my.bluffton.edu

- Bluffton University -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 29:05:06:a4:6f:4a:5a:57:97:39:90:93:e2:cd:ae:1c was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bluffton University

Organization: Bluffton University
Organization unit: Bluffton University
State / Province: Ohio
Locality: Bluffton
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 29:05:06:a4:6f:4a:5a:57:97:39:90:93:e2:cd:ae:1c
Serial Number (int): 54524444033793222406140528584274325020
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 34:25:64:5f:a4:62:ae:95:a1:56:43:7d:db:bd:78:47:92:03:3a:0e
Fingerprint (sha256): 31:05:f0:3e:04:84:96:99:47:a1:51:65:9f:42:2b:2d:f2:3d:d3:7e:fe:d7:a2:5c:ed:bf:f3:ad:a9:9e:80:56

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate my.bluffton.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for my.bluffton.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

my.bluffton.edu

Other certificates including the domain name bluffton.edu

(limited to 100 certificates)
netpartner.bluffton.edu
my.bluffton.edu
net2.bluffton.edu
www.bluffton.edu
webmail.bluffton.edu
www.bluffton.edu
netpartner.bluffton.edu
collegesearchtips.bluffton.edu
homepages.bluffton.edu
libguides.bluffton.edu
my.bluffton.edu
webmail.bluffton.edu
exi.bluffton.edu
collegesearchtips.bluffton.edu
cardid.bluffton.edu
exi.bluffton.edu
www.bluffton.edu
learn.bluffton.edu
collegesearchtips.bluffton.edu
my.bluffton.edu
my.bluffton.edu
www.bluffton.edu
cmds.bluffton.edu
libguides.bluffton.edu
autodiscover.bluffton.edu
my.bluffton.edu
cmds.bluffton.edu
webmail.bluffton.edu
libguides.bluffton.edu
webmail.bluffton.edu
collegesearchtips.bluffton.edu
cmds.bluffton.edu
exi.bluffton.edu
homepages.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
netpartner.bluffton.edu
webmail.bluffton.edu
libguides.bluffton.edu
autodiscover.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
www.bluffton.edu
libguides.bluffton.edu
libguides.bluffton.edu
jenzabar.bluffton.edu
autodiscover.bluffton.edu
jenzabar.bluffton.edu
buvpn.bluffton.edu
www.bluffton.edu
webmail.bluffton.edu
collegesearchtips.bluffton.edu
moodle.bluffton.edu
netpartner.bluffton.edu
homepages.bluffton.edu
libguides.bluffton.edu
connect.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
www.bluffton.edu
libguides.bluffton.edu
my.bluffton.edu
www.bluffton.edu
homepages.bluffton.edu
learn.bluffton.edu
connect.bluffton.edu
libguides.bluffton.edu
netpartner.bluffton.edu
learn.bluffton.edu
connect.bluffton.edu
webmail.bluffton.edu
buvpn.bluffton.edu
my.bluffton.edu
www.bluffton.edu
libguides.bluffton.edu
learn.bluffton.edu
connect.bluffton.edu
moodle.bluffton.edu
netpartner.bluffton.edu
homepages.bluffton.edu
netpartner.bluffton.edu
libguides.bluffton.edu
netpartner.bluffton.edu
staging.bluffton.edu
www.bluffton.edu
learn.bluffton.edu
libguides.bluffton.edu
learn.bluffton.edu
learn.bluffton.edu
learn.bluffton.edu
webmail.bluffton.edu
collegesearchtips.bluffton.edu
webmail.bluffton.edu
moodle.bluffton.edu
staging.bluffton.edu
collegesearchtips.bluffton.edu
my.bluffton.edu
exi.bluffton.edu

Certificate

The complete raw certificate details for my.bluffton.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKlOPksIJWzEriKwAU1g
zl3+cYddVR9K+dI5mnpyqdMgBJclwV1ct2sfmnbgmRHNrGEAOED/acC6P1/IUHef
NisfvAfkzDNf6MsmU09RL830qsf/jLj3MtT5cUaEkSjUoRe9x4ZR+p/Nz0G25Q1S
U+AuNJkAmoe7zNEdZQBecg01t53fdthvN5vR9f66QReYzK8scomcGME6vrn50TJZ
rYmoKQ/VDlCQfSXYn6mjSVEuNo52WY9yYNFtD69R8w4ic5rUndHTqG57vHNOomM9
Uxi6z6G3lYoDGkUGvFepBf6hbKvo4kvDndRWIMMOuhaAOXkVZZJSil2RL5ozvSnk
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54524444033793222406140528584274325020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bluffton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bluffton University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bluffton University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'my.bluffton.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21291522956034115126131967877124366562978248093407560703606067186859423042325530916498182471987819340516683942039349863253300751488609452681392848052899849425361541147007056469211804411145645078983778308165520020109866323037374665854621813270810416897451207944048777809576693833677546197126944036023360627998045192019951435380101023681576048084501521430876572688470011091145007731814005302968770749703837606496190669381679510919476609215523188568705557104965404346296331926580728120521002394400502735774157283176361195410128216336963045771450976787436647810191050564794058884199353881974017082120625225267346322089001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bluffton.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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