secure2.albion.edu

- Albion College -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 1b:18:b0:cc:12:ca:fb:21:4a:a2:55:9c:8a:6e:1f:46 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Albion College

Organization: Albion College
Organization unit: Information Technology
State / Province: Michigan
Locality: Albion
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:18:b0:cc:12:ca:fb:21:4a:a2:55:9c:8a:6e:1f:46
Serial Number (int): 36017356883249079155861082418222866246
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 4e:fe:01:7b:d0:7e:83:64:ed:43:72:75:a0:02:3c:82:27:65:c3:43
Fingerprint (sha256): 0c:3a:40:55:49:70:da:6c:07:68:79:f7:0c:f6:91:51:83:9f:0d:5a:6d:39:8f:d9:3f:00:58:5b:e1:f1:94:b5

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate secure2.albion.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure2.albion.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure2.albion.edu

Other certificates including the domain name albion.edu

(limited to 100 certificates)
5698362649083904-fe2.pantheonsite.io
banking-business-review.com
banking-business-review.com
cluster2.technolutions.net
banking-business-review.com
exauth16s01.albion.edu
acis.albion.edu
palo5.albion.edu
161511-web1.vilcek.org
advance.albion.edu
discuss.albion.edu
courses.albion.edu
www.nai.arizona.edu
rt.albion.edu
palo5.albion.edu
hvgw1.albion.edu
cluster2.technolutions.net
albion.edu
library.albion.edu
apply.albion.edu
cluster2.technolutions.net
www.datahero.com
apply.albion.edu
cluster2.technolutions.net
208.lsnc.net
advance.albion.edu
courses.albion.edu
alumnimail.albion.edu
libguides.albion.edu
vpn1.albion.edu
apply.albion.edu
banking-business-review.com
secure2.albion.edu
dwapptest01.albion.edu
ssl713957.cloudflaressl.com
www.humanities.sas.upenn.edu
albion.edu
banking-business-review.com
160.167.tmcapital.com
courses.albion.edu
161511-web1.vilcek.org
ssl713957.cloudflaressl.com
discuss.albion.edu
161511-web1.vilcek.org
advance.albion.edu
ssl713956.cloudflaressl.com
160.167.tmcapital.com
alumnimail.albion.edu
alumnimail.albion.edu
161511-web1.vilcek.org
brassunion.com
acadmintest.cuofco.org
208.lsnc.net
discuss.albion.edu
cluster2.technolutions.net
161511-web1.vilcek.org
apply.albion.edu
cluster2.technolutions.net
160.167.tmcapital.com
acadmintest.cuofco.org
secure.advance.albion.edu
teach.albion.edu
commerce.imodulescontent.com
discuss.albion.edu
afscme57.org
160.167.tmcapital.com
ucomm-sites-dev.stanford.edu
teach.albion.edu
208.lsnc.net
banking-business-review.com
161511-web1.vilcek.org
dwapptest01.albion.edu
cluster2.technolutions.net
alldata.com
www.albion.edu
160.167.tmcapital.com
banking-business-review.com
beistest01.albion.edu
publicarchive.albion.edu
cluster2.technolutions.net
apply.albion.edu
alldata.com
RAD12R2E01.albion.edu
libguides.albion.edu
www.giving.dartmouth.edu
cluster2.technolutions.net
library.albion.edu
illiad.albion.edu
cluster2.technolutions.net
acadmintest.cuofco.org
www2.albion.edu
banking-business-review.com
banking-business-review.com
5698362649083904-fe2.pantheonsite.io
161511-web1.vilcek.org
advance.albion.edu
ssl713958.cloudflaressl.com
2.www.upenn.edu
5740240702537728-fe2.pantheonsite.io
secure.advance.albion.edu

Certificate

The complete raw certificate details for secure2.albion.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzXkD1BXoJAJ7+Dh474c
21qHzcXAtk3tuz8h0E5t15ZImH3Mo6jP54X3s1gjtKv+g+H8EFMy1ARX/jXAbYYO
DcIBb5q9b2DBKDLmXweLGD6nc7Io74LVOtsR3/cB6Wx5x6RGP8+vmyKdQsxZluzf
cSKcK11lGlkJpddmE3Ut+x4NMPsQpI07f9dHGX4sYtVO6WOEbBLGAk0ppgwiHF8a
G+6iGh3LKgx/n8Ppl7L0kfuq3MQIxkSdbDyuzbTQjvPAK4hn6LZQ1HwLECy3qRXh
Up1GXTeA6CE9G+HhGLithxhwNkywapl2f2kAmep5rT4tQsKF072ay4QhuVQCqh1E
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36017356883249079155861082418222866246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Albion'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Albion College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'secure2.albion.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24643044041239803242925601208542382222983026645259432900511777676620920081714502502277361865454168033350138042777273729611182541009977965074114269207825196607831726426788987002578101086789961414257986822504280318698807783248940534350531277537622800458923246172139312102488148030780554177357104762809361911219905744622321142819621854207923619367026904341261699068961540110909279059332817579010283745890698357526645678993064007973433304298776337172579812089815231451870931832492061636837539583641849280674546908280288349472204194161074975985403120571255362234574219836517060087263452519945259253504458666695299988014293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.albion.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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