ucalgary.ca

- University of Calgary -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 9c:7c:71:04:cb:22:ee:d6:00:00:00:00:50:f1:c8:0f was issued on by Entrust, Inc..

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Calgary

Organization: University of Calgary
Organization unit: Information Technologies
State / Province: Alberta
Locality: Calgary
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9c:7c:71:04:cb:22:ee:d6:00:00:00:00:50:f1:c8:0f
Serial Number (int): 208005704444970745837173040455961659407
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d7:03:03:3e:8f:cb:69:18:8a:7d:9f:04:4f:3d:18:d8:ad:19:de:04
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 8d:cd:cc:12:de:3e:8c:1f:6c:51:30:41:3d:ee:18:e4:59:ae:5d:59
Fingerprint (sha256): 02:31:69:f2:04:75:a9:30:b1:ee:3c:fc:44:c5:e6:42:0d:c9:e4:de:d6:31:ec:65:60:b2:a3:a7:2e:be:ab:e2

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ucalgary.ca

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucalgary.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucalgary.ca
albertasulphurresearch.ca
www.albertasulphurresearch.ca
aboriginallynx.ca
www.aboriginallynx.ca
www.mrcentre.ca
mrcentre.ca
hotelalma.ca
www.hotelalma.ca
acpcrio.org
www.lindacarlson.ca
schulichinsider.ca
lindacarlson.ca
www.schulichinsider.ca
www.acpcrio.org
www.cirl.ca
www.abgamblinginstitute.ca
abgamblinginstitute.ca
cirl.ca
dcns.ca
www.dcns.ca
hydrocephalus2015.com
ohlsonresearch.ca
www.hydrocephalus2015.com
makecalgary.com
www.ohlsonresearch.ca
www.makecalgary.com
phimai.ca
www.phimai.ca
tamsi.ca
www.seasonalresidence.ca
www.tamsi.ca
seasonalresidence.ca
icdc.ca
translab.ca
www.translab.ca
www.icdc.ca
www.ispia.ca
ispia.ca
lynxconnection.ca
www.lynxconnection.ca
makecalgary.ca
www.makecalgary.ca
webmail.ucalgary.ca
mail.ucalgary.ca
umag.ca
www.umag.ca
ucalgarymag.ca
www.ucalgarymag.ca
www.waranchesltd.ca
waranchesltd.com
www.waranchesltd.com
waranchesltd.ca
ascendalberta.ca
www.ascendalberta.ca
akdn.info
www.akdn.info
carawest2019.ca
www.carawest2019.ca

Other certificates including the domain name ucalgary.ca

(limited to 100 certificates)
www.cstaab-test.cpsc.ucalgary.ca
cmddb.cpsc.ucalgary.ca
csus.cpsc.ucalgary.ca
www2.pugpig.com
capca.ucalgary.ca
largedisplaysinurbanlife.cpsc.ucalgary.ca
securesf.ucalgary.ca
ucalgary.ca
vsbdev.my.ucalgary.ca
discover.cpsc.ucalgary.ca
workrooms.ucalgary.ca
careers.talemetry.com
infrastructure.ucalgary.ca
ads-tl01.ucalgary.ca
careers.talemetry.com
secrets.cpsc.ucalgary.ca
cmddb.cpsc.ucalgary.ca
complexity.cpsc.ucalgary.ca
uconnectlabs.com
em.ucalgary.ca
voicesip.ucalgary.ca
saulwww.saulmain.cpsc.ucalgary.ca
*.ucweb.ucalgary.ca
pjl.ucalgary.ca
amploadvance.com
re18.org
bugzilla.cpsc.ucalgary.ca
largedisplaysinurbanlife.cpsc.ucalgary.ca
ucalgary.ca
5755424754106368-fe2.pantheonsite.io
akamaisecure2.qualtrics.com
ucalgary.ca
ucpl.admin.ucalgary.ca
barclaylab.ucalgary.ca
leadership.ucalgary.ca
asonam.cpsc.ucalgary.ca
smlweb.cpsc.ucalgary.ca
anslow.cpsc.ucalgary.ca
innovis.cpsc.ucalgary.ca
quicr.cru.ucalgary.ca
saulmain.cpsc.ucalgary.ca
arctic.ucalgary.ca
ucalgary.ca
cacsaic.cpsc.ucalgary.ca
bugzilla.cpsc.ucalgary.ca
viewcount.cpsc.ucalgary.ca
5638404075159552-fe2.pantheonsite.io
5753952654065664-fe1.pantheonsite.io
ucalgary.ca
careers.talemetry.com
ucalgary.ca
ucalgary.ca
alumni.cpsc.ucalgary.ca
rio.med.ucalgary.ca
mdoerk.cpsc.ucalgary.ca
vls.cs.ucalgary.ca
vidstudy.cpsc.ucalgary.ca
rms-dev.ucalgary.ca
dataexperience.cpsc.ucalgary.ca
www2.pugpig.com
uconnectlabs.com
alhajj.cpsc.ucalgary.ca
5755424754106368-fe2.pantheonsite.io
bigpics.cpsc.ucalgary.ca
5631943370604544-fe1.pantheonsite.io
curiolab.cpsc.ucalgary.ca
hi-bi-bi.cpsc.ucalgary.ca
bigpics.cpsc.ucalgary.ca
netcommunity.ucalgary.ca
ITIMMPCIMASTER1.ucalgary.ca
ucalgary.ca
acctman.ucalgary.ca
ucalgary.ca
curriculumlinks.ucalgary.ca
smlweb.cpsc.ucalgary.ca
voicesip.ucalgary.ca
ucalgary.ca
ucalgary.ca
wjwillett.cpsc.ucalgary.ca
itsoviewsrv01.ucalgary.ca
jungletest.cpsc.ucalgary.ca
5755424754106368-fe2.pantheonsite.io
c15668.uc.ucalgary.ca
foreman.leoleung.cpsc.ucalgary.ca
5701241594183680-fe4.pantheonsite.io
ucalgary.ca
ucalgary.ca
genopheno.ucalgary.ca
ilab.ucalgary.ca
alumni.cpsc.ucalgary.ca
voicesip.ucalgary.ca
innovis.cpsc.ucalgary.ca
foreman.leoleung.cpsc.ucalgary.ca
soma-sin.cpsc.ucalgary.ca
em.ucalgary.ca
csgs.cpsc.ucalgary.ca
foscube.cpsc.ucalgary.ca
quicr.cru.ucalgary.ca
iteachcs.org
acmicpc.cpsc.ucalgary.ca

Certificate

The complete raw certificate details for ucalgary.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzS/wpo6A1+qCJwZg6mt
hDIaXkSdZxhZkDuefZ1eKFnAAeVcC6kid4U2v2KJOfp00cXr4500P9Hp9Eh8quSx
3zc7STxBDElbZ5JDGoSA1KdoLuiWSImqbmVhdGcql/QU5G8abgvKO/vpIi0lWS7W
OnUoxHwxQ5OfZovEVy1/cvWOK5yZJPaZbm5AaZcgwL2j3n7CSxKix2gaOifUZaPP
lYYlDdIZegkYqHmDsM5/sTr2RcB4kh7DXiywHcJ0XRXakmWz3j2/QX/A4KIqiqm3
4WMV4v8RD/82hN8TCOizfkaGptvywvvoR+wogp7V1DLa9PdeiaIOQUbmL4cGtehP
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 208005704444970745837173040455961659407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 19:19:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-08 19:49:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Calgary'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Calgary'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucalgary.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22117714901561482806573659619606014412400079333538390077155370717666006673589281589955718050669916692803443535131860744082675148445688939197877043881357708593382450350597303462966533249824387735659059843976085610488556152125101275266515335818882845045668289185827396033422374939147078568218348223775354676386696848668100281329193463542587063754800409056763335993515060859720014666980928475318182665127956115014244596872166850078544707611492975161294198731964287787864717578572003934829455611838681232900235038154824769682799985777427906162092333354814578115267150014267307852272644963657234335339531922190839384133397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1048 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albertasulphurresearch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albertasulphurresearch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboriginallynx.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboriginallynx.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelalma.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelalma.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acpcrio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lindacarlson.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schulichinsider.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindacarlson.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schulichinsider.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acpcrio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cirl.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abgamblinginstitute.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abgamblinginstitute.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirl.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcns.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcns.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrocephalus2015.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohlsonresearch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrocephalus2015.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makecalgary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohlsonresearch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makecalgary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimai.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phimai.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamsi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seasonalresidence.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamsi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasonalresidence.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.translab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icdc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ispia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynxconnection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynxconnection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makecalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makecalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ucalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ucalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umag.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umag.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucalgarymag.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucalgarymag.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waranchesltd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waranchesltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waranchesltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waranchesltd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascendalberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascendalberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akdn.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akdn.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carawest2019.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carawest2019.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d703033e8fcb69188a7d9f044f3d18d8ad19de04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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