www.lebow.drexel.edu

- Drexel University -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 0c:07:0f:80:e0:c1:e6:b2:c9:71:66:31:d8:81:70:ae was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Drexel University

Organization: Drexel University
Organization unit: LeBow College of Business
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:07:0f:80:e0:c1:e6:b2:c9:71:66:31:d8:81:70:ae
Serial Number (int): 15987396474336645194630888782095806638
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 1c:2c:b6:50:4d:a8:96:d7:9b:59:a8:6b:e2:22:74:bd:f7:ef:ab:69
Fingerprint (sha256): 04:77:40:7c:16:4e:4c:02:ed:87:75:29:d0:1d:52:61:94:43:74:bc:78:da:a1:6e:12:c6:55:0f:e4:55:fe:18

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate www.lebow.drexel.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lebow.drexel.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lebow.drexel.edu

Other certificates including the domain name drexel.edu

(limited to 100 certificates)
aw-svl-web02.westphal.drexel.edu
libcal.library.drexel.edu
cs550.cci.drexel.edu
www.materials.drexel.edu
ozark.coe.drexel.edu
cti-kpwgen020.irt.drexel.edu
remote.westphal.drexel.edu
icereport.drexel.edu
content.soe.drexel.edu
scgold-t1-pub2.irttest.drexel.edu
icinga1.library.drexel.edu
dsview.irt.drexel.edu
fragilehedgehog.bioscience.drexel.edu
admissions.drexel.edu
image.partnerapp1.myworld.com
researchdiscovery.drexel.edu
dragonspot.drexel.edu
cluster2.technolutions.net
webcampus.med.drexel.edu
wireless.ece.drexel.edu
participation.irt.drexel.edu
bioimage.coe.drexel.edu
viz.drexel.edu
n1-15-148.dhcp.drexel.edu
*.moss.drexel.edu
cms.cci.drexel.edu
lcb-hvcs4.lebow.drexel.edu
termmasterschedule.irttest.drexel.edu
participation.irt.drexel.edu
banner2nolijbutton.irttest.drexel.edu
webapi.irt.drexel.edu
cs.drexel.edu
nextcatalog.drexel.edu
Collegiatelink4.Campuslabs.com
grand.irttest.drexel.edu
bannerssoxe.irttest.drexel.edu
irttest.drexel.edu
employer.steinbright.drexel.edu
vonreynlab.biomed.drexel.edu
gitlab.cci.drexel.edu
duphy4.drexel.edu
fmweb1.coe.drexel.edu
snipe.soe.drexel.edu
cti-xtwscc009.irttest.drexel.edu
discuss.coe.drexel.edu
du-coeus.irt.drexel.edu
web.offcampuspartners.com
icereport.drexel.edu
id.cci.drexel.edu
www.lebow.drexel.edu
*.mossdev.drexel.edu
learn9.irttest.drexel.edu
istapps.ischool.drexel.edu
epm.drexel.edu
test.irt.drexel.edu
discover.drexel.edu
esmupdate1.irt.drexel.edu
www.lebow.drexel.edu
events.drexel.edu
pan1-mgmt-kor.noc.drexel.edu
pan02-mgmt-urb.noc.drexel.edu
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
n001.offcampuspartners.com
cloud.cci.drexel.edu
www.math.drexel.edu
exchangeweb.drexel.edu
help.math.drexel.edu
duapp1.irttest.drexel.edu
bulldog.irt.drexel.edu
lambda.cs.drexel.edu
image.partnerapp1.myworld.com
illtest.library.drexel.edu
tls.automattic.com
info.soe.drexel.edu
pod-hill.coe.drexel.edu
scgold-pub2.irt.drexel.edu
kplascg01.irt.drexel.edu
cluster2.technolutions.net
glide.soe.drexel.edu
charmatz.westphal.drexel.edu
dragoncard-dc.irt.drexel.edu
pve2.cci.drexel.edu
learn.dcollege.net
dragonfly.drexel.edu
coot.irttest.drexel.edu
nulab1.physics.drexel.edu
orclpwr.drexel.edu
cti-xpwscc017.irt.drexel.edu
docss.irttest.drexel.edu
westphal.drexel.edu
cti-ztwweb001.irttest.drexel.edu
cluster2.technolutions.net
discovery.irttest.drexel.edu
neumann-learn.irttest.drexel.edu
intranet.cci.drexel.edu
www.cs.drexel.edu
intranet.lebow.drexel.edu
jcf.irt.drexel.edu
esm1-t.irttest.drexel.edu

Certificate

The complete raw certificate details for www.lebow.drexel.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lNB2D3Wrxdlpj0mrOpp
3mTdglnyMxfL12FMvDbbrb+IpeADi3/HoWwxDTPWW2FnEqXBPHUUovjDiRUbsGd1
5mnRAzjcZmNeyVvdq1RnDzHZQnGEVvymWGDI98/M0l+PJkyxtmX61d/jBrQaOSPx
v/Zz3l/uzm5LCbJZfA169l/vZzVXCxB+YSBjw+Z8KwW7FmUS9yeOhOD6fo7bUslQ
wF2DsUlJqpcYDXMOJK1A44sqaju+bR7PkDuTwCbxdSUMsYHpvBoxpVGlyyTqqnMv
Bm7JLrJvXJMYkf8gslnfguYFmwyYiWrd/mun0/exIYdRu2wBgOt5e5YbnbLrWFnE
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15987396474336645194630888782095806638
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Drexel University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LeBow College of Business'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lebow.drexel.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29075865800555721461698632021430695962892589205529842552225287397251992765982090290724787024417767599666899550175464993272386572540634300231137923391020618642522037230303357668532082701458616463940788133255364793458457696289383817349689017002024672584520560402750023459406020969917071447362399442393624358420042751075535472389886156870855809728771130092982150505123160777454288161877815480847446374052897152056121897546127296798667107069040982219890102001744602802227606224304140145281540825360264441142545632150436316241802070232038179938765229695477819459291628848514674826024904873898391541043097924539858953028753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lebow.drexel.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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