*.daemen.edu

- Daemen College -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 07:5c:b4:d8:3e:c3:f2:1f:00:60:76:c2:d7:0a:52:b7 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Daemen College

Organization: Daemen College
State / Province: New York
Locality: Amherst
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:5c:b4:d8:3e:c3:f2:1f:00:60:76:c2:d7:0a:52:b7
Serial Number (int): 9785955247916330162238005661085094583
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b8:ec:e1:e1:07:92:04:dd:8f:b6:d4:d5:c2:1f:5c:93:91:b4:69:75
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 40:01:02:dc:78:7f:6d:fa:71:f4:bc:80:37:1e:1d:85:32:5d:ec:1d
Fingerprint (sha256): 38:8b:09:93:0b:83:df:22:81:88:cf:aa:fd:96:10:41:ab:7b:06:29:08:bf:89:4e:50:45:50:7f:ba:d4:28:73

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.daemen.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.daemen.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.daemen.edu
daemen.edu

Other certificates including the domain name daemen.edu

(limited to 100 certificates)
secure.mdl.io
wildcats.daemen.edu
*.explore.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
secure.mdl.io
secure.mdl.io
learning.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
us-east-1-san4.blackboard.com
ezproxy.daemen.edu
*.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.daemen.edu
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
my.daemen.edu
secure.mdl.io
lp.daemen.edu
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
sso.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
wildcats.daemen.edu
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
digitalcommons.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
libguides.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
conference.daemen.edu
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
clearpass.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
libguides.daemen.edu
ezproxy.daemen.edu
wildcats.daemen.edu
apply.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
digitalcommons.daemen.edu
pg.daemen.edu

Certificate

The complete raw certificate details for *.daemen.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBEtzzPqnbjlJZaDyEMB
RwFbyFlKBrCsKvnaYZECbzV1fYxBye5vGrL6yxWpY0fZPUv70yFtmyzZK6g1UCav
wq6ZLzYejgbx6of1kMReRSzkwPOhZqwchwULm7Z9Nz5WaIlfUOhNGvOAl0rpYIiX
YAw2tcDX7nWq2+Jpo6t2N/ux8MvFYRYLZKYbtQxsogePyqmtyJECqhPSbPcEB8/7
nXVWXk1kKtAK/L0lYkV8nS4cNf1KjFrTkKnctJILq1BbDuwoGvbp046IuY/5HMK8
xT+ohI+Ml6NWxj+wsUYK65kpU0t4wncmngwAYl3as0/Wba4Glph9UsAPVN+s15Kg
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9785955247916330162238005661085094583
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amherst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Daemen College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.daemen.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21721459706640780781474024522606944821145726666704414801652706172337095594419648049642062784585364372690510344271083934627790181828359147287485300523453462009880878622553147717915721704123753120433055364646200387811460944936751916083253579560576151009951369357354159676669657399959777966745168057455782399286185347029493449076314412279771049908507507449017162191070077477397897951368844987636334192622506597863688873135681721760092820430721873052872130475186095941654094221542505727492641170046683936795831253359654549416040557475334096741695547928059094559345134904910155483957671868284230804607251560402521464938663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8ece1e1079204dd8fb6d4d5c21f5c9391b46975
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daemen.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daemen.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004d2a4aab54f6e66dab9c844c9ab8c6c313a60819eef585d8a7697b4807e540bcabd13006cbbf52a8527aa6e0ad9704e14b16eede2b33ad087f71fadd4f121b5b3c80f664cfad64f6b3fe09c29c0518f378ee3563c912d43fc50dbb6705109325b345a751995656c029dd1aedee8c2e8f7b01bdc70908ea008f2af12b03947f3458e2b2a125158ffc2a54274528010113ccc9ad00ef4b50c59724e976be48c5c0fe73080f4ec308808da9591a6f7346acd03eac0ff71b242a08e1d3fff076d0a49222cf01c9c973ae48d1f9da5d35accbb5566de09440a61f95df16af9e98771d166fccf8d6d6eb8b24783e80748f17b1bfad9074cfcb0d30ebfc59e4e8da6428