OV SSL/TLS Certificate for www.uat.scotiaworld.com Issued to The Bank of Nova Scotia

Certificate is witin its validity period

Issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1)

About the www.uat.scotiaworld.com OV SSL/TLS Certificate

This certificate with serial number 06:2b:0e:90:b1:e1:f0:85:db:3c:05:65:dc:9c:6d:43 for www.uat.scotiaworld.com was issued on by DigiCert Inc.

With 100 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for www.uat.scotiaworld.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:2b:0e:90:b1:e1:f0:85:db:3c:05:65:dc:9c:6d:43
Serial Number (int): 8198932157268336887861929210462104899
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 84:d6:cf:43:49:35:b7:2b:ae:48:cb:47:75:80:c9:e9:ab:c8:3e:37
Authority Key Identifier: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (SHA-1): 9e:bc:33:79:92:a1:e6:8c:e4:de:0b:a5:6a:14:62:52:8e:94:47:60
Fingerprint (SHA-256): f9:1d:c0:42:1d:e7:94:cc:30:86:71:8c:b9:68:8f:57:a8:63:e9:58:76:78:6f:68:56:9b:8c:2c:0d:4c:25:95

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.uat.scotiaworld.com
100
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.uat.scotiaworld.com

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.uat.scotiaworld.com
login2-pp.scotiabank.mobi
login1-pp.scotiabank.mobi
login-pp.scotiabank.mobi
app1.scotiaonline.pp.scotiabank.com
apply.online.scointnet.net
appmobiledfuat.scotiaweb.com.mx
appsmp-ist.scointnet.net
appsmp-uat.scointnet.net
auth-uat.scointnet.net
auth.online.scointnet.net
auth.scotiaonline.scointnet.net
bbcp-u.scointnet.net
cabaas-edge-u.scointnet.net
cbeconsent-ist.scointnet.net
cbeconsent.scointnet.net
cbeconsentca-ist.scointnet.net
cbeconsentca.scointnet.net
ccau-auth-u.scointnet.net
ccau-search-u.scointnet.net
ccau-wave-u.scointnet.net
ccausales-ripple-u.scointnet.net
ccop-u.scointnet.net
cdb-search-platform-api-u.scointnet.net
cdb-ux-authentication-stg.scointnet.net
cdb-ux-authentication-u.scointnet.net
cdb-ux-dlbp-gateway-i.scointnet.net
cdb-ux-dlbp-gateway-u.scointnet.net
cdb-ux-dlbp-ledger-gateway-i.scointnet.net
cdb-ux-dlbp-ledger-gateway-u.scointnet.net
cdb-ux-dlbp-viewda-i.scointnet.net
cdb-ux-dlbp-viewda-u.scointnet.net
cdb-ux-mobile-banking-search-u.scointnet.net
cdb-ux-profiles-u.scointnet.net
cdbpay-i.scointnet.net
cdbpay-services-cps-i.scointnet.net
cdbpay-services-cps-u.scointnet.net
cdbpay-u.scointnet.net
clouduatservtrx.scotiabank.cl
cregs-u.scointnet.net
digitalcore-u.scointnet.net
DMS-u.scointnet.net
DMS-web-u.scointnet.net
ehome-u-cc.scointnet.net
ehome-u.scointnet.net
fco-consumer-u.scointnet.net
Fco-dealer-u.scointnet.net
fco-letsboro-u.scointnet.net
hello-u.scointnet.net
hello.scointnet.net
humapp-u.scointnet.net
ibcms-esm.scointnet.net
itrade-u.scointnet.net
jlr-calc-u.scointnet.net
konecta-u.scointnet.net
livehelp-u.scointnet.net
masterpass-mw-u.scointnet.net
masterpass-u.scointnet.net
masterpass-web-u.scointnet.net
Mobile.ppleap.scotiabank.com
Movil.ppleap.scotiabank.com
nit-bff-u.scointnet.net
nit-ui-u.scointnet.net
nova-stg.scointnet.net
nova-u.scointnet.net
passport-u.scointnet.net
pp.services.dynamic.ca
psvc-gateway-u.scointnet.net
puntosparami-u.scointnet.net
qat.saf.scotiabank.com
qat.sdapayout.com
refresh-u.scointnet.net
reverse-factoring-u.scointnet.net
scotiaautohub-u.scointnet.net
scotiadesign-u.scointnet.net
scotiaenlinea-u.scointnet.net
secure-u.scointnet.net
sel-test1.scotiabank.fi.cr
sel-test2.scotiabank.fi.cr
test.badal.scotiabank.com
uat.beyond.scointnet.net
uat.fiu.mx
uat.scotiaworld.com
uatjump.desarrollocolpatria.com
uatscotiaweb.scotiabank.mx
uatsel.scotiabank.mx
uy-edge-u.scointnet.net
wco-u.scointnet.net
wealthmanagement-stg.scointnet.net
www.br.scointnet.net
www.factoring.scointnet.net
www.Fco-customer-u.scointnet.net
www.jumppoc.scointnet.net
www.ppclientportal.scotiabank.com
www.ppleap.scotiabank.com
www.scotiaconnectuat.scotiabank.com
www.scotiaonline.test.scotiabank.com
www.scotiasecurities-uat.jpn.scointnet.net
www1.ppleap.scotiabank.com
www1.scotiaconnectuat.scotiabank.com

X.509 Certificate

The complete raw X.509 certificate details for www.uat.scotiaworld.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2bNDBV/ssOw6tAGwU8J
UqDChfv34XbwhmbJKFeA3eXU7M7/ZZ+82mKJmOwy1J1uhUNr1ZaP6+tWB+sfrmKw
2uf2iTNWiOs/130OX3wocO6CEsuPzTN2ZMUTGfu68EB8tkcM7HNh6IgnJ1lcllTF
KXgPuI2B2TebWdvLMCItn1P/RlYkBU/1ZfCMw7SBOqXZ+8s3mY8loAGafnLuC4hJ
06hukmkoqHX+U1AmYeMdZtJM2BadSG9y6rZTjlKElLDrSttDOoCLUMY6NrNs6D9o
Fiq1k1IcmIE7Of0O23B0KpL8ncp5BmL3bU0uSJh6ESxpOYJeC0D1jt6NNJITn0QE
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8198932157268336887861929210462104899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-02-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scarborough'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Bank of Nova Scotia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.uat.scotiaworld.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25172115733756900553843624518589148491587790447489202756005407145168413781046177638465224402002651636222864465416467701746047560424911908785480025763767971296464611044621233078975546538785096829613921964061102089793187937335383952581153644324417599779822733037898587749804297780222814329885702932438488295836927125236128223770195762326785362262610786219557031785630501923935705660128044550426089050716244455911582282314977337100010552198856261541912083990923687881841242796409399472467425284243436130292095731987613983782732606077719371129726386021355058814832358243734677352179316552829447858969808963552529680172147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84d6cf434935b72bae48cb477580c9e9abc83e37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2905 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat.scotiaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login2-pp.scotiabank.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login1-pp.scotiabank.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-pp.scotiabank.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app1.scotiaonline.pp.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.online.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appmobiledfuat.scotiaweb.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsmp-ist.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsmp-uat.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-uat.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.online.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.scotiaonline.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbcp-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabaas-edge-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeconsent-ist.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeconsent.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeconsentca-ist.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeconsentca.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccau-auth-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccau-search-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccau-wave-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccausales-ripple-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccop-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-search-platform-api-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-authentication-stg.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-authentication-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-dlbp-gateway-i.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-dlbp-gateway-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-dlbp-ledger-gateway-i.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-dlbp-ledger-gateway-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-dlbp-viewda-i.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-dlbp-viewda-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-mobile-banking-search-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdb-ux-profiles-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdbpay-i.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdbpay-services-cps-i.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdbpay-services-cps-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdbpay-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clouduatservtrx.scotiabank.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cregs-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcore-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DMS-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DMS-web-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehome-u-cc.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehome-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fco-consumer-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Fco-dealer-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fco-letsboro-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humapp-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibcms-esm.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itrade-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlr-calc-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konecta-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livehelp-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterpass-mw-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterpass-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterpass-web-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Mobile.ppleap.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Movil.ppleap.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nit-bff-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nit-ui-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nova-stg.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nova-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp.services.dynamic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psvc-gateway-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntosparami-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat.saf.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qat.sdapayout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refresh-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reverse-factoring-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotiaautohub-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotiadesign-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotiaenlinea-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sel-test1.scotiabank.fi.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sel-test2.scotiabank.fi.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.badal.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beyond.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fiu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.scotiaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatjump.desarrollocolpatria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatscotiaweb.scotiabank.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatsel.scotiabank.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uy-edge-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wco-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-stg.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.br.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factoring.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Fco-customer-u.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jumppoc.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppclientportal.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppleap.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scotiaconnectuat.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scotiaonline.test.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scotiasecurities-uat.jpn.scointnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ppleap.scotiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.scotiaconnectuat.scotiabank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001e67d43790f182689f4deb5d5aff4a33b110806248b1b0bb889bb617adb8e7da36912723ee517b9d84b2babeaea7db15c94c1227aa6c31bc2dab47700b912991a0f7b4ddf2755e8007bd1df810627527c3e5c1c0e9ac1571a5b88ac519efca01b41b2766d10a9ca8b25453b6631d46c156fb592a856dae8afde51c287bc9df9f26d9225b5872716974d599159473d8b82b6531a18e445edb888bd7d1c5131d74d9d29bdc7d6df9614042e2003e2374aaa46d4de7ab59627192f4d4698cbce9d9d56f2d5bc92e5ad3a32434e90a49752e7a97ba6602939192ea1ea3a175c69fa43bf4041addf2b818ed40182717d6a9ac84a0da5a62251c736ce3507ecd052a9d