apps.iwesterne.uwo.ca

- The University of Western Ontario -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 0a:ee:5f:cd:94:b4:a3:9f:10:ef:8e:45:30:c6:08:a3 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The University of Western Ontario

Organization: The University of Western Ontario
Organization unit: ITS
State / Province: Ontario
Locality: London
Country: CA

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ee:5f:cd:94:b4:a3:9f:10:ef:8e:45:30:c6:08:a3
Serial Number (int): 14529989726888270818586879741105932451
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 6a:66:3f:f4:b1:9d:fc:46:ac:de:06:5c:b0:a5:d3:29:8d:ef:33:a9
Fingerprint (sha256): 0b:8e:97:89:df:0d:fc:62:a0:df:a2:38:ea:8d:86:e6:c1:87:c9:d4:a4:17:e5:9c:b1:c0:4f:ef:57:d7:8b:08

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate apps.iwesterne.uwo.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.iwesterne.uwo.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.iwesterne.uwo.ca

Other certificates including the domain name uwo.ca

(limited to 100 certificates)
internalapps.uwo.ca
win4.uwo.ca
www.ipb.uwo.ca
www.schulich.uwo.ca
ssts.uwo.ca
dropz.its.uwo.ca
jira.schulich.uwo.ca
sofl2a.uwo.ca
grad.uwo.ca
recruit.uwo.ca
star.schulich.uwo.ca
www.uwo.ca
*.sp.uwo.ca
www.extranet.uwo.ca
draftmyschedule.uwo.ca
owl.uwo.ca
rest.has.uwo.ca
*.sp.uwo.ca
notifylink.uwo.ca
hospitalityservices.uwo.ca
outlook.kings.uwo.ca
ce.uwo.ca
pma.uwo.ca
instruct.uwo.ca
pma.uwo.ca
ivey.uwo.ca
spamtrap.uwo.ca
internalapps-qat.uwo.ca
applywesternrem.uwo.ca
kiwi.uwo.ca
webapps.uwo.ca
mail.edu.uwo.ca
www.edu.uwo.ca
firstnationsstudies.uwo.ca
sso.uwo.ca
outlook.kings.uwo.ca
myhr.uwo.ca
www.edu.uwo.ca
kucprint01.kc.uwo.ca
remote-gate.uwo.ca
appointmentsdev.uwo.ca
mysurveys.uwo.ca
iveytrading.ivey.uwo.ca
webapps.fims.uwo.ca
ssc.uwo.ca
ohstraining.uwo.ca
spamtrap.uwo.ca
edq.uwo.ca
eateries.uwo.ca
residence.uwo.ca
servlet-dev.uwo.ca
owlhelp.uwo.ca
tableau.uwo.ca
mystarrez.uwo.ca
cas.schulich.uwo.ca
*.eng.uwo.ca
m.onsite.uwo.ca
law.uwo.ca
westerncalendar.uwo.ca
api-qat.ramp.uwo.ca
www.graphicservices.uwo.ca
ir.lib.uwo.ca
security.uwo.ca
*.communications.uwo.ca
spamtrap.uwo.ca
sert.uwo.ca
retain.has.uwo.ca
events.uwo.ca
kiwi.uwo.ca
rezlife.uwo.ca
chrldb.nca.uwo.ca
api-qat.ramp.uwo.ca
www.fims.uwo.ca
eateries.uwo.ca
papercut.uwo.ca
sakdev.uwo.ca
ssocas.uwo.ca
wcs.uwo.ca
catering.has.uwo.ca
ir.lib.uwo.ca
discourse.syllabus.fims.uwo.ca
am.uwo.ca
chrldb.nca.uwo.ca
student.uwo.ca
wcs.uwo.ca
redcap.schulich.uwo.ca
apps.iwesterne.uwo.ca
www.kings.uwo.ca
webtest2.has.uwo.ca
dl.nca.uwo.ca
impact.uwo.ca
myhousing.uwo.ca
dropz.its.uwo.ca
imap.nca.uwo.ca
www.ivey.uwo.ca
webtest2.has.uwo.ca
sscsecure.uwo.ca
www.schulich.uwo.ca
mediarelations.uwo.ca
jdc.math.uwo.ca

Certificate

The complete raw certificate details for apps.iwesterne.uwo.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL8bb8WffTgxJm46yYEc
goLpWnC2+7Mq+WZ5M/TPyyhXzpfxP8NJF9K8NHBZHRkyl6YL1Evc6nNjNLRiULzg
lBIrJRv7sL94ddhYYRIqYhfU/5P5zl8JVy9I5SmHoTOFaGLFYakYM4ozvxP5bJt7
RDVtZ/UV1AAgs9K49JdNZALfJ1mWQsdI8AimVSfJysLu2kQnGzDJslE5sX3Qa8KE
fJ16BoONulpk5Vtoz/rETjvJvW6PCAK3LVcZF+fuYeMHlC2ZooRsIlqizaWKm6lM
DqHlJGPLMzdahqk1oRrbyRlwri6gd50R25mhjCqAF3EXHezIY7CUw4h30o6s/osv
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14529989726888270818586879741105932451
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'The University of Western Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'apps.iwesterne.uwo.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23322086573695347267687507897090977079409977794536911803613328639278878644617042066452073739859051580006992729179486358834645467274808574100114822213340924571487594530491036213878762618076670980407395377590596229503707618634129207409003393263671960861405688413821126247495890635443869151164892496896155055477215292778599105098477037675310035042068001655944218303252151407072669589839624497705623141236889555447310035506765385398403208079175250518860144515924056607935943804019212623975528498878775338300038604732746567731785877461275243266054170295040155430754743347111308936313043401057460266873968403799199164608367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.iwesterne.uwo.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ad87454c6738f51c5d6c922c4fce2fe994a9680443199ad29e961b343d3d098b67c530463269d23eb6214bfdc0281857c69100ab8dae1d08a1d34f65ae433280fdf426bb0dab7de5aaee24e5d0d20e0055e7693bbc1c9b5d3e7aa7ef11f5e17202875f3652dd96bba18762a236630eb412d2cc753d2218ed89f4824b613f07a62730097b227e86a068752f374aa2b0942052d00cb16328c59fe488fd0c0a12884c7e9d20d4e3756067c9cfca311c0f28e5f86a180aa8409d362856a056c6eee8bb22d4dda51577bd92abfecfa8d2f9b25d01b8698aff66ce15cbb116b1242a1e862a17ed715648476c925cca97f68abc1de369bbd188bd8b975ed0bd4ab668e