cewil.uwaterloo.ca
- University of Waterloo -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 05:09:ac:e9:fd:e2:ca:91:bf:ec:bf:a1 was issued on by GlobalSign nv-sa.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
University of Waterloo
Organization:
University of Waterloo
State / Province:
Ontario
Locality: Waterloo
Country: CA
Locality: Waterloo
Country: CA
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 05:09:ac:e9:fd:e2:ca:91:bf:ec:bf:a1Serial Number (int): 1559121944904087123169951649
Serial Number lenght: 91 bits, 12 octets
SubjectKeyId: 04:23:5e:65:cf:3b:30:5c:95:1a:3d:5e:b8:52:1c:ef:bd:74:ed:b0
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): e7:ea:36:70:ca:ae:6c:8b:86:ee:8f:d1:5b:8b:f6:68:9b:fe:e7:92
Fingerprint (sha256): 02:86:43:34:43:a5:09:2e:3e:92:be:13:95:7e:2c:e0:3f:66:05:1c:e4:84:f3:c4:74:71:7f:3e:64:2f:0c:89
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl
Check the revocation status for certificate cewil.uwaterloo.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cewil.uwaterloo.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cewil.uwaterloo.ca
Other certificates including the domain name uwaterloo.ca
(limited to 100 certificates)
cn-ipam-mc.uwaterloo.ca
rshiny.math.uwaterloo.ca
bolek.uwaterloo.ca
cemc2.math.uwaterloo.ca
icinga.cscf.uwaterloo.ca
cryptoworks21.uwaterloo.ca
bonavista.uwaterloo.ca
git.iqc.uwaterloo.ca
env-emp-vlnx1.uwaterloo.ca
wstore.uwaterloo.ca
epark1.uwaterloo.ca
databace.scisat.ca
www.cs.uwaterloo.ca
ppcentre.uwaterloo.ca
s4b-ec2-fe-ext.uwaterloo.ca
sneaky.uwaterloo.ca
wiki.uwaterloo.ca
ibis.uwaterloo.ca
account.watcard.uwaterloo.ca
cte-blog.uwaterloo.ca
subjectguides.uwaterloo.ca
aurora.uwaterloo.ca
uwhvz.uwaterloo.ca
o365activation.uwaterloo.ca
www.igloosoftware.com
cemc2.math.uwaterloo.ca
cclr.uwaterloo.ca
quark.uwaterloo.ca
shop.uwaterloo.ca
mailservices.uwaterloo.ca
canadianfoodstudies.uwaterloo.ca
koios.cs.uwaterloo.ca
www.igloosoftware.com
multicom-pc20.uwaterloo.ca
env-gisdev.uwaterloo.ca
learntest.uwaterloo.ca
blockchain-group.cs.uwaterloo.ca
evaluate.uwaterloo.ca
info.uwaterloo.ca
lineone.uwaterloo.ca
webreg.uwaterloo.ca
nagios.cscf.uwaterloo.ca
aurora.uwaterloo.ca
epark.uwaterloo.ca
cn-vpn.uwaterloo.ca
ahs-jitsi.uwaterloo.ca
rcs.uwaterloo.ca
wchound.uwaterloo.ca
sasfilemaker.math.uwaterloo.ca
mmm.eng.uwaterloo.ca
essex.uwaterloo.ca
contensis.uwaterloo.ca
www.civil.uwaterloo.ca
cclr.uwaterloo.ca
lineone.uwaterloo.ca
chesp.uwaterloo.ca
learndev3.uwaterloo.ca
ugtwo.uwaterloo.ca
smbp.uwaterloo.ca
library.uwaterloo.ca
2fa.uwaterloo.ca
secure.ce.uwaterloo.ca
cn-vpn.uwaterloo.ca
shop.uwaterloo.ca
styx-reserve.shoshin.uwaterloo.ca
iis1.nexus.uwaterloo.ca
iisweb2.nexus.uwaterloo.ca
uwhvz.uwaterloo.ca
www.eng.uwaterloo.ca
shop.uwaterloo.ca
cewil.uwaterloo.ca
lss.uwaterloo.ca
rt.uwaterloo.ca
ne111.uwaterloo.ca
sslvs06.igloosoftware.com
uqml.iqc.uwaterloo.ca
env-kix-tours.uwaterloo.ca
learndevdav.uwaterloo.ca
qoqiwiki.iqc.uwaterloo.ca
learn.uwaterloo.ca
wcms-training.uwaterloo.ca
mansci045.uwaterloo.ca
ctf.uwaterloo.ca
sesoc.uwaterloo.ca
courseware.cemc.uwaterloo.ca
healthy.uwaterloo.ca
ivc.uwaterloo.ca
mansci045.uwaterloo.ca
courses.math.uwaterloo.ca
artsonline.uwaterloo.ca
staff.retailservices.uwaterloo.ca
ist.uwaterloo.ca
himrod-reserve.cs.uwaterloo.ca
wiki.math.uwaterloo.ca
macduff.private.uwaterloo.ca
wcms-training.uwaterloo.ca
quest.pecs.uwaterloo.ca
libanswers.uwaterloo.ca
stargroup.uwaterloo.ca
mansci045e.uwaterloo.ca
rshiny.math.uwaterloo.ca
bolek.uwaterloo.ca
cemc2.math.uwaterloo.ca
icinga.cscf.uwaterloo.ca
cryptoworks21.uwaterloo.ca
bonavista.uwaterloo.ca
git.iqc.uwaterloo.ca
env-emp-vlnx1.uwaterloo.ca
wstore.uwaterloo.ca
epark1.uwaterloo.ca
databace.scisat.ca
www.cs.uwaterloo.ca
ppcentre.uwaterloo.ca
s4b-ec2-fe-ext.uwaterloo.ca
sneaky.uwaterloo.ca
wiki.uwaterloo.ca
ibis.uwaterloo.ca
account.watcard.uwaterloo.ca
cte-blog.uwaterloo.ca
subjectguides.uwaterloo.ca
aurora.uwaterloo.ca
uwhvz.uwaterloo.ca
o365activation.uwaterloo.ca
www.igloosoftware.com
cemc2.math.uwaterloo.ca
cclr.uwaterloo.ca
quark.uwaterloo.ca
shop.uwaterloo.ca
mailservices.uwaterloo.ca
canadianfoodstudies.uwaterloo.ca
koios.cs.uwaterloo.ca
www.igloosoftware.com
multicom-pc20.uwaterloo.ca
env-gisdev.uwaterloo.ca
learntest.uwaterloo.ca
blockchain-group.cs.uwaterloo.ca
evaluate.uwaterloo.ca
info.uwaterloo.ca
lineone.uwaterloo.ca
webreg.uwaterloo.ca
nagios.cscf.uwaterloo.ca
aurora.uwaterloo.ca
epark.uwaterloo.ca
cn-vpn.uwaterloo.ca
ahs-jitsi.uwaterloo.ca
rcs.uwaterloo.ca
wchound.uwaterloo.ca
sasfilemaker.math.uwaterloo.ca
mmm.eng.uwaterloo.ca
essex.uwaterloo.ca
contensis.uwaterloo.ca
www.civil.uwaterloo.ca
cclr.uwaterloo.ca
lineone.uwaterloo.ca
chesp.uwaterloo.ca
learndev3.uwaterloo.ca
ugtwo.uwaterloo.ca
smbp.uwaterloo.ca
library.uwaterloo.ca
2fa.uwaterloo.ca
secure.ce.uwaterloo.ca
cn-vpn.uwaterloo.ca
shop.uwaterloo.ca
styx-reserve.shoshin.uwaterloo.ca
iis1.nexus.uwaterloo.ca
iisweb2.nexus.uwaterloo.ca
uwhvz.uwaterloo.ca
www.eng.uwaterloo.ca
shop.uwaterloo.ca
cewil.uwaterloo.ca
lss.uwaterloo.ca
rt.uwaterloo.ca
ne111.uwaterloo.ca
sslvs06.igloosoftware.com
uqml.iqc.uwaterloo.ca
env-kix-tours.uwaterloo.ca
learndevdav.uwaterloo.ca
qoqiwiki.iqc.uwaterloo.ca
learn.uwaterloo.ca
wcms-training.uwaterloo.ca
mansci045.uwaterloo.ca
ctf.uwaterloo.ca
sesoc.uwaterloo.ca
courseware.cemc.uwaterloo.ca
healthy.uwaterloo.ca
ivc.uwaterloo.ca
mansci045.uwaterloo.ca
courses.math.uwaterloo.ca
artsonline.uwaterloo.ca
staff.retailservices.uwaterloo.ca
ist.uwaterloo.ca
himrod-reserve.cs.uwaterloo.ca
wiki.math.uwaterloo.ca
macduff.private.uwaterloo.ca
wcms-training.uwaterloo.ca
quest.pecs.uwaterloo.ca
libanswers.uwaterloo.ca
stargroup.uwaterloo.ca
mansci045e.uwaterloo.ca
Certificate
The complete raw certificate details for cewil.uwaterloo.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIMBQms6f3iypG/7L+hMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTExMjYxNjA2MTJaFw0y MTAzMTIyMDAxMDJaMHAxCzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMREw DwYDVQQHEwhXYXRlcmxvbzEfMB0GA1UEChMWVW5pdmVyc2l0eSBvZiBXYXRlcmxv bzEbMBkGA1UEAxMSY2V3aWwudXdhdGVybG9vLmNhMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAhPT0Jhc7+07+1a98MXUepeA3qtq65JD9QOvLr7Mnw340 Rm03meKavpu66IcrP115hQ2j33BFwQvDnN787tMv195lESOxzlbVgyU5Yptz8yXq D09yooAYwZrAjvd8WJkSOOTnim1AzE82s7uRkcfdU8e5MLSDyESdxJ72YI266m9g +fHWuX7BFjBtMKO2gSvt18nKdGT5Web8m2fOrip5JnN7ifjwM6YfQcLsHPpH9WGZ Y+2pyfy+zutyXA9ka7dgh+olLOjNW6TaCwleSUCg0vou2an4Opv0rthjfoap+vIY sTzy1YdpMq+lt68/HEm2x7sSR7PnyC1SIcjyAEFzGQIDAQABo4IB3DCCAdgwDgYD VR0PAQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRw Oi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4 LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Ny c2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUF BwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZn gQwBAgIwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmds b2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3JsMB0GA1UdEQQWMBSCEmNl d2lsLnV3YXRlcmxvby5jYTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw HwYDVR0jBBgwFoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFAQjXmXP OzBclRo9XrhSHO+9dO2wMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2gO8aFofj8OzNpn7vlg6qCr+keXucVb+IZQUhT3HqrM+0W4AtLQzP oDcm/R2T4c8yrwQyilBGk1qaUZLoBOnVbMp/x4dx4idpen5gkoO7dCV73IGTeMtm mdcKjr0U8GtGtodUWifeUFmIe0VWpzY1SBdaoPN3POHxd4T+nblGnai7nXBLjHIN i2IPb0wXtzpQxuzIxAm2JcHYRZ+C5NDCijIIygaAKgVOfk+J3KI+jq0DvU8fgust 5YwA4RTVXcRVqfB8r9PWfzIDM8R7BC7Auy4Ta8cR3jcbDrLUcxcIqEBbZK3yPOn0 JU6a9Q/nKF6X4sKSqX5mC8fi9YcRcvb4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPT0Jhc7+07+1a98MXUe peA3qtq65JD9QOvLr7Mnw340Rm03meKavpu66IcrP115hQ2j33BFwQvDnN787tMv 195lESOxzlbVgyU5Yptz8yXqD09yooAYwZrAjvd8WJkSOOTnim1AzE82s7uRkcfd U8e5MLSDyESdxJ72YI266m9g+fHWuX7BFjBtMKO2gSvt18nKdGT5Web8m2fOrip5 JnN7ifjwM6YfQcLsHPpH9WGZY+2pyfy+zutyXA9ka7dgh+olLOjNW6TaCwleSUCg 0vou2an4Opv0rthjfoap+vIYsTzy1YdpMq+lt68/HEm2x7sSR7PnyC1SIcjyAEFz GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1559121944904087123169951649 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 16:06:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-12 20:01:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Waterloo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cewil.uwaterloo.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16784247430004981781031680571601259879521806245080985314085791770285989138280132942867556429789316375177508072990917542485295606218410515799262852935800370030027121253537711572450875435842372352996681900934616207136132256579144547916629147039443749350248416249652799551233131558532226630861488608161324806810308751560589291172272052503561992618546826265163194030381957276844180293197783607775011563181706213069230428233242651580795822143608859009270831909575691287784106406687071235218996721985058024456628239828942359572881024816590396653645181922272195688184854207266668581542526471442700525050552138990731739099929 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cewil.uwaterloo.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 04235e65cf3b305c951a3d5eb8521cefbd74edb0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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