itsstaging.snhu.edu

- Southern New Hampshire University -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0f:52:17:2d:b1:21:05:f6:cd:71:34:aa:05:fd:5e:1d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Southern New Hampshire University

Organization: Southern New Hampshire University
Organization unit: Computing Resources
State / Province: New Hampshire
Locality: Manchester
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:52:17:2d:b1:21:05:f6:cd:71:34:aa:05:fd:5e:1d
Serial Number (int): 20364658394680560544372036862278983197
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c7:0d:d8:6b:e9:7f:cf:5f:ea:57:05:f5:42:a7:20:82:7b:0e:be:cb
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 05:c4:d5:40:fe:df:9e:14:22:f2:9e:9d:df:af:cf:00:95:b6:ba:b4
Fingerprint (sha256): 1d:a0:6e:6a:90:67:0e:a3:99:de:35:4d:57:35:88:4b:ce:11:5d:6c:5e:89:1a:da:df:d4:f5:6a:ff:63:26:4c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate itsstaging.snhu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itsstaging.snhu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itsstaging.snhu.edu

Other certificates including the domain name snhu.edu

(limited to 100 certificates)
plannedgiving.snhu.edu
uconnectlabs.com
uconnectlabs.com
facultysuccess.snhu.edu
radio.snhu.edu
www.snhu.edu
blogging.snhu.edu
uconnectlabs.com
radio.snhu.edu
uconnectlabs.com
in.snhu.edu
uconnectlabs.com
webapps.snhu.edu
mypc.snhu.edu
whatsup.snhu.edu
webmail.snhu.edu
tls.automattic.com
scalefunder.net
uconnectlabs.com
scalefunder.net
desktop.snhu.edu
ui46-2.snhu.edu
penmenprint.snhu.edu
academicarchive.snhu.edu
myrwp2.snhu.edu
sisgatewaydev.snhu.edu
libcal.snhu.edu
webmanager.snhu.edu
uconnectlabs.com
whatsup.snhu.edu
radio.snhu.edu
click.dream.snhu.edu
akamai-san89.exacttarget.com
brightspace01.snhu.edu
scalefunder.net
uconnectlabs.com
scalefunder.net
inconnect-test1.snhu.edu
snhuweb-test2.snhu.edu
uconnectlabs.com
onlinestats.snhu.edu
snhu-bam.snhu.edu
degrees.snhu.edu
uconnectlabs.com
uconnectlabs.com
webmail.snhu.edu
facultysuccess.snhu.edu
intransform.snhu.edu
ui-3.snhu.edu
plannedgiving.snhu.edu
radio.snhu.edu
penelopent.snhu.edu
compass.snhu.edu
*.mule.snhu.edu
adfs-encryption.snhu.edu
dev.snhu.edu
afro.snhu.edu
camfi.snhu.edu
scalefunder.net
ethossvc.snhu.edu
deis.snhu.edu
onlinestats.snhu.edu
uconnectlabs.com
coce-uat-bi.snhu.edu
radio.snhu.edu
sisgateway.snhu.edu
radio.snhu.edu
scalefunder.net
uconnectlabs.com
eforms.snhu.edu
uconnectlabs.com
bus-depot.snhu.edu
SISSVC-STAGE.snhu.edu
adfs-signing.snhu.edu
sso-mail.snhu.edu
libguides.snhu.edu
compass.snhu.edu
sisgatewaytest.snhu.edu
www.snhu.edu
uconnectlabs.com
uconnectlabs.com
my.snhu.edu
uconnectlabs.com
www.snhu.edu
akamai-san89.exacttarget.com
blockchain.snhu.edu
itsstaging.snhu.edu
inconnect-test1.snhu.edu
myrwp.snhu.edu
fis.snhu.edu
uconnectlabs.com
rdsweb.snhu.edu
academicarchive.snhu.edu
CollUI-train.snhu.edu
libanswers.snhu.edu
penpal.snhu.edu
myrwp.snhu.edu
alumni.snhu.edu
akamai-san89.exacttarget.com
ceta-git.lab.snhu.edu

Certificate

The complete raw certificate details for itsstaging.snhu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsuzVByj6maXn9dx7XKP
2qfBl9zUnFYfRrWO4HUvM1y29Z0wBjJkaT0YftvXuF0mNx5pJjE8vYKleIYI2oqB
Zp9lNRWOvSwDzAsnaeCUoLT1QhpPMs1k6uZEOU9ZJukn7fITbo/3L1TJgWkRDGFd
60GkHxi+PKZ09Sjc44xi3x4hI+9fq+ernA3ogAhHTzKYt404A+otwmOtYDBDbgDG
piA7mEiJRJ3ZnYeVoTAn74dPMDJqj+yntZ+gs6kYhIW8GrXEN+twkLNypwwzvM1V
Sr9FrH03jDr28yAXvkm7HTXzXhg/+qX3BL1UAH5/Qg0zLJOz9euuZqsu1bCINByU
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20364658394680560544372036862278983197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Southern New Hampshire University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computing Resources'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itsstaging.snhu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21560960305627931234281176932817841440088551218237834903948629010353804433654312174597057596804076767753503305357184711557558446449168478572406951781471043450364233034067835385465927184895221977581567812847491968727085705533577540655450034249598354125888954938280036392755541558175734337174825021508934333528645413318150943598334315110130160317671391352059312241276501320378595304816938304922721955045862665559970648050960749246737630860957269348332678354252501435762531270145894320226862733429142272326833895960030229612163467425526107484730368826526856854198465434144479219587836925913321225029436704890974235301059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c70dd86be97fcf5fea5705f542a720827b0ebecb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsstaging.snhu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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