support.ivey.ca

- Richard Ivey School of Business Foundation -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 57:2d:c3:43:3f:47:95:d1:81:64:da:fd:7c:90:6e:be was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Richard Ivey School of Business Foundation

Organization: Richard Ivey School of Business Foundation
Organization unit: Richard Ivey School of Business Foundation
State / Province: Ontario
Locality: London
Country: CA

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:2d:c3:43:3f:47:95:d1:81:64:da:fd:7c:90:6e:be
Serial Number (int): 115880449389665445566595029954963992254
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 32:5c:3e:65:55:7a:dd:69:15:86:f2:3c:b4:f8:0d:47:31:79:a5:ba
Fingerprint (sha256): 77:56:96:1e:da:d6:72:7a:e5:8b:f9:d3:4a:18:a3:81:04:60:56:19:2d:4e:fa:51:6c:6f:fa:87:f2:07:7d:05

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate support.ivey.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.ivey.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.ivey.ca

Other certificates including the domain name ivey.ca

(limited to 100 certificates)
ivey.ca
support.ivey.ca
status.sandsiv.com
foxtrot.status.descartes.com
status.ivey.ca
support.ivey.ca
slcwifi.ivey.ca
apply.ivey.ca
status.sandsiv.com
execed.ivey.ca
learn.ivey.ca
support.ivey.ca
status.sandsiv.com
slcwifi.ivey.ca
EMAIL.IVEY.CA
media.ivey.ca
statuspage.e2open.com
status.sandsiv.com
apps.ivey.ca
systemstatus.clinisys.com
execed.ivey.ca
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
support.ivey.ca
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
printing.ivey.ca
systemstatus.clinisys.com
nospam.ivey.ca
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
www.ivey.uwo.ca
status-namer-gtassurancetool.gtil.gt.com
support.ivey.ca
leapstatus.gtil.gt.com
support.ivey.ca
media.ivey.ca
status.sandsiv.com
status.plataformasintese.com
systemstatus.clinisys.com
nospam.ivey.ca
status.sandsiv.com
status.sandsiv.com
email.ivey.ca
facilities.ivey.ca
support.ivey.ca
ivey.ca
status.sandsiv.com
*.ivey.ca
my.ivey.ca
facilities.ivey.ca
status.ivey.ca
support.ivey.ca
email.ivey.ca
status.sandsiv.com
status.sandsiv.com
status.ivey.ca
*.ivey.ca
facilities.ivey.ca
status.sandsiv.com
*.ivey.ca
status.plataformasintese.com
execdev.ivey.ca
email.ivey.ca
ivey.ca
statuspage.e2open.com
execed.ivey.ca
www.ivey.uwo.ca
my.ivey.ca
ipu.ivey.ca
support.ivey.ca
ivey-toronto-wlc.ivey.ca
status.sandsiv.com
leapstatus.gtil.gt.com
status.sandsiv.com
support.ivey.ca
status.sandsiv.com
status.wilsongirgenti.com
status.extrinsec.com
media.ivey.ca
status.sandsiv.com
statuspage.e2open.com
execed.ivey.ca
facilities.ivey.ca
status.sandsiv.com
status.sandsiv.com
foxtrot.status.descartes.com
status.tesseract.co.uk
learn.ivey.ca
execdev.ivey.ca
sso.ivey.ca
ivey.ca
foxtrot.status.descartes.com
foxtrot.status.descartes.com
status.extrinsec.com
status.plataformasintese.com
facilities.ivey.ca
status.extrinsec.com
nospam.ivey.ca

Certificate

The complete raw certificate details for support.ivey.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115880449389665445566595029954963992254
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Richard Ivey School of Business Foundation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Richard Ivey School of Business Foundation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'support.ivey.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 662352490412714599916261296591945957239818168662114348527006018830194965898255389714920902325585407479957502730099691679337608176295924893651513896221516480567391356946092207973561316194969436266814276399576688754605923834051966872426617192511598338419857077385668968821576320122460362350888362890348745409936827661675272110879723997811426200456262503817613658748606836992199161794162010226643435132692451186337894484345441617145919683118079556460716446459404882214106782596453546646726852136228185163647264482736215461258417283858675124244959628547408730489106682497893993952998402882973353624522010688064131844230042219817705459620600512548894749250788597640195116971245764537230872953157907043239638173511465320438800888893136173406739097427258181812452562635100150118734733675679067054855574527966289143991503335922223689813429207723122197776734166749091624256900693261362000198767900575674707591628656400679209860681649623374151045703589384667646431476699874274249981059500954282509466295938751943082713577057835519579329564998459442312088997022283551437837324765153049529509999487710305333652495154359939756992836409895481791580907989616964240799626653791402895038953328743998159070068171963121936919571176870413966199342994791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ivey.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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