support.ivey.ca

- IVEY BUSINESS SCHOOL FOUNDATION -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:2e:ac:b8:39:4e:cf:33:0f:3f:c4:74:94:70:cb:92 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IVEY BUSINESS SCHOOL FOUNDATION

Organization: IVEY BUSINESS SCHOOL FOUNDATION
State / Province: Ontario
Locality: London
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:2e:ac:b8:39:4e:cf:33:0f:3f:c4:74:94:70:cb:92
Serial Number (int): 2900804817232084774162377698786200466
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: eb:f3:cb:ab:47:15:9d:d5:2d:8a:89:c7:7c:99:56:b4:77:a9:29:79
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 64:98:09:78:7d:18:dc:ef:24:d0:cf:b4:49:db:cc:09:68:86:7c:6c
Fingerprint (sha256): 37:da:67:7b:da:51:a4:57:77:b3:cf:53:b2:4a:c5:e6:e6:8f:3a:c2:36:c8:5a:e4:5d:06:40:8e:a9:da:23:3e

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate support.ivey.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.ivey.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.ivey.ca

Other certificates including the domain name ivey.ca

(limited to 100 certificates)
ivey.ca
support.ivey.ca
status.sandsiv.com
foxtrot.status.descartes.com
status.ivey.ca
support.ivey.ca
slcwifi.ivey.ca
apply.ivey.ca
status.sandsiv.com
execed.ivey.ca
learn.ivey.ca
support.ivey.ca
status.sandsiv.com
slcwifi.ivey.ca
EMAIL.IVEY.CA
media.ivey.ca
statuspage.e2open.com
status.sandsiv.com
apps.ivey.ca
systemstatus.clinisys.com
execed.ivey.ca
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
support.ivey.ca
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
printing.ivey.ca
systemstatus.clinisys.com
nospam.ivey.ca
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
www.ivey.uwo.ca
status-namer-gtassurancetool.gtil.gt.com
support.ivey.ca
leapstatus.gtil.gt.com
support.ivey.ca
media.ivey.ca
status.sandsiv.com
status.plataformasintese.com
systemstatus.clinisys.com
nospam.ivey.ca
status.sandsiv.com
status.sandsiv.com
email.ivey.ca
facilities.ivey.ca
support.ivey.ca
ivey.ca
status.sandsiv.com
*.ivey.ca
my.ivey.ca
facilities.ivey.ca
status.ivey.ca
support.ivey.ca
email.ivey.ca
status.sandsiv.com
status.sandsiv.com
status.ivey.ca
*.ivey.ca
facilities.ivey.ca
status.sandsiv.com
*.ivey.ca
status.plataformasintese.com
execdev.ivey.ca
email.ivey.ca
ivey.ca
statuspage.e2open.com
execed.ivey.ca
www.ivey.uwo.ca
my.ivey.ca
ipu.ivey.ca
support.ivey.ca
ivey-toronto-wlc.ivey.ca
status.sandsiv.com
leapstatus.gtil.gt.com
status.sandsiv.com
support.ivey.ca
status.sandsiv.com
status.wilsongirgenti.com
status.extrinsec.com
media.ivey.ca
status.sandsiv.com
statuspage.e2open.com
execed.ivey.ca
facilities.ivey.ca
status.sandsiv.com
status.sandsiv.com
foxtrot.status.descartes.com
status.tesseract.co.uk
learn.ivey.ca
execdev.ivey.ca
sso.ivey.ca
ivey.ca
foxtrot.status.descartes.com
foxtrot.status.descartes.com
status.extrinsec.com
status.plataformasintese.com
facilities.ivey.ca
status.extrinsec.com
nospam.ivey.ca

Certificate

The complete raw certificate details for support.ivey.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2900804817232084774162377698786200466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IVEY BUSINESS SCHOOL FOUNDATION'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.ivey.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849741513772273191997632239184596242066056069878674071184180789110087686249996900302320898705847533946263383774534403715446457925728669688417611993436762534312226721199102857667500211809526308116574117108223073325650516034257714432788343961160629308530297897440642598860001282662192103038000093404479488799666849743378345692240675310115972829927230140641434276143269211579892473952259385137525801323472907576242251271196614135846981564679351172877452849556472135259078309273122044383944352221032854675746714824908835258459063885806084714541418638359361701948577318661887151471133174262182136908932217889968882080397146990227098051129510248013535253711246966001874260831959303861684432836927802297460356386720204152952660706243230716611645073597236350880364833977207104008672729591948050117895214407931953764560281620763067119835200575229704657397417122703146886530372771973325786948439734812939481649878286673970069143999969518135174965875659865837621623077135846174850573690477282836465830169682354136099990880532916460649598117913476056116992479944030105824225602392736965516798825085875663999290357785078804096208569993038812103910906908954378027467514385291122313261838373522802385857448345035031410233607025092783140805049602021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebf3cbab47159dd52d8a89c77c9956b477a92979
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ivey.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166efc9e104000004030047304502207bb4e35ebc1a4ec3797566df9ce79827a59136b0730c37cc9ab87147bff1379a022100c5a4950f5431ec21383486bdab975c9072024dbc276f8eb182e775abedc94e680076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166efc9e1dd0000040300473045022100e460b57d781e0ae36fefd56db3b03baf289d208d4811a98053d1740437f54662022070e14a9d705044b1d4ced91fbb6f0a14cd6d4b2ee36fed0c1f430a8e051944d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0021d79c2dc73decc3df2f5d9892d8a1a4417dface6f91f7f331a867e860b096250c094ba4cd925edaeb3f02cad6478168ec34f2e6696269db6ea5d2b864e5f5415fe8d20246d25b42413bebe71f63fcbb710752e639a41135f28cedea50642ec3829c255b9f12b91577344367be6b4ae33d0f8709cf45737fbcbd83cacd73c24e2fac8ea69f2985df5a83f8a1058d65416477c6c662183c29e9fadab52b4165621d9242f2b992ab761314a2e1d0072d0d2e62edb74484510b7b090309219450ef3dce14badbfdb670483f74e368403a7651bfcd31164f71852f40c0e73057cc5576c97351d9e2632a214b54cbaac5a7a466502951ce7e50930caa543c024cebfd