www.osc.ca

- Ontario Securities Commission -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 35:ea:c1:7d:f8:f5:cd:9f:00:00:00:00:50:ef:b0:2d was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ontario Securities Commission

Organization: Ontario Securities Commission
State / Province: Ontario
Locality: Toronto
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:ea:c1:7d:f8:f5:cd:9f:00:00:00:00:50:ef:b0:2d
Serial Number (int): 71668005727120950264072388538381873197
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f8:06:e2:d8:34:d9:27:08:dc:e5:ec:de:7f:aa:0a:5f:49:f5:1d:fe
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 84:42:b6:28:34:fe:34:72:4d:28:52:79:a4:a4:8a:f4:82:47:a1:35
Fingerprint (sha256): 02:07:b8:7a:f7:8d:e7:2f:88:1f:12:22:08:ef:7d:cc:1e:1c:c5:fc:2a:f1:93:e9:ad:40:c0:c1:b8:cc:77:a7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.osc.ca

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.osc.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.osc.ca
osc.ca
osc.gov.on.ca
www.osc.gov.on.ca

Other certificates including the domain name osc.ca

(limited to 100 certificates)
OSCSrvcMgmt.osc.ca
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
OSCSrvcMgmtTest.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
portal.osc.ca
oscer.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
preprd-portal.osc.ca
sslvs06.igloosoftware.com
oscertest.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
cmuat.osc.ca
www.osc.ca
OSCSrvcMgmt.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
OSCSrvcMgmt.osc.ca
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
OSCSrvcMgmt.osc.ca
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
icm.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
preprd-portal.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
oscertest.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
OSCSrvcMgmtTest.osc.ca
gp.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
oscertest.osc.ca
sslvs06.igloosoftware.com
oscer.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com

Certificate

The complete raw certificate details for www.osc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIQNerBffj1zZ8AAAAAUO+wLTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
OTA0MDExNjExNTBaFw0yMTA2MzAxNjQxNDhaMG4xCzAJBgNVBAYTAkNBMRAwDgYD
VQQIEwdPbnRhcmlvMRAwDgYDVQQHEwdUb3JvbnRvMSYwJAYDVQQKEx1PbnRhcmlv
IFNlY3VyaXRpZXMgQ29tbWlzc2lvbjETMBEGA1UEAxMKd3d3Lm9zYy5jYTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMWYeN6uKeCBRoqo8WnmtebexHb3
AFxJrQ8u8j6Dzosvuif14HzX2+qu++EWlK3ImeeJr7GYAiaUUcb+g5aYF0YOxQjo
mfo6cRH/qIy/k9WtdTYLhcOZdIZmlsqaRKKNV8U5Cx66b1KAS39x0ZJPab3qK1Wh
4AjgQeRLAUJW0+nDFHExR82EavDlkE5bUGxJqga106dXJkAzRdcBw6V142hRVS6D
yYapZyPceH1QToAiO+3ngfi8ig0FHDHLtRpr07p1cpqIVAlJ8gVaFpYIbydwKoFS
77Xxc9KU38vwQynH78OROAs7N7/4bU89r2e2lNl8zavQxpKeO2KGGDk533fU4rPo
5Xq/EI3ZyduJUYPUbTSAAUnXL5+fJj/UcvzEQS2shNhwNaqWbDM0EVAmoPsJUKgQ
gBV4CL0CkbgleR0uPhGgRFN4Ku/M97uNfNpw2rtsi6xdRtt9DyWPCV1NsUVwJYD0
KaAtcadlhFM3D+BWUWiXzoluR4TGwDfelP618+RjPKXuaZfaQA4MlQFKvNuK1ANb
Kklq4M3Zh/JmRRdRSc+8UAmQDaosglZr0xK8Fua9c473hLuBu//y0Lm1GutspPf/
toOpjlmnDHsK5seDYpIe9S6psH4VbPTlSUnVdUh+DMaBm+bglmAxxQ38Btx0akrM
Fc5N+LWDiK1DmkWBAgMBAAGjggHAMIIBvDATBgorBgEEAdZ5AgQDAQH/BAIFADA/
BgNVHREEODA2ggp3d3cub3NjLmNhggZvc2MuY2GCDW9zYy5nb3Yub24uY2GCEXd3
dy5vc2MuZ292Lm9uLmNhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRy
dXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAm
BggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQIC
MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVz
dC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNo
YWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNV
HQ4EFgQU+Abi2DTZJwjc5ezef6oKX0n1Hf4wCQYDVR0TBAIwADANBgkqhkiG9w0B
AQsFAAOCAQEAni9dSzaeQzEkPSOQp9uxlvAoS5pizlQ1SboZ633w8dH/XZqtMpxN
6ISQ1h3Rlc7EPUsNSCKzd6+MNXWPX1jLXIlwBCVwMdQnJQSHZ1m5g5CUTGNXUXrH
apNzKyolbLcKm3RwnPWAVIqm4ZacaAuVeI7+h8hTDVzPMWRi5pspVKGuVyWSwvZk
zZBE4qIO6R1LxEvlc1z5EskKP8BsL5LcVEr9jmn8ZGv2uXOKf1a9zv7ppvTYiryg
lMr4dcB6lONqRFuJ9rPiRkIjuMWCW2G0WuTG+e8b28xbK1/owRAGGJcfJwBZvzGL
5SRVgMmgnSzXImYVPHzXqV3Dv7FW07duOw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxZh43q4p4IFGiqjxaea1
5t7EdvcAXEmtDy7yPoPOiy+6J/XgfNfb6q774RaUrciZ54mvsZgCJpRRxv6DlpgX
Rg7FCOiZ+jpxEf+ojL+T1a11NguFw5l0hmaWyppEoo1XxTkLHrpvUoBLf3HRkk9p
veorVaHgCOBB5EsBQlbT6cMUcTFHzYRq8OWQTltQbEmqBrXTp1cmQDNF1wHDpXXj
aFFVLoPJhqlnI9x4fVBOgCI77eeB+LyKDQUcMcu1GmvTunVymohUCUnyBVoWlghv
J3AqgVLvtfFz0pTfy/BDKcfvw5E4Czs3v/htTz2vZ7aU2XzNq9DGkp47YoYYOTnf
d9Tis+jler8QjdnJ24lRg9RtNIABSdcvn58mP9Ry/MRBLayE2HA1qpZsMzQRUCag
+wlQqBCAFXgIvQKRuCV5HS4+EaBEU3gq78z3u4182nDau2yLrF1G230PJY8JXU2x
RXAlgPQpoC1xp2WEUzcP4FZRaJfOiW5HhMbAN96U/rXz5GM8pe5pl9pADgyVAUq8
24rUA1sqSWrgzdmH8mZFF1FJz7xQCZANqiyCVmvTErwW5r1zjveEu4G7//LQubUa
62yk9/+2g6mOWacMewrmx4Nikh71LqmwfhVs9OVJSdV1SH4MxoGb5uCWYDHFDfwG
3HRqSswVzk34tYOIrUOaRYECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71668005727120950264072388538381873197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 16:11:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-30 16:41:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario Securities Commission'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.osc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806119694264971414431641461197613131516752238494998877515960342409623315739236193529854771671568802417716833980314293536565699434764574850594831562085091857354497203955265059162419217884377238694495525097365497216830226894766467663841688144718691447418834779387508893067977685030815213736095541228304827849329739491871615668195442190883241314778246743731158342509622407598432184509338578434839131305514695734102143801318010857993889124988255602332284105097227883242501450361794316487217917141487350814463568993312034970028665023401924538928803799213606170138101460205751796812955077297352358425232712776243260822983172429389433401225892742628014542153672357749713377263942519330108799403199770744595106620844250664009563170717670671351537319631475085374469158759768219802100799771605917262681592725953600760291556570655572336162338230531559853855994891410876157632996566007927952234154032329661434756949344591046766441975774489505978615669926451528102224283563550535910229367659520350576954268254818456166833562780271886764711138009676539639791497449575086428859218499220399690174814682419099473583396421717354044081780564728078933873623476584665183554631033176149195166712848487320530177410349799854629397315497965460218312572683649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osc.gov.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osc.gov.on.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f806e2d834d92708dce5ecde7faa0a5f49f51dfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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