zohodemo.com.cn
centrodeservicios.ulacit.ac.cr
soporte.grupotransforma.mx
*.ulacit.ac.cr
helpdesk.cayusetechnologies.com

Certificate

The complete raw certificate details for *.ulacit.ac.cr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCRSL77JqvpNC98GCykR
C7eGJ2zOS6NCvpg80PIdvt7nvVzOirmeJtyZXYaV0NkhszM2X9qdLpVZReJF5ivQ
dvHMbk9a+RCfFLawC6qbAxZf0k/x2pu8pxkuXN+/JQibyEdmdY6JYNou98rUOGxQ
BuQaAyDEUq7kZp3JortQrUf/zrs/wafvlkcem7Pk1kjznRDVYTKEFs85a+mA8GPm
EsFlfyhZLH0CnemKyrxBOqixlrKC9nqi6oSuYmoL4DYAl+Sf/JKvvIgTYBKqfZyj
CGwRDaanL03IrMtEOIl7ySkFK6iNCMcrEMuzOe1arACEvhJRi1hGFvnKV/Vgy6/9
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15051393558175486078672902226559688428
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San José'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tibás'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ULACIT SOCIEDAD ANONIMA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ulacit.ac.cr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25265571566082237451655597934743247624911037124684094254131607188855023960312056838190000259486637904256068040380608039790908030970690294651615748905323279438099516068135376325856348468922241161693037598876373385345108476937113739484971592111366737911687575496812934047697632615389477626847664079052267264856116868602012301017459364680804184232341573567348471023707463667697753568044165560435760211826967679050526263851522414224127995417626149531355719107019324299121658309849417391487821274642861558276303067289025123635851000051367143504507359433512865043935458458598265395759409043304093067221915515629399184506249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44f2ce9715bf4fcb4ed90f60ab77cd86f6781023
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulacit.ac.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulacit.ac.cr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006bc5803b41333cb369a60e354c7e8f6f8198e72afdf5e3086abcb6ad091fa2c00efe866d8281dc85c841677b922be9bef3a5f5e2c8cd2d02f103b3635b263ad0c954d056c31ce9224ab0965a954cbcbd9a313b1ad80507ea3014dfa039fb5e5094149e3be551a097663ac9f86709e466112804b5551c5134d126366d18757c39a472b0f6a8017392d356bc9669b40677aa4b02e37ed931b16b32566980856eb78f88e1502b51306f4f9199466f5648b88425e5825357cebbb3704309e5c2bf4453b8d2fd7fbd2a238c377a5bea7ab0b49f925392579438788ab7955518737bc5a197c6d469a95162d96742dd82f0552e27b104ccb2a020b271e880a6721383c7