*.naylor.com

- Naylor (Canada), Inc -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 30:c1:a8:11:7e:9a:50:10:04:f0:e6:ee was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Naylor (Canada), Inc

Organization: Naylor (Canada), Inc
State / Province: Manitoba
Locality: Winnipeg
Country: CA

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 30:c1:a8:11:7e:9a:50:10:04:f0:e6:ee
Serial Number (int): 15089396834896650107891017454
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 23:e2:0f:19:2a:cc:54:84:f7:2e:a3:98:c8:28:00:57:8d:f4:c2:3b
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ba:fe:ab:4b:5f:f4:92:50:b5:36:a1:44:fe:b6:34:b9:90:90:08:f4
Fingerprint (sha256): 44:d0:9d:a1:ba:35:d3:ab:6d:c6:48:39:a8:ec:d8:62:8b:24:38:14:68:b1:5d:bd:77:dc:d8:c5:2c:fe:97:b2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.naylor.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.naylor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.naylor.com
naylor.com

Other certificates including the domain name naylor.com

(limited to 100 certificates)
5754456129929216-fe2.pantheonsite.io
demo.naylor.com
citeak.multidevcom.uaf.edu
naylor.com
naylor.com
helpdesk.tranter.com
chns120.courseresource.yale.edu
banking-business-review.com
helpdesk.brownbear.com
5754456129929216-fe2.pantheonsite.io
product.naylor.com
support.precisio.services
chns168.courseresource.yale.edu
communicationsbenchmark.naylor.com
service-desk.awansoft.biz
community.naylor.com
naylor.com
content.naylor.com
support.soriansolutions.com
5754456129929216-fe2.pantheonsite.io
helpdesk.brownbear.com
service-desk.awansoft.biz
5754456129929216-fe2.pantheonsite.io
5754456129929216-fe2.pantheonsite.io
brassunion.com
*.naylor.com
support.precisio.services
product.naylor.com
chns168.courseresource.yale.edu
tic.mesadeayuda.net
helpdesk.brownbear.com
demo.naylor.com
product.naylor.com
mis.naylor.com
160.167.tmcapital.com
5754456129929216-fe2.pantheonsite.io
citeak.multidevcom.uaf.edu
www.naylor.com
product.naylor.com
servicedesk.c-path.org
chns130.courseresource.yale.edu
*.dev.naylor.com
banking-business-review.com
*.naylor.com
citrix.remote.naylor.com
2.www.upenn.edu
support.precisio.services
banking-business-review.com
*.naylor.com
clc.shawnee.edu
160.167.tmcapital.com
service-desk.awansoft.biz
chns130.courseresource.yale.edu
5754456129929216-fe2.pantheonsite.io
servicedesk.securiteassurance.com
*.naylor.com
product.naylor.com
*.naylor.com
*.qa.naylor.com
helpdesk.fairwaylawns.com
connect.qa.naylor.com
naylor.com
*.naylor.com
*.naylor.com
naylor.com
*.naylor.com
banking-business-review.com
service-desk.awansoft.biz
servicedesk.c-path.org
enterprisemgmt.myairlife.com
*.naylor.com
tic.mesadeayuda.net
www.naylor.com
citeak.multidevcom.uaf.edu
naylor.com
chem674.multidevcom.uaf.edu
naylor.com
banking-business-review.com
160.167.tmcapital.com
naylor.com
*.career-services.qa.naylor.com
banking-business-review.com
*.naylor.com
citeak.multidevcom.uaf.edu
naylor.com
5754456129929216-fe2.pantheonsite.io
service-desk.awansoft.biz
chem674.multidevcom.uaf.edu
naylor.com
naylor.com
*.naylor.com
naylor.com
5754456129929216-fe2.pantheonsite.io
chns168.courseresource.yale.edu
*.qa.naylor.com
www.naylor.com
citeak.multidevcom.uaf.edu
*.dev.naylor.com
banking-business-review.com
naylor.com

Certificate

The complete raw certificate details for *.naylor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TUXumOEj0T7AbU/Io/a
cWTLWScNIXmbecjYn+5RkolzSL0MIvzusy9NOne3RkP2Kc9aGMnb5HtNGlgBBaJf
xvcYN7Z8bjkohDj4TmvNFLedki/PNtnOJ9fugwIpkILDzYzNGCG5qGR61tB3V+T3
pN34sS9EwDUMcdFCgqWSdupsvV9LAIfN15gRAYAmxloMWL1QqSiT5OflmNux6yOg
GfJAs3TkIxN1OtLOE6/M6OXw4ojWqQ90Rp4NEJvCeWoWBAFVPHX6dlqS3RrYA4iZ
gqZ6kQXX6ZuAfgvuX/wnDvl5NDAD94pDkLSXKL36lcdXC6u5t+0EVQWqKCDiwWXi
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15089396834896650107891017454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 15:03:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-16 15:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manitoba'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winnipeg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naylor (Canada), Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.naylor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26409986718047055705010948595460984798014469675261585280750371155490316165574469122083798077639695818192872831876940436618618784915622212517418633324986910971806662946937522184692137517236157510097021812407236220691439366216734524227153552828820085522465419753442415728983248693232137859322432134348211896795939787487775808266545263353843603506626273718193624961569395715693459340010119623404661708324799493947954296411321663139910323181812113917152847245133928831077008894569044854319077224527755176278468688400497908706935263603368490607092134391848511437147553304610144960042416312934631495220633680060237778117221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naylor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23e20f192acc5484f72ea398c82800578df4c23b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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