www.snhu.edu

- Southern New Hampshire University -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 09:83:5d:ed:f7:cf:ec:d2:80:50:93:5b:91:72:7f:bf was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Southern New Hampshire University

Organization: Southern New Hampshire University
Organization unit: Computing Resources
State / Province: New Hampshire
Locality: Manchester
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:83:5d:ed:f7:cf:ec:d2:80:50:93:5b:91:72:7f:bf
Serial Number (int): 12645147968394124193553920311881269183
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bd:05:10:a4:9c:f9:7a:db:4d:d1:55:cd:ce:78:4b:4e:8d:30:71:c7
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 07:a2:60:a2:44:ca:b2:05:0b:59:b0:f5:bb:f1:7f:31:86:92:a1:80
Fingerprint (sha256): 1b:39:e9:3c:7c:9e:1e:e8:41:a4:34:aa:ac:69:e2:68:bd:91:5a:0e:e4:30:51:ad:97:ff:3e:75:ce:07:49:d3

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate www.snhu.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.snhu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.snhu.edu
snhu.edu
degrees.snhu.edu
explore.snhu.edu

Other certificates including the domain name snhu.edu

(limited to 100 certificates)
plannedgiving.snhu.edu
uconnectlabs.com
uconnectlabs.com
facultysuccess.snhu.edu
radio.snhu.edu
www.snhu.edu
blogging.snhu.edu
uconnectlabs.com
radio.snhu.edu
uconnectlabs.com
in.snhu.edu
uconnectlabs.com
webapps.snhu.edu
mypc.snhu.edu
whatsup.snhu.edu
webmail.snhu.edu
tls.automattic.com
scalefunder.net
uconnectlabs.com
scalefunder.net
desktop.snhu.edu
ui46-2.snhu.edu
penmenprint.snhu.edu
academicarchive.snhu.edu
myrwp2.snhu.edu
sisgatewaydev.snhu.edu
libcal.snhu.edu
webmanager.snhu.edu
uconnectlabs.com
whatsup.snhu.edu
radio.snhu.edu
click.dream.snhu.edu
akamai-san89.exacttarget.com
brightspace01.snhu.edu
scalefunder.net
uconnectlabs.com
scalefunder.net
inconnect-test1.snhu.edu
snhuweb-test2.snhu.edu
uconnectlabs.com
onlinestats.snhu.edu
snhu-bam.snhu.edu
degrees.snhu.edu
uconnectlabs.com
uconnectlabs.com
webmail.snhu.edu
facultysuccess.snhu.edu
intransform.snhu.edu
ui-3.snhu.edu
plannedgiving.snhu.edu
radio.snhu.edu
penelopent.snhu.edu
compass.snhu.edu
*.mule.snhu.edu
adfs-encryption.snhu.edu
dev.snhu.edu
afro.snhu.edu
camfi.snhu.edu
scalefunder.net
ethossvc.snhu.edu
deis.snhu.edu
onlinestats.snhu.edu
uconnectlabs.com
coce-uat-bi.snhu.edu
radio.snhu.edu
sisgateway.snhu.edu
radio.snhu.edu
scalefunder.net
uconnectlabs.com
eforms.snhu.edu
uconnectlabs.com
bus-depot.snhu.edu
SISSVC-STAGE.snhu.edu
adfs-signing.snhu.edu
sso-mail.snhu.edu
libguides.snhu.edu
compass.snhu.edu
sisgatewaytest.snhu.edu
www.snhu.edu
uconnectlabs.com
uconnectlabs.com
my.snhu.edu
uconnectlabs.com
www.snhu.edu
akamai-san89.exacttarget.com
blockchain.snhu.edu
itsstaging.snhu.edu
inconnect-test1.snhu.edu
myrwp.snhu.edu
fis.snhu.edu
uconnectlabs.com
rdsweb.snhu.edu
academicarchive.snhu.edu
CollUI-train.snhu.edu
libanswers.snhu.edu
penpal.snhu.edu
myrwp.snhu.edu
alumni.snhu.edu
akamai-san89.exacttarget.com
ceta-git.lab.snhu.edu

Certificate

The complete raw certificate details for www.snhu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVPL9gfNDX57Xlwu2aJ7
iocNeTw0FrhMYt0EqDpvXuGLDoeEOffrj8vMrnsHZD6HfQ4VYAc7kRAB7DaGomRz
Wdvm5t5nfsXB5fa0cWe+F+nsLKCYhtzwNG41ajVP1k3OEQLUb+focYComsSZe5h5
CmX97U3gZZmWciOeA1HPrdygFOQKsiPrBwzt44ze8TDJ6MTO8OZv6Rqa5H0PySdf
aXOmecZTMfuspejUokrPHewM7Clx3zsnFG7xKoa2JJHWxeWve0H7e/hV5tK3FbQg
Cc7UKeav6H7dmXgKg2tbxKTgQoE1mjjeBki9qIm/SADgxoyVzUpSyO3gFPTq2XHh
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12645147968394124193553920311881269183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Southern New Hampshire University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computing Resources'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.snhu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24405314562581008188518591275099780918327417097568244431068802396104969056054771417084566998466896352684716071329007442159161687298526919078935423479361914268296484502892422256965439066669994351393648365449755953619414731998067297945829423801764248040028131365481218668172787383541842843673518717715871293224056856244782176267607784760684345886725057605022687706371542603106312405651200742894822464547949662952518874627810239061206789143668142546873958292034549906434726417269822798605917091701065441463011466396237643919216718321691720319816939409970201766016343698425824392055759080141926247038602856007638294061423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd0510a49cf97adb4dd155cdce784b4e8d3071c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degrees.snhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.snhu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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