wcs.uwo.ca

- The University of Western Ontario -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 46:24:4b:c3:4d:9f:71:2b:fb:f5:8d:b6:e6:7e:39:f5 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The University of Western Ontario

Organization: The University of Western Ontario
Organization unit: Western Continuing Studies
State / Province: Ontario
Locality: London
Country: CA

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:24:4b:c3:4d:9f:71:2b:fb:f5:8d:b6:e6:7e:39:f5
Serial Number (int): 93234419046086428455061647931903719925
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 15:f3:86:f0:d1:5a:30:cc:98:62:1e:09:28:c6:8d:15:a4:e7:8e:d9
Fingerprint (sha256): 09:e2:13:1a:65:ef:48:ac:29:91:a0:fd:3a:de:9d:36:3e:cb:1c:c3:7d:66:57:e1:ef:6b:2b:c5:76:2a:fc:6e

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate wcs.uwo.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wcs.uwo.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wcs.uwo.ca

Other certificates including the domain name uwo.ca

(limited to 100 certificates)
internalapps.uwo.ca
win4.uwo.ca
www.ipb.uwo.ca
www.schulich.uwo.ca
ssts.uwo.ca
dropz.its.uwo.ca
jira.schulich.uwo.ca
sofl2a.uwo.ca
grad.uwo.ca
recruit.uwo.ca
star.schulich.uwo.ca
www.uwo.ca
*.sp.uwo.ca
www.extranet.uwo.ca
draftmyschedule.uwo.ca
owl.uwo.ca
rest.has.uwo.ca
*.sp.uwo.ca
notifylink.uwo.ca
hospitalityservices.uwo.ca
outlook.kings.uwo.ca
ce.uwo.ca
pma.uwo.ca
instruct.uwo.ca
pma.uwo.ca
ivey.uwo.ca
spamtrap.uwo.ca
internalapps-qat.uwo.ca
applywesternrem.uwo.ca
kiwi.uwo.ca
webapps.uwo.ca
mail.edu.uwo.ca
www.edu.uwo.ca
firstnationsstudies.uwo.ca
sso.uwo.ca
outlook.kings.uwo.ca
myhr.uwo.ca
www.edu.uwo.ca
kucprint01.kc.uwo.ca
remote-gate.uwo.ca
appointmentsdev.uwo.ca
mysurveys.uwo.ca
iveytrading.ivey.uwo.ca
webapps.fims.uwo.ca
ssc.uwo.ca
ohstraining.uwo.ca
spamtrap.uwo.ca
edq.uwo.ca
eateries.uwo.ca
residence.uwo.ca
servlet-dev.uwo.ca
owlhelp.uwo.ca
tableau.uwo.ca
mystarrez.uwo.ca
cas.schulich.uwo.ca
*.eng.uwo.ca
m.onsite.uwo.ca
law.uwo.ca
westerncalendar.uwo.ca
api-qat.ramp.uwo.ca
www.graphicservices.uwo.ca
ir.lib.uwo.ca
security.uwo.ca
*.communications.uwo.ca
spamtrap.uwo.ca
sert.uwo.ca
retain.has.uwo.ca
events.uwo.ca
kiwi.uwo.ca
rezlife.uwo.ca
chrldb.nca.uwo.ca
api-qat.ramp.uwo.ca
www.fims.uwo.ca
eateries.uwo.ca
papercut.uwo.ca
sakdev.uwo.ca
ssocas.uwo.ca
wcs.uwo.ca
catering.has.uwo.ca
ir.lib.uwo.ca
discourse.syllabus.fims.uwo.ca
am.uwo.ca
chrldb.nca.uwo.ca
student.uwo.ca
wcs.uwo.ca
redcap.schulich.uwo.ca
apps.iwesterne.uwo.ca
www.kings.uwo.ca
webtest2.has.uwo.ca
dl.nca.uwo.ca
impact.uwo.ca
myhousing.uwo.ca
dropz.its.uwo.ca
imap.nca.uwo.ca
www.ivey.uwo.ca
webtest2.has.uwo.ca
sscsecure.uwo.ca
www.schulich.uwo.ca
mediarelations.uwo.ca
jdc.math.uwo.ca

Certificate

The complete raw certificate details for wcs.uwo.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3CMwkwFHZlFuQKbBrF9
dHILkZEkYdOw8zU5V2o/fe4+1YKq/OiHqpaVuf6hGvf4Ye7CFooL8+JCjSsHxhcU
t6s5z8wEtG2o9nwsHsxRtIAyNWLqGLgwoePxC9LyvCfq5TLI2obolCHNaPfgrbMg
43DC8wXPhkTKLb9GvAujB4m+1g0N23bsZNMyvI4v2pDH4/4euEcipl1JoVmqFeHB
gk2vHbTBs62r878h7scL2kO6RKpqVe/YawvyqXVkZntFHRhJfIU7/URmVyX+/L8d
coFwA7ASSG5glJQiyu00momeQuJJOLRBNzMzqHqrRy6LDi9yWvEsKfWQaVW6ByUk
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93234419046086428455061647931903719925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The University of Western Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Western Continuing Studies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wcs.uwo.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24671969862883393221782479919555132173139102433448396884836137516937939641450837514889074987815180160589714351337887719142216722968446022602501074913847349670238355320065516762463408816421186945776640101689123972444528115607067943777349351403986288684557222259531920077937762341931801899137869578599036439133152332393632403330117137584158692844302340552339842537633987060723109501462908083360451365567469966080672278904057513177310373368455804640425814040473620360188924287410252563184684409265581751663958841593063427380744387715174446852593975446811046357473570163555408109510840544276700221441110052532123953603831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcs.uwo.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015bee707f900000040300473045022100fec1512ed10861da5bbbbd95a8a711eacdeee98ad963266226f1702a840fbd76022024331742e27b4a2e48a8e40a6dc2f1e6b95384afa94d3a4294420f61c216761d007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015bee707fb70000040300473045022017466d9d5d073e8d43444eb22aca74d692215eb3dd3128c4a544df76d55e5a3b022100e1799cb3b1db0b509134408effa375b276296c521d01968757619ec08fb8816c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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