adfs-signing.snhu.edu

- Southern New Hampshire University -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 60:d9:83:d9:d7:61:a1:1d:fc:a6:97:05:7b:80:46:9f was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Southern New Hampshire University

Organization: Southern New Hampshire University
Organization unit: Computing Resources
State / Province: New Hampshire
Locality: Manchester
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 60:d9:83:d9:d7:61:a1:1d:fc:a6:97:05:7b:80:46:9f
Serial Number (int): 128735290268480629128599923929034802847
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 33:0b:04:31:b4:0e:21:dd:94:a3:fb:da:48:7c:89:4f:e7:2b:63:25
Fingerprint (sha256): 19:7c:0e:b6:4a:63:3e:e4:3c:5a:25:8c:9c:e2:b8:a4:b9:26:2d:89:d8:e2:d0:a2:cb:be:3f:18:7d:c8:51:e3

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate adfs-signing.snhu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs-signing.snhu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs-signing.snhu.edu

Other certificates including the domain name snhu.edu

(limited to 100 certificates)
plannedgiving.snhu.edu
uconnectlabs.com
uconnectlabs.com
facultysuccess.snhu.edu
radio.snhu.edu
www.snhu.edu
blogging.snhu.edu
uconnectlabs.com
radio.snhu.edu
uconnectlabs.com
in.snhu.edu
uconnectlabs.com
webapps.snhu.edu
mypc.snhu.edu
whatsup.snhu.edu
webmail.snhu.edu
tls.automattic.com
scalefunder.net
uconnectlabs.com
scalefunder.net
desktop.snhu.edu
ui46-2.snhu.edu
penmenprint.snhu.edu
academicarchive.snhu.edu
myrwp2.snhu.edu
sisgatewaydev.snhu.edu
libcal.snhu.edu
webmanager.snhu.edu
uconnectlabs.com
whatsup.snhu.edu
radio.snhu.edu
click.dream.snhu.edu
akamai-san89.exacttarget.com
brightspace01.snhu.edu
scalefunder.net
uconnectlabs.com
scalefunder.net
inconnect-test1.snhu.edu
snhuweb-test2.snhu.edu
uconnectlabs.com
onlinestats.snhu.edu
snhu-bam.snhu.edu
degrees.snhu.edu
uconnectlabs.com
uconnectlabs.com
webmail.snhu.edu
facultysuccess.snhu.edu
intransform.snhu.edu
ui-3.snhu.edu
plannedgiving.snhu.edu
radio.snhu.edu
penelopent.snhu.edu
compass.snhu.edu
*.mule.snhu.edu
adfs-encryption.snhu.edu
dev.snhu.edu
afro.snhu.edu
camfi.snhu.edu
scalefunder.net
ethossvc.snhu.edu
deis.snhu.edu
onlinestats.snhu.edu
uconnectlabs.com
coce-uat-bi.snhu.edu
radio.snhu.edu
sisgateway.snhu.edu
radio.snhu.edu
scalefunder.net
uconnectlabs.com
eforms.snhu.edu
uconnectlabs.com
bus-depot.snhu.edu
SISSVC-STAGE.snhu.edu
adfs-signing.snhu.edu
sso-mail.snhu.edu
libguides.snhu.edu
compass.snhu.edu
sisgatewaytest.snhu.edu
www.snhu.edu
uconnectlabs.com
uconnectlabs.com
my.snhu.edu
uconnectlabs.com
www.snhu.edu
akamai-san89.exacttarget.com
blockchain.snhu.edu
itsstaging.snhu.edu
inconnect-test1.snhu.edu
myrwp.snhu.edu
fis.snhu.edu
uconnectlabs.com
rdsweb.snhu.edu
academicarchive.snhu.edu
CollUI-train.snhu.edu
libanswers.snhu.edu
penpal.snhu.edu
myrwp.snhu.edu
alumni.snhu.edu
akamai-san89.exacttarget.com
ceta-git.lab.snhu.edu

Certificate

The complete raw certificate details for adfs-signing.snhu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oKd2+KOgEUGhxQENpTd
VKWQO+tpXJCwf3FTCQZrD+20Apf+xCrt6Wj2y8VqwD3d0rJ5SvsO9BJ0HRzSmTJi
GExFF6kvhDx+HhhMEUwcd88XcvoVJEsoadwyw5isaUwjyJ0oyx7DUUPzrZQRWnja
2fyVWlI5/ZmKTDQ17240Q7AaGJKNUxcGlqTUFunptsv5EjevhjXOLeE+L/SdyMO6
KlatlCJAd01NiC/0OqU205Q8S3AikuapkxBuwGPmDB9J05H6leb045H+VuEGm2CU
pOIruY+wtemSq+wCaAShfZ8VceMoQB7473NngJMUCghmxvmw3Pxfa5PvgMmD+wRq
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128735290268480629128599923929034802847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Southern New Hampshire University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Computing Resources'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'adfs-signing.snhu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28089313166461571085584778954543488472435105234538876490238683275144010929798868673140627086653978400258401405847747904313170588336085500340827505235824528024660255878162192740383565906408738336285544111503057766933846877152816068026031758800708770448251724564270298774052424725428978209351862480488115402488426426586825833861031417435174374182470304290396149272279658839201149099164777019261920812867779939797097800453364914915730942570407732502555071630854663967961595440446079220411634272174312661306234584857089358100865280610491917371700033409866009231303923705648386718494744834265705886582695448823094803982981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs-signing.snhu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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