support.ivey.ca

- Richard Ivey School of Business Foundation -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 0c:7d:f0:df:c8:b4:f2:c9:3c:a7:0a:e5:76:e5:fc:91 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Richard Ivey School of Business Foundation

Organization: Richard Ivey School of Business Foundation
Organization unit: Richard Ivey School of Business Foundation
State / Province: Ontario
Locality: London
Country: CA

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:7d:f0:df:c8:b4:f2:c9:3c:a7:0a:e5:76:e5:fc:91
Serial Number (int): 16604658565036716146915561675336055953
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 21:6e:e5:3a:8f:8a:0e:de:84:25:85:93:22:c4:7b:f6:b6:1c:5f:e0
Fingerprint (sha256): 10:75:c6:32:d7:e1:93:be:18:49:bd:26:43:72:2a:60:48:d4:f7:dd:92:5c:58:35:fc:f7:39:a3:25:16:9e:04

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate support.ivey.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.ivey.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.ivey.ca

Other certificates including the domain name ivey.ca

(limited to 100 certificates)
ivey.ca
support.ivey.ca
status.sandsiv.com
foxtrot.status.descartes.com
status.ivey.ca
support.ivey.ca
slcwifi.ivey.ca
apply.ivey.ca
status.sandsiv.com
execed.ivey.ca
learn.ivey.ca
support.ivey.ca
status.sandsiv.com
slcwifi.ivey.ca
EMAIL.IVEY.CA
media.ivey.ca
statuspage.e2open.com
status.sandsiv.com
apps.ivey.ca
systemstatus.clinisys.com
execed.ivey.ca
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
support.ivey.ca
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
printing.ivey.ca
systemstatus.clinisys.com
nospam.ivey.ca
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
www.ivey.uwo.ca
status-namer-gtassurancetool.gtil.gt.com
support.ivey.ca
leapstatus.gtil.gt.com
support.ivey.ca
media.ivey.ca
status.sandsiv.com
status.plataformasintese.com
systemstatus.clinisys.com
nospam.ivey.ca
status.sandsiv.com
status.sandsiv.com
email.ivey.ca
facilities.ivey.ca
support.ivey.ca
ivey.ca
status.sandsiv.com
*.ivey.ca
my.ivey.ca
facilities.ivey.ca
status.ivey.ca
support.ivey.ca
email.ivey.ca
status.sandsiv.com
status.sandsiv.com
status.ivey.ca
*.ivey.ca
facilities.ivey.ca
status.sandsiv.com
*.ivey.ca
status.plataformasintese.com
execdev.ivey.ca
email.ivey.ca
ivey.ca
statuspage.e2open.com
execed.ivey.ca
www.ivey.uwo.ca
my.ivey.ca
ipu.ivey.ca
support.ivey.ca
ivey-toronto-wlc.ivey.ca
status.sandsiv.com
leapstatus.gtil.gt.com
status.sandsiv.com
support.ivey.ca
status.sandsiv.com
status.wilsongirgenti.com
status.extrinsec.com
media.ivey.ca
status.sandsiv.com
statuspage.e2open.com
execed.ivey.ca
facilities.ivey.ca
status.sandsiv.com
status.sandsiv.com
foxtrot.status.descartes.com
status.tesseract.co.uk
learn.ivey.ca
execdev.ivey.ca
sso.ivey.ca
ivey.ca
foxtrot.status.descartes.com
foxtrot.status.descartes.com
status.extrinsec.com
status.plataformasintese.com
facilities.ivey.ca
status.extrinsec.com
nospam.ivey.ca

Certificate

The complete raw certificate details for support.ivey.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16604658565036716146915561675336055953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richard Ivey School of Business Foundation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richard Ivey School of Business Foundation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'support.ivey.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831744444959751063445024420760682998640909072011573347646089446349637049364401783444969660885041000009663225969915897764159287798446283534299108564829431296194080088289352718767586019881007317695851386209617069100139209684528159807402203153304377997865490127893533625122682930027313483224766082225244315670928508207371595578997784948647265537951448040638428559196394855111495620589906990956405325979474881655825668023465684781037304080765178353627884886703615732850086283557850213683482463622342873268484030909724355736187707652319700299145342586021362082198550720784557034675595490856166192026256518960612013687601713686974424762978299079253608530434747324305890090995273200968673057515304789802184999725485002779067154097805396427876222298308020608096978365892997643027558205576807217288889852095983109719809174500606909366839385866585128811991711713631505909507701483301403040717827817282359437255498921146007244968005960195384479835014329560383658941252348097880202037008101764307681958528172379515622192561553647337847100934349594636966884111639715857144688275934445715711972079434380773616930777779550748149385955102204305471519896964237448113981865279308910724725485327627523801542533905849925524976134453685278661528749522781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ivey.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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