pg.daemen.edu

- Daemen College -

Issued by Thawte SGC CA - G2

About this certificate

This digital certificate with serial number 14:de:3f:82:8b:32:47:7f:cc:f8:d4:80:0e:88:ea:24 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Daemen College

Organization: Daemen College
Organization unit: IRM
State / Province: New York
Locality: Amherst
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 14:de:3f:82:8b:32:47:7f:cc:f8:d4:80:0e:88:ea:24
Serial Number (int): 27738537952838406402884772970067716644
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 24:c0:c0:a4:49:3c:52:0b:12:d8:92:0c:51:d1:87:a7:4d:54:75:2c

Fingerprint (sha1): 16:3e:68:18:75:dd:5c:3a:83:b4:7a:24:0b:c5:33:bf:7a:9c:81:1c
Fingerprint (sha256): 75:ae:32:20:48:b3:7c:80:6c:52:73:11:f7:ba:2c:42:00:2a:04:8b:cc:93:e8:98:fe:2d:00:8a:3a:e4:c4:de

Issuing Certificate URL: http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl

Check the revocation status for certificate pg.daemen.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pg.daemen.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pg.daemen.edu

Other certificates including the domain name daemen.edu

(limited to 100 certificates)
secure.mdl.io
wildcats.daemen.edu
*.explore.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
secure.mdl.io
secure.mdl.io
learning.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
us-east-1-san4.blackboard.com
ezproxy.daemen.edu
*.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.daemen.edu
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
my.daemen.edu
secure.mdl.io
lp.daemen.edu
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
sso.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
wildcats.daemen.edu
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
digitalcommons.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
libguides.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
conference.daemen.edu
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
clearpass.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
libguides.daemen.edu
ezproxy.daemen.edu
wildcats.daemen.edu
apply.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
digitalcommons.daemen.edu
pg.daemen.edu

Certificate

The complete raw certificate details for pg.daemen.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/TRYFGBgj1VVMrqlRlH
jTUjS+HaaleCkC2VT/GsLRzx5+1dRNy6CprAtbTFTXVLw/AbJlglcCIM0mEonVRK
rzItV7Y1o0U3TnTXtmG/7MOvReMYfPt8BEtKvXtdUt7agCilsE53kcIup6WavrpM
CvP9xfcW+FZ/FnvxE16nqaQQr7tIVDaWw17wplLOJaJHCMhhzKUcAk5uVef1GbPj
HdUTpqFRXkglBW03jRzLL6B3TrElEaJx0zHcNtnMPWwbCIImHTb4ZIjfcsUMYtAY
4aKLcG2FQRoTzZNWTGRFrqSSTExbMlvRxLE8J+5swrg5R3n8Yff3cWOdiE83LIW8
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27738537952838406402884772970067716644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SGC CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Amherst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Daemen College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IRM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'pg.daemen.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22717380783008696962446805719460041474076136449558992572565540594342308390338794583295124433813631271523132761819582448158943267427718015721678457555717112747548742322637970391317820755888046018946114932859052967010760242119332254086679315344366639787110359001592955435264847515754226169635990074940052808618331364255458968680612361060540534557786350991252894699204352198977777695450597624807464486840520214994281891305754517982305388748373242197981123537913974763201010469479541451210340226081744784443355832582060904291727203751081495606591452068496623272208644618012607673710121718406420307237046130310535239285891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg.daemen.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24c0c0a4493c520b12d8920c51d187a74d54752c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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