*.annamaria.edu

- Anna Maria College -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 0f:e1:98:66:6b:24:18:ae:c9:25:8c:54:d6:11:63:1f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Anna Maria College

Organization: Anna Maria College
State / Province: Massachusetts
Locality: Paxton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:e1:98:66:6b:24:18:ae:c9:25:8c:54:d6:11:63:1f
Serial Number (int): 21109777770634939760256594074504618783
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e5:62:80:04:f9:0a:44:91:76:bc:26:ed:2d:86:9b:b3:77:64:de:2b
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 0d:c8:06:d9:d5:d2:3f:91:df:f1:20:d1:b0:f3:0e:2b:ce:c3:52:02
Fingerprint (sha256): 3f:83:c5:46:37:17:70:98:60:2c:67:d5:de:57:a1:b2:b0:72:40:14:2f:c1:92:63:e5:2e:df:e0:2a:cd:4c:b0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g28.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g28.crl

Check the revocation status for certificate *.annamaria.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.annamaria.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.annamaria.edu
annamaria.edu

Other certificates including the domain name annamaria.edu

(limited to 100 certificates)
live-web-amc.edu.help
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
5739392471662592-fe3.pantheonsite.io
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
landing.online.annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
online.annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
5739392471662592-fe3.pantheonsite.io
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
webmail.annamaria.edu
landing.online.annamaria.edu
sni223494.cloudflaressl.com
landing.online.annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
5739392471662592-fe3.pantheonsite.io
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
landing.online.annamaria.edu
online.annamaria.edu
online.annamaria.edu
sni223494.cloudflaressl.com
5739392471662592-fe3.pantheonsite.io
sni223494.cloudflaressl.com
sip.annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
engage.annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
apply.annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
landing.online.annamaria.edu
sni223494.cloudflaressl.com
online.annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
engage.annamaria.edu
sni223494.cloudflaressl.com
landing.online.annamaria.edu
sni223494.cloudflaressl.com
apply.annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
www.annamaria.edu
sni223494.cloudflaressl.com
sni223494.cloudflaressl.com
*.annamaria.edu

Certificate

The complete raw certificate details for *.annamaria.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKKAUZMG/DaZ1p7lWp65
Lm6579aOSuqlNqFB6XaiF0195g0bGPTDJZStXzYB0DKIPawzejc3FyaXCiSNc9Sx
olQQvzLj1sVa8/ayPKYtxIWoAH5R2G3Zq1vRANZabzxivMEmCWTu9TauyCxKcbZU
ESGBjVCNZwrs4ZHR+hcMBY8OmNDZUYTJJY2t9eFkbyjkJrXintKUGCHHQ5XAYZq9
GpZyyXn4N7/2r2myFCSPegMFL4U/7CJ0v91BcX3LDTe4m1QCCqSLpt60lf/JYuQL
2C8gvdhLUW2zuo0F166C8287A2/CE+7AUELKo5jBlj3ySvzbLYU+KUC+petYFE3L
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21109777770634939760256594074504618783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paxton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Anna Maria College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.annamaria.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25832746563423662462050114359745126946260533559278707531121771156085007911810143074219122233797143957363975025944617986131780410974664454674452018994413643936401591422957185285387714578666249996822870714526997996436758958660104639101575946369151141580907802338175234902297069815206244791587555791036497276516017312415009052572593267530771283656360838750738871691656743361749016608382541107916971966778091309872972444103953067815870557614667689329910333519824146646292914231906396634129835440575800031296331427832054325689374458106632980849779929539312407250328299486413616916375108694575060371993224072102092569692967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5628004f90a449176bc26ed2d869bb37764de2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annamaria.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annamaria.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g28.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g28.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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