www.osc.ca
- Ontario Securities Commission -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 35:ea:c1:7d:f8:f5:cd:9f:00:00:00:00:50:ef:b0:2d was issued on by Entrust, Inc..
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Ontario Securities Commission
Organization:
Ontario Securities Commission
State / Province:
Ontario
Locality: Toronto
Country: CA
Locality: Toronto
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 35:ea:c1:7d:f8:f5:cd:9f:00:00:00:00:50:ef:b0:2dSerial Number (int): 71668005727120950264072388538381873197
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: f8:06:e2:d8:34:d9:27:08:dc:e5:ec:de:7f:aa:0a:5f:49:f5:1d:fe
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 84:42:b6:28:34:fe:34:72:4d:28:52:79:a4:a4:8a:f4:82:47:a1:35
Fingerprint (sha256): 02:07:b8:7a:f7:8d:e7:2f:88:1f:12:22:08:ef:7d:cc:1e:1c:c5:fc:2a:f1:93:e9:ad:40:c0:c1:b8:cc:77:a7
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate www.osc.ca
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.osc.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.osc.ca
osc.ca
osc.gov.on.ca
www.osc.gov.on.ca
osc.ca
osc.gov.on.ca
www.osc.gov.on.ca
Other certificates including the domain name osc.ca
(limited to 100 certificates)
OSCSrvcMgmt.osc.ca
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
OSCSrvcMgmtTest.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
portal.osc.ca
oscer.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
preprd-portal.osc.ca
sslvs06.igloosoftware.com
oscertest.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
cmuat.osc.ca
www.osc.ca
OSCSrvcMgmt.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
OSCSrvcMgmt.osc.ca
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
OSCSrvcMgmt.osc.ca
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
icm.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
preprd-portal.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
oscertest.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
OSCSrvcMgmtTest.osc.ca
gp.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
oscertest.osc.ca
sslvs06.igloosoftware.com
oscer.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
OSCSrvcMgmtTest.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
portal.osc.ca
oscer.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
preprd-portal.osc.ca
sslvs06.igloosoftware.com
oscertest.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
cmuat.osc.ca
www.osc.ca
OSCSrvcMgmt.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
OSCSrvcMgmt.osc.ca
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
OSCSrvcMgmt.osc.ca
sslvs06.igloosoftware.com
www.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
icm.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
preprd-portal.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
oscertest.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
OSCSrvcMgmtTest.osc.ca
gp.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
oscertest.osc.ca
sslvs06.igloosoftware.com
oscer.osc.ca
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
sslvs06.igloosoftware.com
Certificate
The complete raw certificate details for www.osc.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgIQNerBffj1zZ8AAAAAUO+wLTANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x OTA0MDExNjExNTBaFw0yMTA2MzAxNjQxNDhaMG4xCzAJBgNVBAYTAkNBMRAwDgYD VQQIEwdPbnRhcmlvMRAwDgYDVQQHEwdUb3JvbnRvMSYwJAYDVQQKEx1PbnRhcmlv IFNlY3VyaXRpZXMgQ29tbWlzc2lvbjETMBEGA1UEAxMKd3d3Lm9zYy5jYTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMWYeN6uKeCBRoqo8WnmtebexHb3 AFxJrQ8u8j6Dzosvuif14HzX2+qu++EWlK3ImeeJr7GYAiaUUcb+g5aYF0YOxQjo mfo6cRH/qIy/k9WtdTYLhcOZdIZmlsqaRKKNV8U5Cx66b1KAS39x0ZJPab3qK1Wh 4AjgQeRLAUJW0+nDFHExR82EavDlkE5bUGxJqga106dXJkAzRdcBw6V142hRVS6D yYapZyPceH1QToAiO+3ngfi8ig0FHDHLtRpr07p1cpqIVAlJ8gVaFpYIbydwKoFS 77Xxc9KU38vwQynH78OROAs7N7/4bU89r2e2lNl8zavQxpKeO2KGGDk533fU4rPo 5Xq/EI3ZyduJUYPUbTSAAUnXL5+fJj/UcvzEQS2shNhwNaqWbDM0EVAmoPsJUKgQ gBV4CL0CkbgleR0uPhGgRFN4Ku/M97uNfNpw2rtsi6xdRtt9DyWPCV1NsUVwJYD0 KaAtcadlhFM3D+BWUWiXzoluR4TGwDfelP618+RjPKXuaZfaQA4MlQFKvNuK1ANb Kklq4M3Zh/JmRRdRSc+8UAmQDaosglZr0xK8Fua9c473hLuBu//y0Lm1GutspPf/ toOpjlmnDHsK5seDYpIe9S6psH4VbPTlSUnVdUh+DMaBm+bglmAxxQ38Btx0akrM Fc5N+LWDiK1DmkWBAgMBAAGjggHAMIIBvDATBgorBgEEAdZ5AgQDAQH/BAIFADA/ BgNVHREEODA2ggp3d3cub3NjLmNhggZvc2MuY2GCDW9zYy5nb3Yub24uY2GCEXd3 dy5vc2MuZ292Lm9uLmNhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRy dXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAm BggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQIC MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVz dC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNo YWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNV HQ4EFgQU+Abi2DTZJwjc5ezef6oKX0n1Hf4wCQYDVR0TBAIwADANBgkqhkiG9w0B AQsFAAOCAQEAni9dSzaeQzEkPSOQp9uxlvAoS5pizlQ1SboZ633w8dH/XZqtMpxN 6ISQ1h3Rlc7EPUsNSCKzd6+MNXWPX1jLXIlwBCVwMdQnJQSHZ1m5g5CUTGNXUXrH apNzKyolbLcKm3RwnPWAVIqm4ZacaAuVeI7+h8hTDVzPMWRi5pspVKGuVyWSwvZk zZBE4qIO6R1LxEvlc1z5EskKP8BsL5LcVEr9jmn8ZGv2uXOKf1a9zv7ppvTYiryg lMr4dcB6lONqRFuJ9rPiRkIjuMWCW2G0WuTG+e8b28xbK1/owRAGGJcfJwBZvzGL 5SRVgMmgnSzXImYVPHzXqV3Dv7FW07duOw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxZh43q4p4IFGiqjxaea1 5t7EdvcAXEmtDy7yPoPOiy+6J/XgfNfb6q774RaUrciZ54mvsZgCJpRRxv6DlpgX Rg7FCOiZ+jpxEf+ojL+T1a11NguFw5l0hmaWyppEoo1XxTkLHrpvUoBLf3HRkk9p veorVaHgCOBB5EsBQlbT6cMUcTFHzYRq8OWQTltQbEmqBrXTp1cmQDNF1wHDpXXj aFFVLoPJhqlnI9x4fVBOgCI77eeB+LyKDQUcMcu1GmvTunVymohUCUnyBVoWlghv J3AqgVLvtfFz0pTfy/BDKcfvw5E4Czs3v/htTz2vZ7aU2XzNq9DGkp47YoYYOTnf d9Tis+jler8QjdnJ24lRg9RtNIABSdcvn58mP9Ry/MRBLayE2HA1qpZsMzQRUCag +wlQqBCAFXgIvQKRuCV5HS4+EaBEU3gq78z3u4182nDau2yLrF1G230PJY8JXU2x RXAlgPQpoC1xp2WEUzcP4FZRaJfOiW5HhMbAN96U/rXz5GM8pe5pl9pADgyVAUq8 24rUA1sqSWrgzdmH8mZFF1FJz7xQCZANqiyCVmvTErwW5r1zjveEu4G7//LQubUa 62yk9/+2g6mOWacMewrmx4Nikh71LqmwfhVs9OVJSdV1SH4MxoGb5uCWYDHFDfwG 3HRqSswVzk34tYOIrUOaRYECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 71668005727120950264072388538381873197 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 16:11:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-30 16:41:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario Securities Commission' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.osc.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806119694264971414431641461197613131516752238494998877515960342409623315739236193529854771671568802417716833980314293536565699434764574850594831562085091857354497203955265059162419217884377238694495525097365497216830226894766467663841688144718691447418834779387508893067977685030815213736095541228304827849329739491871615668195442190883241314778246743731158342509622407598432184509338578434839131305514695734102143801318010857993889124988255602332284105097227883242501450361794316487217917141487350814463568993312034970028665023401924538928803799213606170138101460205751796812955077297352358425232712776243260822983172429389433401225892742628014542153672357749713377263942519330108799403199770744595106620844250664009563170717670671351537319631475085374469158759768219802100799771605917262681592725953600760291556570655572336162338230531559853855994891410876157632996566007927952234154032329661434756949344591046766441975774489505978615669926451528102224283563550535910229367659520350576954268254818456166833562780271886764711138009676539639791497449575086428859218499220399690174814682419099473583396421717354044081780564728078933873623476584665183554631033176149195166712848487320530177410349799854629397315497965460218312572683649 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osc.gov.on.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osc.gov.on.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f806e2d834d92708dce5ecde7faa0a5f49f51dfe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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