news.ubc.ca
Issued by Gandi Standard SSL CA 2
About this certificate
This digital certificate with serial number 3b:7c:fd:41:86:0b:f4:91:a1:75:9f:39:38:60:60:26 was issued on by Gandi.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=news.ubc.ca,OU=Domain Control Validated+OU=Gandi Standard SSL
Gandi
Organization:
Gandi
State / Province:
Paris
Locality: Paris
Country: FR
Locality: Paris
Country: FR
This certificate has expire since
Certificate Details
Serial Number (hex): 3b:7c:fd:41:86:0b:f4:91:a1:75:9f:39:38:60:60:26Serial Number (int): 79073433202714086870971691628144648230
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 62:06:e4:5d:7e:85:db:11:35:fa:68:e7:61:ce:d5:56:c1:ab:6d:57
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea
Fingerprint (sha1): 2e:9f:96:a7:39:a6:e2:89:99:88:3f:7c:9d:9c:76:49:5a:9d:1a:61
Fingerprint (sha256): 01:4e:a9:dc:45:44:12:2a:29:09:6c:92:9d:5c:8f:ef:3e:b4:82:8c:c9:e1:f0:21:d6:a6:9b:73:2b:06:05:2e
Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl
Check the revocation status for certificate news.ubc.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for news.ubc.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
news.ubc.ca
www.news.ubc.ca
www.news.ubc.ca
Other certificates including the domain name ubc.ca
(limited to 100 certificates)
cms.ok.ubc.ca
sakai.te.lms.it.ubc.ca
commons.allard.ubc.ca
intranet.advancement.ubc.ca
teach.educ.ubc.ca
msi.ubc.ca
cs.ubc.ca
soilweb200.landfood.ubc.ca
www.canadianarchaeology.ca
facultycareers.ubc.ca
historyproject.allard.ubc.ca
my.learninganalytics.ubc.ca
bookstore.ubc.ca
centennial.aboriginal.ubc.ca
bis-appadx-p01.ead.ubc.ca
*.familymed.ubc.ca
groupware.ece.ubc.ca
lersse.ece.ubc.ca
explore.forestry.ubc.ca
wiki.math.ubc.ca
database.sustain.ubc.ca
africanstudies.arts.ubc.ca
*.arts.ubc.ca
archives.phas.ubc.ca
indigenous.asia.ubc.ca
rope.health.ubc.ca
qdot-server.phas.ubc.ca
status-beta.cloud.tenable.com
rfcore.msl.ubc.ca
placement.asia.ubc.ca
blogs.ubc.ca
ethics.research.ubc.ca
css.chem.ubc.ca
cio.ubc.ca
ead.ubc.ca
gastro.med.ubc.ca
*.grad.ubc.ca
owncloud.stat.ubc.ca
www.one45.med.ubc.ca
altfundapply.ok.ubc.ca
checkit.ok.ubc.ca
asian.library.ubc.ca
*.ok.ubc.ca
privacymatters.ubc.ca
lddi.educ.ubc.ca
qmi.ubc.ca
celsiusnetworkstatus.com
intranet.ece.ubc.ca
github.students.cs.ubc.ca
eventsverf.ctlt.ubc.ca
*.courses.cpe.ubc.ca
familymed.ubc.ca
chbe.ubc.ca
train.ttps.med.ubc.ca
news.ubc.ca
gsna.nursing.ubc.ca
conferences.ece.ubc.ca
*.hli.ubc.ca
help.ece.ubc.ca
intsci.ubc.ca
future.forestry.ubc.ca
loonlake.ubc.ca
reg.rec.ubc.ca
hematology.med.ubc.ca
lf.buildingoperations.ubc.ca
www.directory.ubc.ca
www.loonlake.ubc.ca
pathology.ubc.ca
cochrane.ti.ubc.ca
*.phas.ubc.ca
cpd.pharmacy.ubc.ca
start.entrepreneurship.ubc.ca
dev.varicarta.msl.ubc.ca
mailhost.math.ubc.ca
it.botany.ubc.ca
students.engineering.ubc.ca
www.acms.ubc.ca
bul.ece.ubc.ca
events.pharmacy.ubc.ca
sadovnickresearch.med.ubc.ca
apply.ece.ubc.ca
fx.sauder.ubc.ca
help.ece.ubc.ca
metropolis.sauder.ubc.ca
irsi.ubc.ca
cdn.ubc.ca
test.edadmin.med.ubc.ca
www.gsat.ubc.ca
cpd.pharmacy.ubc.ca
core.ubc.ca
www.pbl.med.ubc.ca
greencollege.ubc.ca
ls-cwsei.biology.ubc.ca
celsiusnetworkstatus.com
ombudsoffice.ubc.ca
gif8.eos.ubc.ca
mieszko.ece.ubc.ca
uilo.ubc.ca
shibboleth.cwl.ubc.ca
ccfi.educ.ubc.ca
sakai.te.lms.it.ubc.ca
commons.allard.ubc.ca
intranet.advancement.ubc.ca
teach.educ.ubc.ca
msi.ubc.ca
cs.ubc.ca
soilweb200.landfood.ubc.ca
www.canadianarchaeology.ca
facultycareers.ubc.ca
historyproject.allard.ubc.ca
my.learninganalytics.ubc.ca
bookstore.ubc.ca
centennial.aboriginal.ubc.ca
bis-appadx-p01.ead.ubc.ca
*.familymed.ubc.ca
groupware.ece.ubc.ca
lersse.ece.ubc.ca
explore.forestry.ubc.ca
wiki.math.ubc.ca
database.sustain.ubc.ca
africanstudies.arts.ubc.ca
*.arts.ubc.ca
archives.phas.ubc.ca
indigenous.asia.ubc.ca
rope.health.ubc.ca
qdot-server.phas.ubc.ca
status-beta.cloud.tenable.com
rfcore.msl.ubc.ca
placement.asia.ubc.ca
blogs.ubc.ca
ethics.research.ubc.ca
css.chem.ubc.ca
cio.ubc.ca
ead.ubc.ca
gastro.med.ubc.ca
*.grad.ubc.ca
owncloud.stat.ubc.ca
www.one45.med.ubc.ca
altfundapply.ok.ubc.ca
checkit.ok.ubc.ca
asian.library.ubc.ca
*.ok.ubc.ca
privacymatters.ubc.ca
lddi.educ.ubc.ca
qmi.ubc.ca
celsiusnetworkstatus.com
intranet.ece.ubc.ca
github.students.cs.ubc.ca
eventsverf.ctlt.ubc.ca
*.courses.cpe.ubc.ca
familymed.ubc.ca
chbe.ubc.ca
train.ttps.med.ubc.ca
news.ubc.ca
gsna.nursing.ubc.ca
conferences.ece.ubc.ca
*.hli.ubc.ca
help.ece.ubc.ca
intsci.ubc.ca
future.forestry.ubc.ca
loonlake.ubc.ca
reg.rec.ubc.ca
hematology.med.ubc.ca
lf.buildingoperations.ubc.ca
www.directory.ubc.ca
www.loonlake.ubc.ca
pathology.ubc.ca
cochrane.ti.ubc.ca
*.phas.ubc.ca
cpd.pharmacy.ubc.ca
start.entrepreneurship.ubc.ca
dev.varicarta.msl.ubc.ca
mailhost.math.ubc.ca
it.botany.ubc.ca
students.engineering.ubc.ca
www.acms.ubc.ca
bul.ece.ubc.ca
events.pharmacy.ubc.ca
sadovnickresearch.med.ubc.ca
apply.ece.ubc.ca
fx.sauder.ubc.ca
help.ece.ubc.ca
metropolis.sauder.ubc.ca
irsi.ubc.ca
cdn.ubc.ca
test.edadmin.med.ubc.ca
www.gsat.ubc.ca
cpd.pharmacy.ubc.ca
core.ubc.ca
www.pbl.med.ubc.ca
greencollege.ubc.ca
ls-cwsei.biology.ubc.ca
celsiusnetworkstatus.com
ombudsoffice.ubc.ca
gif8.eos.ubc.ca
mieszko.ece.ubc.ca
uilo.ubc.ca
shibboleth.cwl.ubc.ca
ccfi.educ.ubc.ca
Certificate
The complete raw certificate details for news.ubc.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgIQO3z9QYYL9JGhdZ85OGBgJjANBgkqhkiG9w0BAQsFADBf MQswCQYDVQQGEwJGUjEOMAwGA1UECBMFUGFyaXMxDjAMBgNVBAcTBVBhcmlzMQ4w DAYDVQQKEwVHYW5kaTEgMB4GA1UEAxMXR2FuZGkgU3RhbmRhcmQgU1NMIENBIDIw HhcNMTgxMjE4MDAwMDAwWhcNMjAwMzExMjM1OTU5WjBWMSEwHwYDVQQLExhEb21h aW4gQ29udHJvbCBWYWxpZGF0ZWQxGzAZBgNVBAsTEkdhbmRpIFN0YW5kYXJkIFNT TDEUMBIGA1UEAxMLbmV3cy51YmMuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDpo65WkwKaVCQErt6rxVC2SLh6mgboAjnL54BqRlG1iV2f03tiBxqy SXRxPoQ+U4c4Fv+X7KLr7AQO3LpZ1BaaGhoYhl5SWvWZ4wsbkBjNXngg6RO3DIfJ gn7jWuFJpguNLq8Qx4HogGTM7FVu+E+U5PqLm4WOx+FQkZ/L6AWrN+MfsvB/hmZU t1/3zxZNBoJt/tyiDGRDQkeR7oB7PzK0aL9lOTFsVHq7VV/xIrbGuAY8cD+pjwYz FDMRqIT0pOojup5+Uvh825IoiocXVKTEsSsOeClO+/aeIZBTu/RQvWmxySqa7yPM G1dVmDdX8geScxsMALxiABmzNd0oksILAgMBAAGjggMxMIIDLTAfBgNVHSMEGDAW gBSzkKfYya9OzWE8n3ytXX9B/Wkw6jAdBgNVHQ4EFgQUYgbkXX6F2xE1+mjnYc7V VsGrbVcwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMEsGA1UdIAREMEIwNgYLKwYBBAGyMQECAhowJzAl BggrBgEFBQcCARYZaHR0cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgEw QQYDVR0fBDowODA2oDSgMoYwaHR0cDovL2NybC51c2VydHJ1c3QuY29tL0dhbmRp U3RhbmRhcmRTU0xDQTIuY3JsMHMGCCsGAQUFBwEBBGcwZTA8BggrBgEFBQcwAoYw aHR0cDovL2NydC51c2VydHJ1c3QuY29tL0dhbmRpU3RhbmRhcmRTU0xDQTIuY3J0 MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMCcGA1UdEQQg MB6CC25ld3MudWJjLmNhgg93d3cubmV3cy51YmMuY2EwggF+BgorBgEEAdZ5AgQC BIIBbgSCAWoBaAB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAAB Z8L6LXwAAAQDAEcwRQIhAMjBO4Qgpel+W6cEeMGawrZlCc4MFGD2Sf904JpQ1wz+ AiBNuMaYTDtqtp3ylXaizPZ8SjTc6ejnqPOqcP60I+fLdgB1AF6nc/nfVsDntTZI fdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABZ8L6L/cAAAQDAEYwRAIgJ5UPBIOJqIgi qIU6gLBlB4PwnzzPpgCipDHjC4tBKOYCIF0EZzlchJQlu+10efV9cbzHOypeprpo MBedB8mIkDfaAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFn wvotxgAABAMASDBGAiEAuiJnQK2WSELUBx1S0bQouk8rdThiQV+IqVDwyAsNUWEC IQD8MScF14U6v64Bz0CgtUSUkPy+G4EMvXuINa+0BHV4+jANBgkqhkiG9w0BAQsF AAOCAQEAfOvL2/JWlX9O2URiem2R728p1B6pkDxsHb2Jg5c5uqLlO6ZwJWWcr8PV OwOE08fDTPyHpPFH14HiXM8AhlfcpeZEGv9KS1pWTVMRqgBEpM8G7iAk3F2gqKlP iPFPNnZrXAGr5sU/WKt6Y3/Od+0N6j4onQLBCejJf4r8uUCmcv50xzeo4Px7at// G7nIAQ6N4aMBp5FhqKKh15nOgqPDauP6xMVJXb8TJIzHJOrsuAeazJI91AK3iW3D SUjGOiwptNkyoQSIynd7gHOZZOyfw+qmXp71//6r/aFnuuOhKT30jHPSob7j3/T+ MLesE4m3K6KQARLA8SjA0J5fDU5mCQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aOuVpMCmlQkBK7eq8VQ tki4epoG6AI5y+eAakZRtYldn9N7Ygcaskl0cT6EPlOHOBb/l+yi6+wEDty6WdQW mhoaGIZeUlr1meMLG5AYzV54IOkTtwyHyYJ+41rhSaYLjS6vEMeB6IBkzOxVbvhP lOT6i5uFjsfhUJGfy+gFqzfjH7Lwf4ZmVLdf988WTQaCbf7cogxkQ0JHke6Aez8y tGi/ZTkxbFR6u1Vf8SK2xrgGPHA/qY8GMxQzEaiE9KTqI7qeflL4fNuSKIqHF1Sk xLErDngpTvv2niGQU7v0UL1psckqmu8jzBtXVZg3V/IHknMbDAC8YgAZszXdKJLC CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 79073433202714086870971691628144648230 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.ubc.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29494239170648265537866908259589305769032365421990709768832908793239033704703143598127758253787992454103468816958045653662757156573321786429555299079073983782880804868262883633593628240127985568115097590732800900527996909490496224193825421421240400055896455277620922556709708091242524380184441821935412512228837984689766517506547970213021961346134561123879046850456710478810409591690700452923148541411051160941888397044278456770849822349633637928120268282518385887721108445623639001546972087303839101504712793009688617599742608081449120682059308018914059493991493851906133742933013932019920132942619394936719944106507 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6206e45d7e85db1135fa68e761ced556c1ab6d57 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ubc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.news.ubc.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000167c2fa2d7c0000040300473045022100c8c13b8420a5e97e5ba70478c19ac2b66509ce0c1460f649ff74e09a50d70cfe02204db8c6984c3b6ab69df29576a2ccf67c4a34dce9e8e7a8f3aa70feb423e7cb760075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000167c2fa2ff70000040300463044022027950f048389a88822a8853a80b0650783f09f3ccfa600a2a431e30b8b4128e602205d0467395c849425bbed7479f57d71bcc73b2a5ea6ba6830179d07c9889037da007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000167c2fa2dc60000040300483046022100ba226740ad964842d4071d52d1b428ba4f2b753862415f88a950f0c80b0d5161022100fc312705d7853abfae01cf40a0b5449490fcbe1b810cbd7b8835afb4047578fa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007cebcbdbf256957f4ed944627a6d91ef6f29d41ea9903c6c1dbd89839739baa2e53ba67025659cafc3d53b0384d3c7c34cfc87a4f147d781e25ccf008657dca5e6441aff4a4b5a564d5311aa0044a4cf06ee2024dc5da0a8a94f88f14f36766b5c01abe6c53f58ab7a637fce77ed0dea3e289d02c109e8c97f8afcb940a672fe74c737a8e0fc7b6adfff1bb9c8010e8de1a301a79161a8a2a1d799ce82a3c36ae3fac4c5495dbf13248cc724eaecb8079acc923dd402b7896dc34948c63a2c29b4d932a10488ca777b80739964ec9fc3eaa65e9ef5fffeabfda167bae3a1293df48c73d2a1bee3dff4fe30b7ac1389b72ba2900112c0f128c0d09e5f0d4e6609