netpartner.bluffton.edu

- Bluffton University -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:be:42:c5:45:aa:bb:50:b8:1b:ed:2a:13:42:e1:64 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bluffton University

Organization: Bluffton University
Organization unit: Bluffton University
State / Province: Ohio
Locality: Bluffton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:be:42:c5:45:aa:bb:50:b8:1b:ed:2a:13:42:e1:64
Serial Number (int): 12950942633728584064423121406264533348
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 65:8b:1e:7c:b5:40:4c:e4:df:fe:5f:67:58:3f:6d:d7:dc:fe:b9:3a
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 84:4f:d0:a4:fa:d6:e0:4b:1d:cb:f4:2e:e8:00:1e:f3:11:b7:97:ce
Fingerprint (sha256): 7a:87:f0:f9:32:a2:b6:b8:85:8b:e2:e3:ba:4c:9b:6c:91:8c:1d:66:34:e0:f3:c4:15:6a:b6:45:4f:49:1f:4d

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate netpartner.bluffton.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for netpartner.bluffton.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

netpartner.bluffton.edu

Other certificates including the domain name bluffton.edu

(limited to 100 certificates)
netpartner.bluffton.edu
my.bluffton.edu
net2.bluffton.edu
www.bluffton.edu
webmail.bluffton.edu
www.bluffton.edu
netpartner.bluffton.edu
collegesearchtips.bluffton.edu
homepages.bluffton.edu
libguides.bluffton.edu
my.bluffton.edu
webmail.bluffton.edu
exi.bluffton.edu
collegesearchtips.bluffton.edu
cardid.bluffton.edu
exi.bluffton.edu
www.bluffton.edu
learn.bluffton.edu
collegesearchtips.bluffton.edu
my.bluffton.edu
my.bluffton.edu
www.bluffton.edu
cmds.bluffton.edu
libguides.bluffton.edu
autodiscover.bluffton.edu
my.bluffton.edu
cmds.bluffton.edu
webmail.bluffton.edu
libguides.bluffton.edu
webmail.bluffton.edu
collegesearchtips.bluffton.edu
cmds.bluffton.edu
exi.bluffton.edu
homepages.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
netpartner.bluffton.edu
webmail.bluffton.edu
libguides.bluffton.edu
autodiscover.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
www.bluffton.edu
libguides.bluffton.edu
libguides.bluffton.edu
jenzabar.bluffton.edu
autodiscover.bluffton.edu
jenzabar.bluffton.edu
buvpn.bluffton.edu
www.bluffton.edu
webmail.bluffton.edu
collegesearchtips.bluffton.edu
moodle.bluffton.edu
netpartner.bluffton.edu
homepages.bluffton.edu
libguides.bluffton.edu
connect.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
www.bluffton.edu
libguides.bluffton.edu
my.bluffton.edu
www.bluffton.edu
homepages.bluffton.edu
learn.bluffton.edu
connect.bluffton.edu
libguides.bluffton.edu
netpartner.bluffton.edu
learn.bluffton.edu
connect.bluffton.edu
webmail.bluffton.edu
buvpn.bluffton.edu
my.bluffton.edu
www.bluffton.edu
libguides.bluffton.edu
learn.bluffton.edu
connect.bluffton.edu
moodle.bluffton.edu
netpartner.bluffton.edu
homepages.bluffton.edu
netpartner.bluffton.edu
libguides.bluffton.edu
netpartner.bluffton.edu
staging.bluffton.edu
www.bluffton.edu
learn.bluffton.edu
libguides.bluffton.edu
learn.bluffton.edu
learn.bluffton.edu
learn.bluffton.edu
webmail.bluffton.edu
collegesearchtips.bluffton.edu
webmail.bluffton.edu
moodle.bluffton.edu
staging.bluffton.edu
collegesearchtips.bluffton.edu
my.bluffton.edu
exi.bluffton.edu

Certificate

The complete raw certificate details for netpartner.bluffton.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosl+mTJPG4awBRrghSgJ
GYMwSS+85nVEKJ1jSR5OfmHSHYa+iCYArSWu/an4/fH4IQOaDRb4P47tGG61Ltyw
N1HBiBp16iwd3M9dFuQyjq5reschUURuEwmkr4vVW7xECraFoj9tQzALMn+PCy/E
7D2fJu7BzA1CEh/D/HRpebEMIQc9nRJLko6sSdndlPGp8tfL7Yb9hpb86C2M8Aq7
PPc/22R83fNdw5KJffpigNkHeOxcCdbz0D9n/MkXfCX1UK9pboHzC86sDf3KRNnI
F8pzB41VgZY704YqZjAxfzsLcRGLZ4UiXrzjOdeb/FPxNy5biYbos/FR8DRQ4zpq
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12950942633728584064423121406264533348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bluffton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bluffton University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bluffton University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netpartner.bluffton.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20549966058047312960247380019117296777738086392951813102074938036305161312311366609839500185170860140641490071807709539068892110652160063071324677836875166066256208295659322665352928027385063227045139247773226922487714229429532074640734891189987211497156012662051923810130378871522771657967304160752808672242166757314711033239801886323162505516470736803692629112038475966583307685933039204944979381468670401420618422105397918230793332968467109470954936630460901379250610543971449163972231653113560807937293481461820822809717194238577571470093958466602721771046632206347583427946636473013862657189607058321614315350753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							658b1e7cb5404ce4dffe5f67583f6dd7dcfeb93a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpartner.bluffton.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c76e1bc807692d30f661cbae5e934648c60e9fc1fcec2f2f3f4bd6cdb7817dc6c201d8abb848ac7ab72eb890e572736a5a91f70f66f4d17b336d999fe4fb4218f239341c7b0a4b969079d57fb227917b793e8a630b7d2781deafa1ddaa4bd3033164f4274eee1f4e6dfe3057eb2e110f40d6da43b56784b693970b16fc2348425f43befff894809ac8450c5d260b626426ab6321ed94215ed7ee1ac32861ec1855f48809ec440a78ed93465b5c6aa60e6a7cf1836566a02c0837c667b8616dee2bac0ef24efcc9f87a83e811d6e4789be994129dbfb1e17de43ab36acad35c1b6e0ca5e5b28b327bc37c2a3d3ae72f9f12ebc2957bf21335a0543ea056964022