ksclib.keene.edu

- Keene State College -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 1d:25:d6:aa:30:37:f7:4c:3e:e5:6e:5f:ed:06:c8:e3 was issued on by Thawte, Inc..

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Keene State College

Organization: Keene State College
Organization unit: Mason Library
State / Province: New Hampshire
Locality: Keene
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:25:d6:aa:30:37:f7:4c:3e:e5:6e:5f:ed:06:c8:e3
Serial Number (int): 38744080780894097041383484992545802467
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 8b:9a:d9:00:74:00:c5:70:a5:bb:d4:19:0a:0c:ab:99:85:5a:d2:67
Fingerprint (sha256): 17:cb:58:17:4f:44:c6:53:30:41:a2:24:2c:81:49:2d:74:00:47:99:40:e5:df:38:c8:84:c1:07:10:10:25:30

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate ksclib.keene.edu

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ksclib.keene.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0-1.next.westlaw.com.ksclib.keene.edu
0-essential.bna.com.ksclib.keene.edu
0-images.webofknowledge.com.ksclib.keene.edu
0-jump.valueline.com.ksclib.keene.edu
0-site.ebrary.com.ksclib.keene.edu
0-ulrichsweb.serialssolutions.com.ksclib.keene.edu
0-wcs.webofknowledge.com.ksclib.keene.edu
0-www.agronomy.org.ksclib.keene.edu
0-www.jstor.org.ksclib.keene.edu
0-www.soils.org.ksclib.keene.edu
0-www-secure.easybib.com.ksclib.keene.edu
ksclib.keene.edu

Other certificates including the domain name keene.edu

(limited to 100 certificates)
ksclib.keene.edu
pw.keene.edu
colleague.keene.edu
commons.keene.edu
online.keene.edu
keene.edu
sectest.keene.edu
stuplantestselfserv.keene.edu
celt.reclaimhosting.com
jade.keene.edu
library.keene.edu
celt.reclaimhosting.com
StuPlan.keene.edu
kscvpn.keene.edu
ksclib.keene.edu
bookstore.keene.edu
giving.keene.edu
keene.edu
ksclib.keene.edu
library.keene.edu
wpdev.keene.edu
ksclib.keene.edu
sci-1.keene.edu
fett.keene.edu
kscap-tmi01.keene.edu
blu-socket.keene.edu
dept.keene.edu
kscap-web02.keene.edu
commons.keene.edu
owa.keene.edu
ksclib.keene.edu
hmsweb.keene.edu
pw.keene.edu
ksclib.keene.edu
celt.reclaimhosting.com
cppm-radsec.unh.edu
dept.keene.edu
BLACK.KEENE.EDU
wpdev.keene.edu
colleague.keene.edu
library.keene.edu
www.keene.edu
kscap-idmsql.keene.edu
hale.keene.edu
ksclib.keene.edu
owl.keene.edu
ksclib.keene.edu
ksclib.keene.edu
library.keene.edu
ksclib.keene.edu
kscap-cwatest.keene.edu
dept.keene.edu
ksclib.keene.edu
mycourses.keene.edu
bookstore.keene.edu
ksclib.keene.edu
bond.keene.edu
HALE.KEENE.EDU
bookstore.keene.edu
www.keene.edu
liberty.keene.edu
bookstore.keene.edu
hale.keene.edu
jade.keene.edu
StuPlan.keene.edu
arms.keene.edu
fett.keene.edu
ksclib.keene.edu
bluecourseevals.keene.edu
minerva.keene.edu
alumni.keene.edu
django.keene.edu
ksclib.keene.edu
pw.keene.edu
vpn.keene.edu
academics.keene.edu
sites.keene.edu
libanswers.keene.edu
print.keene.edu
wpdev.keene.edu
kscap-web01.keene.edu
ksclib.keene.edu
wpdev.keene.edu
celt.reclaimhosting.com
stuplantest.keene.edu
clearpass-web.unh.edu
ksclib.keene.edu
ksclib.keene.edu
owlcardaccess.keene.edu
blu-gw2.keene.edu
jade.keene.edu
bookstore.keene.edu
owl.keene.edu
ksclib.keene.edu
fett.keene.edu
reslife.keene.edu
libanswers.keene.edu
keene.edu
sites.keene.edu
minerva.keene.edu

Certificate

The complete raw certificate details for ksclib.keene.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2OQAnN+OYbIN45uD2DB
Ygk15a9ghQKjtviJOwvcBQC+aJPeOeBuOUlGTRAEGvhVuelZuEWb1gdmwACvaCYd
pwu2kFpX2YSD6Lz50V+ABZfgYGJJ87HTqvLUAuHJzCCZPf6bYKkzql1Plas/+bPu
qt2Zc3Mr0sOrEWTDRElms0eGDabZ2lyaarVIvyfRUR76RaPkhB66l9hvT1nEZgFj
LKGfJPLQ5gCo2ewiT0jJx0lD0vEQFO1Bj4utp0xtn+/RHHjfExWsuDXmCrfIAr70
/zmRqtB0xy2EE9PIAX5pobQI8UjyWAWOAMvYEvqH+AydeqF1RomPjI0ZUgeyNqk8
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38744080780894097041383484992545802467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Keene'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Keene State College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mason Library'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ksclib.keene.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22645752705954514218999512260968972786580174717216667755020655680053984445549683805222515008222420408636880931120634931029778813565273491583614583658368753802096853058415888782425711498306418555605267270964594546467170097176065421335906535753488920336036952549049164366252850946291011671622871064777079966084628249892116886920662371038931073127303037537887214309529050868293806807962756920425052456143943473372130116219976304320571340250287056156354534507524793581188815250323707110748702132594809541033297708977822025610131102810588920567997931892176631446736059244923518707446737781583969570614160794257690299284597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (463 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-1.next.westlaw.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-essential.bna.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-images.webofknowledge.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-jump.valueline.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-site.ebrary.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-ulrichsweb.serialssolutions.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-wcs.webofknowledge.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.agronomy.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.jstor.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.soils.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www-secure.easybib.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksclib.keene.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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