forms.usm.edu

- University of Southern Mississippi -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 78:3f:ae:a9:eb:23:66:e2:9b:9a:08:8a:51:81:f9:80 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

University of Southern Mississippi

Organization: University of Southern Mississippi
Organization unit: iTech
State / Province: Mississippi
Locality: Hattiesburg
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 78:3f:ae:a9:eb:23:66:e2:9b:9a:08:8a:51:81:f9:80
Serial Number (int): 159838016797879874763641388779100567936
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): a6:ec:8b:fd:a5:ca:c2:60:f0:20:79:e5:39:9d:93:68:75:9f:0f:bd
Fingerprint (sha256): 0d:60:ac:60:81:ef:55:6b:8f:0d:07:22:d0:bc:c8:e8:6d:2c:ad:e3:f0:1e:50:fd:a4:90:a5:58:50:3a:26:10

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate forms.usm.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forms.usm.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forms.usm.edu

Other certificates including the domain name usm.edu

(limited to 100 certificates)
www.online.usm.edu
rms.usm.edu
eaglenet.usm.edu
sfunder9cert.net
rmsweb.usm.edu
mbrace.usm.edu
www.mbrace.usm.edu
DMM2.USM.EDU
iway.usm.edu
www.mbrace.usm.edu
cb.usm.edu
wireless.usm.edu
aquila.usm.edu
rmsweb.usm.edu
psoftzilla.usm.edu
satst90.otr.usm.edu
mbrace.usm.edu
sts.usm.edu
hpc.st.usm.edu
soarhr.usm.edu
mbrace.usm.edu
arms.usm.edu
libguides.lib.usm.edu
advisortrac.usm.edu
webtma.usm.edu
libguides.lib.usm.edu
sfunder9cert.net
usm.edu
soarfin.usm.edu
meet.usm.edu
sfunder9cert.net
forms.usm.edu
ncs4.usm.edu
unv100.usm.edu
preservica.usm.edu
fncmp91.otr.usm.edu
sacmp90.otr.usm.edu
soar.usm.edu
soarfin.usm.edu
specialcollections.usm.edu
mailman.usm.edu
sfunder9cert.net
aquila.usm.edu
aquila.usm.edu
soar.usm.edu
sfunder9cert.net
soarmobile.usm.edu
soar.usm.edu
rmstest.usm.edu
cms02.usm.edu
math.usm.edu
goldengate.usm.edu
insights.usm.edu
classificationweb.usm.edu
scalefundercert.net
cmsrec01.usm.edu
aquila.usm.edu
ncs4.usm.edu
eaglenet.usm.edu
*.usm.edu
vigp.usm.edu
math.usm.edu
vicp.usm.edu
aquila.usm.edu
pax.st.usm.edu
www.cs.usm.edu
dagger.usm.edu
spacewalk.usm.edu
orca.st.usm.edu
specialcollections.usm.edu
talon.st.usm.edu
lib.usm.edu
web04.usm.edu
idp.usm.edu
usmwireless.usm.edu
ncs4.usm.edu
scalefundercert.net
transfer.usm.edu
sns.usm.edu
manager.lib.usm.edu
sfunder9cert.net
sacir92.otr.usm.edu
timeclock.usm.edu
pinnweb.usm.edu
itsmtest.itech.usm.edu
cb.usm.edu
eagleappsid.usm.edu
scalefundercert.net
itsm.itech.usm.edu
hpc.st.usm.edu
idreset.usm.edu
USMwireless.usm.edu
shsweb.usm.edu
osctrl1.itech.usm.edu
math.usm.edu
lib.usm.edu
rmsapp.usm.edu
sacir90.otr.usm.edu
scalefundercert.net
*.usm.edu

Certificate

The complete raw certificate details for forms.usm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159838016797879874763641388779100567936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mississippi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hattiesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Southern Mississippi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'iTech'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'forms.usm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759420905683741024152865169508629697901294472831456780814746035889058800535501740244203075643195029496568450347967493600786984652030057925705795865039906930975844040604740137621474897544486289601001820567076591676179647980382559841649338671814449500302644625190259229971217907452268043496565813351286271015744762200085312455985188989872912731406226819922263366664232221432381646572913483379745830058016499538742958065320704201845747157055873083711173584771637812076939345612848154848783192704383220158306758345924299570212266362124443089140390958693591016287570016337102740226550316793095017189906496937891350730669890092512959351647798404412968698870210711537440998084758091132183885557500750859363844927354922297371339069032916496495911141410346763401709544810869308182899009608073123704227073276110137392688030474588612226760987277492657528980285687565082221496348319374264701099324755848147817393991971858554901638980392612587696791467189022687192662501850823532780936925090830175889975118762336275658186047365506580866079054578860185920570917601683058926080694260326740950956139010865264167126416670788956305543964054934728800348420032238328391347813259750729245155197669922349200473573269089863689758672206186609602530764752121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.usm.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00aba169c2fa14597fd39f5f29929a3cc5d1523765b6ccb42338e91e520c4f74097a2b4939e66a3c7c33ab06bd4fb359b3679c3e3a308c05f908ac64b85c587e07e3bcd58503f7ac3b89d621f056f6d18df344da3187ea7e5aab10c2b663c965d545690cc59f4aa74b4c217c4ef98d9807f42d570860fdcb42d93c512f00e3f4775423199dde3b9e144a0be340f9abfedade68b085f133b78bbb7053ba8afb2f598e9840b27117345b32c3d7d69a08b20398861a25edbec56ac98fd178be2b5813e9a447766822865c16a2d0994b2b797f3f3f5e92c65858189709bbc33e01ea18bb6c455e7bf777dcb51fbd25f73fe6f6f88c5279011d71bab4430a2aeb4d8611