www.albion.edu

- Albion College -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 48:29:50:4e:61:90:cd:3a:c5:9b:0c:cd:e7:88:68:ac was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Albion College

Organization: Albion College
Organization unit: Information Technology
State / Province: Michigan
Locality: Albion
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:29:50:4e:61:90:cd:3a:c5:9b:0c:cd:e7:88:68:ac
Serial Number (int): 95918928670473939468070218311452354732
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 44:2b:0b:76:90:46:66:1f:7f:fb:a8:42:d2:38:34:a7:60:9f:4b:1b
Fingerprint (sha256): 19:cc:05:5f:ce:a9:39:9e:df:e0:35:b4:29:0b:10:84:c6:ea:0b:25:8a:6c:60:03:e5:81:07:b8:59:bb:cd:55

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate www.albion.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.albion.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.albion.edu
albion.edu

Other certificates including the domain name albion.edu

(limited to 100 certificates)
5698362649083904-fe2.pantheonsite.io
banking-business-review.com
banking-business-review.com
cluster2.technolutions.net
banking-business-review.com
exauth16s01.albion.edu
acis.albion.edu
palo5.albion.edu
161511-web1.vilcek.org
advance.albion.edu
discuss.albion.edu
courses.albion.edu
www.nai.arizona.edu
rt.albion.edu
palo5.albion.edu
hvgw1.albion.edu
cluster2.technolutions.net
albion.edu
library.albion.edu
apply.albion.edu
cluster2.technolutions.net
www.datahero.com
apply.albion.edu
cluster2.technolutions.net
208.lsnc.net
advance.albion.edu
courses.albion.edu
alumnimail.albion.edu
libguides.albion.edu
vpn1.albion.edu
apply.albion.edu
banking-business-review.com
secure2.albion.edu
dwapptest01.albion.edu
ssl713957.cloudflaressl.com
www.humanities.sas.upenn.edu
albion.edu
banking-business-review.com
160.167.tmcapital.com
courses.albion.edu
161511-web1.vilcek.org
ssl713957.cloudflaressl.com
discuss.albion.edu
161511-web1.vilcek.org
advance.albion.edu
ssl713956.cloudflaressl.com
160.167.tmcapital.com
alumnimail.albion.edu
alumnimail.albion.edu
161511-web1.vilcek.org
brassunion.com
acadmintest.cuofco.org
208.lsnc.net
discuss.albion.edu
cluster2.technolutions.net
161511-web1.vilcek.org
apply.albion.edu
cluster2.technolutions.net
160.167.tmcapital.com
acadmintest.cuofco.org
secure.advance.albion.edu
teach.albion.edu
commerce.imodulescontent.com
discuss.albion.edu
afscme57.org
160.167.tmcapital.com
ucomm-sites-dev.stanford.edu
teach.albion.edu
208.lsnc.net
banking-business-review.com
161511-web1.vilcek.org
dwapptest01.albion.edu
cluster2.technolutions.net
alldata.com
www.albion.edu
160.167.tmcapital.com
banking-business-review.com
beistest01.albion.edu
publicarchive.albion.edu
cluster2.technolutions.net
apply.albion.edu
alldata.com
RAD12R2E01.albion.edu
libguides.albion.edu
www.giving.dartmouth.edu
cluster2.technolutions.net
library.albion.edu
illiad.albion.edu
cluster2.technolutions.net
acadmintest.cuofco.org
www2.albion.edu
banking-business-review.com
banking-business-review.com
5698362649083904-fe2.pantheonsite.io
161511-web1.vilcek.org
advance.albion.edu
ssl713958.cloudflaressl.com
2.www.upenn.edu
5740240702537728-fe2.pantheonsite.io
secure.advance.albion.edu

Certificate

The complete raw certificate details for www.albion.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FUf3Zkxz6lgfIqllsCA
bonR6UzPien1kZAHOlDNAXLPj/RCXX6NK6HJbhEsC2M5JqRPLGrcBi/Xs/gGWWjd
XLPrmhBhfQoUohMqo97J3w7T1yDp+XBr0Z78jLqeQa2wcWXJti6dy+bIqtWFAYwV
fYOqCH2ciiIPy47mdyp1oPp2OYwrnG/NmbV6lytaL7OuJCyy4PyfAhlOkIC6+Hg6
uN8wobyB6Q3L/iN5CYXJGY2nFUsY4GekfIuuxsiyjRHbgqgiPWpGdZ1pcpmw6OC5
QCFUJWhmVfaDSxZZWov5AX0rpyllRMSnFAkEQxH2jBKX6+bYIjQiVykGVpQMV4CP
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95918928670473939468070218311452354732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Albion'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Albion College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.albion.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27814403535675096181581454668955017097264375054058353821336127216117156745238583252267722135593417501734185005126224129480846201384637536893664168493820053321180796606920996367965870400222441926707002870098822198657313595572152460784902889146083670167426263481014862747927226275048468646413516083108642500428006840376674138906683972155952844359534531429182740512426512333050530487604650660122626212969893790130203232198361077601668752759230695550924288684170857159792023624748859220548019562959908421092721010476776635864461985889918764348500051463871240049339714314525383649092600269130805134627284536494879370415999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albion.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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