onestop.gov.bc.ca

- Government of the Province of British Columbia -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 77:e7:7a:67:43:36:ed:68:f8:7b:72:34:0d:f7:78:c1 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Government of the Province of British Columbia

Organization: Government of the Province of British Columbia
State / Province: British Columbia
Locality: Victoria
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:e7:7a:67:43:36:ed:68:f8:7b:72:34:0d:f7:78:c1
Serial Number (int): 159380034708000817320274242188237830337
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4d:89:c5:db:ab:37:f9:0f:31:50:b7:bb:a6:cd:ce:d1:86:d7:86:9e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 30:a6:4a:43:bc:21:76:bc:87:5c:7c:b4:5d:a4:cf:7a:41:d9:48:04
Fingerprint (sha256): 00:a1:51:c5:91:55:88:32:8a:ae:37:03:17:01:ca:a1:14:99:1b:91:cc:66:71:5e:b7:e5:f2:db:34:de:b3:76

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate onestop.gov.bc.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onestop.gov.bc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onestop.gov.bc.ca
www.onestop.gov.bc.ca

Other certificates including the domain name gov.bc.ca

(limited to 100 certificates)
EPBC.ServiceProviderPortal.gov.bc.ca
tst-dit.th.gov.bc.ca
carbonregistry.gov.bc.ca
test.ssbc-client.gov.bc.ca
livesmart.empr.gov.bc.ca
services.hub.gcpe.gov.bc.ca
dev.publicsectorcompensation.gov.bc.ca
gww.lcs.gov.bc.ca
www.mtonline.gov.bc.ca
uat.partners.aved.gov.bc.ca
hub.gcpe.gov.bc.ca
adminqa.bpms.gov.bc.ca
sun.gov.bc.ca
devcal.bcregistrynames.gov.bc.ca
vanity.blog.gov.bc.ca
eval.www.cladws.bcexpresspay.gov.bc.ca
ivos.gov.bc.ca
uat.hub.gcpe.gov.bc.ca
quality.www.ws2.bcexpresspay.gov.bc.ca
webmaps.gov.bc.ca
test.ucmdb.gov.bc.ca
hranalytics.gov.bc.ca
*.lab.pathfinder.gov.bc.ca
*.nrs.gov.bc.ca
idtest.gov.bc.ca
dev.bcregistrynames.gov.bc.ca
ptr.qp.gov.bc.ca
test.a100.gov.bc.ca
onlinelearning.gov.bc.ca
icm.ext.gov.bc.ca
*.ext.crm.mtics.gov.bc.ca
allstars.sdsi.gov.bc.ca
onestop.gov.bc.ca
swsinterface.icmdev.mcf.gov.bc.ca
cares.pss.gov.bc.ca
news.gov.bc.ca
gis.hlth.gov.bc.ca
arcmaps.gov.bc.ca
www.sail.aved.gov.bc.ca
pacifico.cas.gov.bc.ca
b2b-prod-rt.vs.gov.bc.ca
test.my.gov.bc.ca
admin.dev.addresschange.gov.bc.ca
dev.bcregistryallservices.gov.bc.ca
jade.nrs.gov.bc.ca
gww.axis.gov.bc.ca
evss.vs.gov.bc.ca
d1.bconline.gov.bc.ca
testbni.gov.bc.ca
idtest.gov.bc.ca
geobc.gov.bc.ca
eservice.ag.gov.bc.ca
proje.realbc.gov.bc.ca
ehealth.gov.bc.ca
fwxwww2.hpr.for.gov.bc.ca
cloud.gov.bc.ca
test.livelink.gov.bc.ca
gww.tacs.gov.bc.ca
11520560.peerly.app
sws.interface.mcf.gov.bc.ca
hambc.hlth.gov.bc.ca
dev.services.hub.gcpe.gov.bc.ca
testbni.gov.bc.ca
billing-and-payment.revenueservicesbc.gov.bc.ca
test.a100.gov.bc.ca
gww.svn.educ.gov.bc.ca
dir.gov.bc.ca
test.addresschange.gov.bc.ca
intra.dir.gov.bc.ca
wsidmngr.gov.bc.ca
sbcstatus.id.gov.bc.ca
rptp.bcas.gov.bc.ca
emis.hlth.gov.bc.ca
abesap.teamwork.gov.bc.ca
sandbox.realbc.gov.bc.ca
www.pp.qp.gov.bc.ca
gww.blog.gov.bc.ca
drp.icm.ext.gov.bc.ca
gww.gov.bc.ca
alpaca.status.merchlogix.com
pp.qp.gov.bc.ca
cdwtest.mcf.gov.bc.ca
77000.gov.bc.ca
appsd1.bconline.gov.bc.ca
idtest.gov.bc.ca
www.reportfraud.gov.bc.ca
pingu.lab.ag.gov.bc.ca
www.ears.gov.bc.ca
earlychildhoodeducator.mcf.gov.bc.ca
*.bcstats.gov.bc.ca
sdc.gov.bc.ca
test.bcregistryallservices.gov.bc.ca
test.services.qp.gov.bc.ca
swsinterface.icmdev.mcf.gov.bc.ca
Adopttrain.mcf.gov.bc.ca
3ds-status.outseer.com
*.orgbook.gov.bc.ca
tst.posse.th.gov.bc.ca
blog.gov.bc.ca
heat.myeducation.gov.bc.ca

Certificate

The complete raw certificate details for onestop.gov.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+zCCBeOgAwIBAgIQd+d6Z0M27Wj4e3I0Dfd4wTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MjEwMTgxODA0MzdaFw0yMzEwMjMxODA0MzdaMIGQMQswCQYDVQQGEwJDQTEZMBcG
A1UECBMQQnJpdGlzaCBDb2x1bWJpYTERMA8GA1UEBxMIVmljdG9yaWExNzA1BgNV
BAoTLkdvdmVybm1lbnQgb2YgdGhlIFByb3ZpbmNlIG9mIEJyaXRpc2ggQ29sdW1i
aWExGjAYBgNVBAMTEW9uZXN0b3AuZ292LmJjLmNhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA1Ac1jrOx6UdNfWjEjuNOOhFSl+vB/YGYvIQu6lnxyfrk
1vsL3iNZuDUBIHTjGXubaxz0db2+EGQm6otbTDf4RswZFU9rpqq8ywti4JkMMDxu
/C0KrnRYeySAgL+Ztj9yjxaLDvUqp+yBdiXLA46JMFFxKqnd6mUuJ73SOq6Yo+dQ
sfphnhXsBPNxJfeJQceoNc5DVRVYOnHKj7TLdH6X4n38kuWDiQ/1VpLH4RBeFeTZ
ZrDQM+730xkxfCwe4EjHvF5690VMy/i0m8v8gZ/up/8gmg+Ox2lNFXudpNnSSxaF
dvyAq21zLy+ax25JNNVjttpojjwRxhEKR8012GqdewIDAQABo4IDIzCCAx8wDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUTYnF26s3+Q8xULe7ps3O0YbXhp4wHwYDVR0j
BBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsG
AQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0
cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCow
KKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwMwYDVR0R
BCwwKoIRb25lc3RvcC5nb3YuYmMuY2GCFXd3dy5vbmVzdG9wLmdvdi5iYy5jYTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEwG
A1UdIARFMEMwNwYKYIZIAYb6bAoBBTApMCcGCCsGAQUFBwIBFhtodHRwczovL3d3
dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMIIBfAYKKwYBBAHWeQIEAgSCAWwE
ggFoAWYAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAYPsRNV0
AAAEAwBGMEQCIBg+PTspFXFlrlXnv90y4nx8vSr5mamUoSgY2B2LyghQAiB7YCCA
PH9puw61elcPeFhgtxtVGU+J9GYXu8TxIAeyEgB1ALNzdwfhhFD4Y4bWBancEQlK
eS2xZwwLh9zwAw55NqWaAAABg+xE1YUAAAQDAEYwRAIgf/hqVjVzYaa9YEFjgw+u
H8Qo9uJSYjqS9VN+FKNKdDgCIH88TUw8ibbRzND0HRUbiJVAVOY5QXU7MFb72JEo
AxcGAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGD7ETVWgAA
BAMARzBFAiASFXkkGd1ciEE/8Xbd3vMw874Y8+usbOVLUmBB6GrVqQIhAM1VmsNO
0wljvuHZlTxaeuC5lZLaTJoqTt7dY0rBvYjdMA0GCSqGSIb3DQEBCwUAA4IBAQAT
N5L9ZpWoV9JBgXdFV9CmWdVCndWb6xYOPWQqEyOGud/DDdwECblzjOSxxf8EPQqA
gk4nEaE66KR6oZajfscmxzaHDp1TpVTOeTdg5IWHAvXBA6VkjD6CDYMerlAxytgh
MByWJst9WwP3Xm4+iTm/A3PD6sFKffTNWCsK4fSKD7NqvQsYv+X1p25khP6bY0IN
9+hwf+SzMITMoc7X0E366VpQ4ETEKDUcm3jpopmh/KLauqfF1RrlFRXUvmzuckNW
L2/a1X4S9n9cwHuDu9r1M4EAZwFj5R67+Ok+HUjDZThKdI7LgMxqT0JPvRxd5TPA
cFSMZaFCSEPINfKd5OM1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ac1jrOx6UdNfWjEjuNO
OhFSl+vB/YGYvIQu6lnxyfrk1vsL3iNZuDUBIHTjGXubaxz0db2+EGQm6otbTDf4
RswZFU9rpqq8ywti4JkMMDxu/C0KrnRYeySAgL+Ztj9yjxaLDvUqp+yBdiXLA46J
MFFxKqnd6mUuJ73SOq6Yo+dQsfphnhXsBPNxJfeJQceoNc5DVRVYOnHKj7TLdH6X
4n38kuWDiQ/1VpLH4RBeFeTZZrDQM+730xkxfCwe4EjHvF5690VMy/i0m8v8gZ/u
p/8gmg+Ox2lNFXudpNnSSxaFdvyAq21zLy+ax25JNNVjttpojjwRxhEKR8012Gqd
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159380034708000817320274242188237830337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-18 18:04:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 18:04:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government of the Province of British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onestop.gov.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26766075646115103792086369993388927584803670385562598169398521046889774524673443999504518004779850133136592497515390115466809319326644912497960947296779373964018813463310081709539532294055057616151202508536361254038926526822449687417720300527347200929512302140361677542830525308163464979622009190155765906445531507105742600805716978577590348005872182367929869697539685661328130794936249089986828076406733318141856494842762504390457423337842601049998002595162251557975908880995452487643717940705973049865240191959437878720887131434863078534544424183033872227711283398513448282173422738689585338671155832181550320622971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d89c5dbab37f90f3150b7bba6cdced186d7869e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onestop.gov.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onestop.gov.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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