cic.gc.ca
- Immigration, Refugees and Citizenship Canada -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 12:44:8c:21:34:c8:a8:d6:c9:96:83:7e:71:ff:ef:7e was issued on by Entrust, Inc..
With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Immigration, Refugees and Citizenship Canada
Organization:
Immigration, Refugees and Citizenship Canada
State / Province:
Ontario
Locality: Ottawa
Country: CA
Locality: Ottawa
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 12:44:8c:21:34:c8:a8:d6:c9:96:83:7e:71:ff:ef:7eSerial Number (int): 24282022278718531189922259547665198974
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: ad:dc:fc:d5:5f:b3:bf:86:3e:92:2d:d7:ae:46:d1:18:86:c7:80:0a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 27:2e:a3:9f:39:43:2e:55:41:9c:54:7e:e4:98:93:9a:80:eb:55:d8
Fingerprint (sha256): 05:4f:1d:85:45:1a:94:cf:04:dd:bd:4e:9d:a7:6b:98:9b:82:fc:5a:3c:bd:30:f6:b9:47:e1:d7:4b:03:47:ba
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate cic.gc.ca
48
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cic.gc.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cic.gc.ca
www.cic.gc.ca
immigration.gc.ca
citizenship.gc.ca
citoyennete.gc.ca
servicesfornewcomers.cic.gc.ca
servicespourlesnouveauxarrivants.cic.gc.ca
ci.gc.ca
serendreaucanada.gc.ca
goingtocanada.gc.ca
cic.gslb.global.gc.ca
www.immigration.gc.ca
www.citizenship.gc.ca
www.citoyennete.gc.ca
www.servicesfornewcomers.cic.gc.ca
www.servicespourlesnouveauxarrivants.cic.gc.ca
www.ci.gc.ca
www.serendreaucanada.gc.ca
www.goingtocanada.gc.ca
www.cic.gslb.global.gc.ca
immigration.canada.ca
www.immigration.canada.ca
citizenship.canada.ca
www.citizenship.canada.ca
citoyennete.canada.ca
www.citoyennete.canada.ca
servicesfornewcomers.canada.ca
servicespourlesnouveauxarrivants.canada.ca
www.servicespourlesnouveauxarrivants.canada.ca
ircc.canada.ca
www.ircc.canada.ca
www.goingtocanada.canada.ca
serendreaucanada.canada.ca
www.serendreaucanada.canada.ca
refugees.canada.ca
www.refugees.canada.ca
refugies.canada.ca
www.refugies.canada.ca
settlement.canada.ca
www.settlement.canada.ca
etablissement.canada.ca
www.etablissement.canada.ca
passport.canada.ca
www.passport.canada.ca
passeport.canada.ca
www.passeport.canada.ca
www.servicesfornewcomers.canada.ca
goingtocanada.canada.ca
www.cic.gc.ca
immigration.gc.ca
citizenship.gc.ca
citoyennete.gc.ca
servicesfornewcomers.cic.gc.ca
servicespourlesnouveauxarrivants.cic.gc.ca
ci.gc.ca
serendreaucanada.gc.ca
goingtocanada.gc.ca
cic.gslb.global.gc.ca
www.immigration.gc.ca
www.citizenship.gc.ca
www.citoyennete.gc.ca
www.servicesfornewcomers.cic.gc.ca
www.servicespourlesnouveauxarrivants.cic.gc.ca
www.ci.gc.ca
www.serendreaucanada.gc.ca
www.goingtocanada.gc.ca
www.cic.gslb.global.gc.ca
immigration.canada.ca
www.immigration.canada.ca
citizenship.canada.ca
www.citizenship.canada.ca
citoyennete.canada.ca
www.citoyennete.canada.ca
servicesfornewcomers.canada.ca
servicespourlesnouveauxarrivants.canada.ca
www.servicespourlesnouveauxarrivants.canada.ca
ircc.canada.ca
www.ircc.canada.ca
www.goingtocanada.canada.ca
serendreaucanada.canada.ca
www.serendreaucanada.canada.ca
refugees.canada.ca
www.refugees.canada.ca
refugies.canada.ca
www.refugies.canada.ca
settlement.canada.ca
www.settlement.canada.ca
etablissement.canada.ca
www.etablissement.canada.ca
passport.canada.ca
www.passport.canada.ca
passeport.canada.ca
www.passeport.canada.ca
www.servicesfornewcomers.canada.ca
goingtocanada.canada.ca
Other certificates including the domain name cic.gc.ca
(limited to 100 certificates)
Secure.cic.gc.ca
remote.cic.gc.ca
refugee-refugie-development.apps.cic.gc.ca
newgcs-nouveaussc.cic.gc.ca
cic.gc.ca
icare-iedec.cic.gc.ca
portal-portail.apps.cic.gc.ca
prson-srpel-emergency-fix.apps.cic.gc.ca
gcmsjobbank-SYSTESTMEL.cic.gc.ca
eservices.cic.gc.ca
extern.cic.gc.ca
*.cic.gc.ca
mobile.cic.gc.ca
services3.cic.gc.ca
ct-tc-pef.apps.cic.gc.ca
gcmsjobbank-PRD.cic.gc.ca
frs-stg.cic.gc.ca
gccic-psoft-gchrms-ig.cic.gc.ca
cicgatewaysigning-aus.cic.gc.ca
refugee-refugie-sandbox.apps.cic.gc.ca
frs-prd.cic.gc.ca
gccic-psoft-ig-gc89cert.cic.gc.ca
prt-srp.apps.cic.gc.ca
gcs-ssc.cic.gc.ca
onlineservices-servicesenligne.cic.gc.ca
extern.cic.gc.ca
citapply-citdemande.apps.cic.gc.ca
mobile.cic.gc.ca
pgp-development.apps.cic.gc.ca
ccps-stcc-trn.cic.gc.ca
sra-ads.cic.gc.ca
pgp-sandbox.apps.cic.gc.ca
onlineservices-servicesenligne.cic.gc.ca
eservices.cic.gc.ca
extern.cic.gc.ca
refugee-refugie.apps.cic.gc.ca
portal-portail.apps.cic.gc.ca
gcmscasestatus-PRD.cic.gc.ca
*.ra.apps.cic.gc.ca
extern.cic.gc.ca
api.a2sc-csa2-dev.apps.cic.gc.ca
tempo-pef.cic.gc.ca
gcmsjobbank-STG.cic.gc.ca
esubmission-soumissionenligne.cic.gc.ca
gcs-ssc-stg.cic.gc.ca
extern.cic.gc.ca
gcs-ssc.cic.gc.ca
gcs-ssc-stg.cic.gc.ca
CICPRCard.cic.gc.ca
extern.cic.gc.ca
pgp.cic.gc.ca
citapply-citdemande.apps.cic.gc.ca
services3.cic.gc.ca
gcs-ssc-sys.cic.gc.ca
frs-ste.cic.gc.ca
api.pgp-vt-ov-sandbox.apps.cic.gc.ca
tempo-trn.cic.gc.ca
MAIL.cic.gc.ca
icare-iedec-train.canada.ca
gcmsjobbank-PRD.cic.gc.ca
tempo-pte.cic.gc.ca
b.sra-ads.cic.gc.ca
specialmeasures-mesuresspeciales-emergency-fix.apps.cic.gc.ca
extern.cic.gc.ca
gcmsjobbank-PRD.cic.gc.ca
icare-iedec.cic.gc.ca
tempo-ste.cic.gc.ca
ra.apps.cic.gc.ca
a.sra-ads.cic.gc.ca
onlineservices-servicesenligne.cic.gc.ca
thingate.cic.gc.ca
*.cic.gc.ca
gcs-ssc.cic.gc.ca
cicgateway-dev.cic.gc.ca
gcs-ssc-stg.cic.gc.ca
icare-iedec.cic.gc.ca
NJES1S1106.CI.GC.CA
gcmsPIL005-SYSTESTMEL.cic.gc.ca
frs-ste.cic.gc.ca
cic.gc.ca
gcs-ssc.cic.gc.ca
icare-iedec.cic.gc.ca
dmp-portal.cic.gc.ca
gcs-ssc.cic.gc.ca
frs-dev.cic.gc.ca
prson-srpel-dev.apps.cic.gc.ca
thingate.cic.gc.ca
gcmsPIL005-PRD.cic.gc.ca
mobile.cic.gc.ca
ct-tc-stg.apps.cic.gc.ca
prson-srpel-emergency-fix.apps.cic.gc.ca
thingate.cic.gc.ca
extern.cic.gc.ca
secure.cic.gc.ca
gcmscasestatus-PRD.cic.gc.ca
tracker-suivi.apps.cic.gc.ca
onlineservices-dev.ci.gc.ca
icare-iedec.cic.gc.ca
pgp-sandbox.apps.cic.gc.ca
cic.gc.ca
remote.cic.gc.ca
refugee-refugie-development.apps.cic.gc.ca
newgcs-nouveaussc.cic.gc.ca
cic.gc.ca
icare-iedec.cic.gc.ca
portal-portail.apps.cic.gc.ca
prson-srpel-emergency-fix.apps.cic.gc.ca
gcmsjobbank-SYSTESTMEL.cic.gc.ca
eservices.cic.gc.ca
extern.cic.gc.ca
*.cic.gc.ca
mobile.cic.gc.ca
services3.cic.gc.ca
ct-tc-pef.apps.cic.gc.ca
gcmsjobbank-PRD.cic.gc.ca
frs-stg.cic.gc.ca
gccic-psoft-gchrms-ig.cic.gc.ca
cicgatewaysigning-aus.cic.gc.ca
refugee-refugie-sandbox.apps.cic.gc.ca
frs-prd.cic.gc.ca
gccic-psoft-ig-gc89cert.cic.gc.ca
prt-srp.apps.cic.gc.ca
gcs-ssc.cic.gc.ca
onlineservices-servicesenligne.cic.gc.ca
extern.cic.gc.ca
citapply-citdemande.apps.cic.gc.ca
mobile.cic.gc.ca
pgp-development.apps.cic.gc.ca
ccps-stcc-trn.cic.gc.ca
sra-ads.cic.gc.ca
pgp-sandbox.apps.cic.gc.ca
onlineservices-servicesenligne.cic.gc.ca
eservices.cic.gc.ca
extern.cic.gc.ca
refugee-refugie.apps.cic.gc.ca
portal-portail.apps.cic.gc.ca
gcmscasestatus-PRD.cic.gc.ca
*.ra.apps.cic.gc.ca
extern.cic.gc.ca
api.a2sc-csa2-dev.apps.cic.gc.ca
tempo-pef.cic.gc.ca
gcmsjobbank-STG.cic.gc.ca
esubmission-soumissionenligne.cic.gc.ca
gcs-ssc-stg.cic.gc.ca
extern.cic.gc.ca
gcs-ssc.cic.gc.ca
gcs-ssc-stg.cic.gc.ca
CICPRCard.cic.gc.ca
extern.cic.gc.ca
pgp.cic.gc.ca
citapply-citdemande.apps.cic.gc.ca
services3.cic.gc.ca
gcs-ssc-sys.cic.gc.ca
frs-ste.cic.gc.ca
api.pgp-vt-ov-sandbox.apps.cic.gc.ca
tempo-trn.cic.gc.ca
MAIL.cic.gc.ca
icare-iedec-train.canada.ca
gcmsjobbank-PRD.cic.gc.ca
tempo-pte.cic.gc.ca
b.sra-ads.cic.gc.ca
specialmeasures-mesuresspeciales-emergency-fix.apps.cic.gc.ca
extern.cic.gc.ca
gcmsjobbank-PRD.cic.gc.ca
icare-iedec.cic.gc.ca
tempo-ste.cic.gc.ca
ra.apps.cic.gc.ca
a.sra-ads.cic.gc.ca
onlineservices-servicesenligne.cic.gc.ca
thingate.cic.gc.ca
*.cic.gc.ca
gcs-ssc.cic.gc.ca
cicgateway-dev.cic.gc.ca
gcs-ssc-stg.cic.gc.ca
icare-iedec.cic.gc.ca
NJES1S1106.CI.GC.CA
gcmsPIL005-SYSTESTMEL.cic.gc.ca
frs-ste.cic.gc.ca
cic.gc.ca
gcs-ssc.cic.gc.ca
icare-iedec.cic.gc.ca
dmp-portal.cic.gc.ca
gcs-ssc.cic.gc.ca
frs-dev.cic.gc.ca
prson-srpel-dev.apps.cic.gc.ca
thingate.cic.gc.ca
gcmsPIL005-PRD.cic.gc.ca
mobile.cic.gc.ca
ct-tc-stg.apps.cic.gc.ca
prson-srpel-emergency-fix.apps.cic.gc.ca
thingate.cic.gc.ca
extern.cic.gc.ca
secure.cic.gc.ca
gcmscasestatus-PRD.cic.gc.ca
tracker-suivi.apps.cic.gc.ca
onlineservices-dev.ci.gc.ca
icare-iedec.cic.gc.ca
pgp-sandbox.apps.cic.gc.ca
cic.gc.ca
Certificate
The complete raw certificate details for cic.gc.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILiTCCCnGgAwIBAgIQEkSMITTIqNbJloN+cf/vfjANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y MzA0MjUxNDMxNTFaFw0yNDA1MjQxNDMxNTFaMHsxCzAJBgNVBAYTAkNBMRAwDgYD VQQIEwdPbnRhcmlvMQ8wDQYDVQQHEwZPdHRhd2ExNTAzBgNVBAoTLEltbWlncmF0 aW9uLCBSZWZ1Z2VlcyBhbmQgQ2l0aXplbnNoaXAgQ2FuYWRhMRIwEAYDVQQDEwlj aWMuZ2MuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzgaZ4ojM 6VOcACu3FeODsF9uoiC/tmFq58vMt8daE/snKtezL1L2S3d94BcliCkhH5JaBBQO hrNrfeVMSiWh67oSRxRE1/lkYpEHSV8MuRUzV/vJ/Y06FUTqgI42v7XHW/9/RIBD yBP0gP4VdnWWsXt45X+4ru16VRt4PlX73qT5bJcx2rrV35F+sZVKUQKEat6da2d6 N/kMySEIQRaWkfNzt2EeL4QDiGLi97zJ4FEvw83hfxm8Tu5IWS0jTNXy+tv9dHdk 4I+lFvp5wXNUfkEyKdEP4YxK6kyHcrC+GVtLc3l/Vi0vt+I4EWUXgeKXfIL3sLNV JTvOFOWuzBTpAgMBAAGjggfHMIIHwzAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSt 3PzVX7O/hj6SLdeuRtEYhseACjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dg xgpMvzBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVu dHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wx ay1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRy dXN0Lm5ldC9sZXZlbDFrLmNybDCCBNUGA1UdEQSCBMwwggTIggljaWMuZ2MuY2GC DXd3dy5jaWMuZ2MuY2GCEWltbWlncmF0aW9uLmdjLmNhghFjaXRpemVuc2hpcC5n Yy5jYYIRY2l0b3llbm5ldGUuZ2MuY2GCHnNlcnZpY2VzZm9ybmV3Y29tZXJzLmNp Yy5nYy5jYYIqc2VydmljZXNwb3VybGVzbm91dmVhdXhhcnJpdmFudHMuY2ljLmdj LmNhgghjaS5nYy5jYYIWc2VyZW5kcmVhdWNhbmFkYS5nYy5jYYITZ29pbmd0b2Nh bmFkYS5nYy5jYYIVY2ljLmdzbGIuZ2xvYmFsLmdjLmNhghV3d3cuaW1taWdyYXRp b24uZ2MuY2GCFXd3dy5jaXRpemVuc2hpcC5nYy5jYYIVd3d3LmNpdG95ZW5uZXRl LmdjLmNhgiJ3d3cuc2VydmljZXNmb3JuZXdjb21lcnMuY2ljLmdjLmNhgi53d3cu c2VydmljZXNwb3VybGVzbm91dmVhdXhhcnJpdmFudHMuY2ljLmdjLmNhggx3d3cu Y2kuZ2MuY2GCGnd3dy5zZXJlbmRyZWF1Y2FuYWRhLmdjLmNhghd3d3cuZ29pbmd0 b2NhbmFkYS5nYy5jYYIZd3d3LmNpYy5nc2xiLmdsb2JhbC5nYy5jYYIVaW1taWdy YXRpb24uY2FuYWRhLmNhghl3d3cuaW1taWdyYXRpb24uY2FuYWRhLmNhghVjaXRp emVuc2hpcC5jYW5hZGEuY2GCGXd3dy5jaXRpemVuc2hpcC5jYW5hZGEuY2GCFWNp dG95ZW5uZXRlLmNhbmFkYS5jYYIZd3d3LmNpdG95ZW5uZXRlLmNhbmFkYS5jYYIe c2VydmljZXNmb3JuZXdjb21lcnMuY2FuYWRhLmNhgipzZXJ2aWNlc3BvdXJsZXNu b3V2ZWF1eGFycml2YW50cy5jYW5hZGEuY2GCLnd3dy5zZXJ2aWNlc3BvdXJsZXNu b3V2ZWF1eGFycml2YW50cy5jYW5hZGEuY2GCDmlyY2MuY2FuYWRhLmNhghJ3d3cu aXJjYy5jYW5hZGEuY2GCG3d3dy5nb2luZ3RvY2FuYWRhLmNhbmFkYS5jYYIac2Vy ZW5kcmVhdWNhbmFkYS5jYW5hZGEuY2GCHnd3dy5zZXJlbmRyZWF1Y2FuYWRhLmNh bmFkYS5jYYIScmVmdWdlZXMuY2FuYWRhLmNhghZ3d3cucmVmdWdlZXMuY2FuYWRh LmNhghJyZWZ1Z2llcy5jYW5hZGEuY2GCFnd3dy5yZWZ1Z2llcy5jYW5hZGEuY2GC FHNldHRsZW1lbnQuY2FuYWRhLmNhghh3d3cuc2V0dGxlbWVudC5jYW5hZGEuY2GC F2V0YWJsaXNzZW1lbnQuY2FuYWRhLmNhght3d3cuZXRhYmxpc3NlbWVudC5jYW5h ZGEuY2GCEnBhc3Nwb3J0LmNhbmFkYS5jYYIWd3d3LnBhc3Nwb3J0LmNhbmFkYS5j YYITcGFzc2Vwb3J0LmNhbmFkYS5jYYIXd3d3LnBhc3NlcG9ydC5jYW5hZGEuY2GC Ind3dy5zZXJ2aWNlc2Zvcm5ld2NvbWVycy5jYW5hZGEuY2GCF2dvaW5ndG9jYW5h ZGEuY2FuYWRhLmNhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwTAYDVR0gBEUwQzA3BgpghkgBhvpsCgEFMCkwJwYIKwYBBQUH AgEWG2h0dHBzOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwggF8Bgor BgEEAdZ5AgQCBIIBbASCAWgBZgB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABh7jT9XoAAAQDAEYwRAIgUu4Zpja/WQsyUAy5ne+bwXwh6xQUtORO NL6hy+ccMTsCID0lLc8RDNZXQ9MglYrCSyuPIF6kce6fXFURWDe1C/+jAHYA2ra/ az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGHuNP1kQAABAMARzBFAiBx DNneMeJvH0IBOyQ5IAZ+U54Az6ShiGGbAsgQcWslqgIhAP+yVGGeumVX0CFQpRsS fZ9ndDyyf10ERrb3W8lTymX4AHUAc9meiRtMlnigIH1HneayxhzQUV5xGSqMa4AQ esF3crUAAAGHuNP1uAAABAMARjBEAiAeQZ1gQcenOOV+UwLQzHSv0M7wKG2evJET 4a0vn/+zdwIgNOrbhJUigzK9mSeVu+bSGgjGiB5+Ep57NbYGCvR82mswDQYJKoZI hvcNAQELBQADggEBAMIYwoAJh8uduG9sE6lT54Ckjw+XeQCdlbYPC/EVPiCXkwz4 Mq4z/lnB8jCiLmoQPvbZ/S5TR/7v1/isrUNOjDBZyxCfq/aT+jGgJm3y+LIXl66W OkM8kGBEQFl58CI9G4gINSlFFNYNVywrUtFcy2QvJ1fIZPZQqWnTFp21y88tlKpy 5KIKrUvBs+VUX21tTZoBAvUKY9/2MGoMZ9ZBPpC6YxklMHZrnMHS9L00YeNbtE0m GJByic5TM77bAGJdGpd4ZFlcM+rJfO1xuGYiPTrppUyGgt2RWRkaviR5BcQjtK0V UqT1ZOM2gjLKBCK0YqLEniFF3LcBdpXNONYl9g8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM4GmeKIzOlTnAArtxXj g7BfbqIgv7ZhaufLzLfHWhP7JyrXsy9S9kt3feAXJYgpIR+SWgQUDoaza33lTEol oeu6EkcURNf5ZGKRB0lfDLkVM1f7yf2NOhVE6oCONr+1x1v/f0SAQ8gT9ID+FXZ1 lrF7eOV/uK7telUbeD5V+96k+WyXMdq61d+RfrGVSlEChGrenWtnejf5DMkhCEEW lpHzc7dhHi+EA4hi4ve8yeBRL8PN4X8ZvE7uSFktI0zV8vrb/XR3ZOCPpRb6ecFz VH5BMinRD+GMSupMh3KwvhlbS3N5f1YtL7fiOBFlF4Hil3yC97CzVSU7zhTlrswU 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 24282022278718531189922259547665198974 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-25 14:31:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 14:31:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Immigration, Refugees and Citizenship Canada' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cic.gc.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24339349654862531365468508474755560075822873555541193637343995842427162508374210684386845915036383152157536716623227679282053792402506696310271061314837339819411590691488154753452133164200336827306016948740768570238354835246045052826035701979927580350327506216699336203291085840133268300989235342446915465293743247319294218447206413456508616655326343167487692460568513695195301988973983723524819374410524925328425591901228326749651024917817835147574594452798155113508329665897594367681205816125944907292504533510199572730712277919580166253062341250071650193755728084201380866551677312223726657457876040329298782721257 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) addcfcd55fb3bf863e922dd7ae46d11886c7800a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1228 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cic.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cic.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immigration.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizenship.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citoyennete.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesfornewcomers.cic.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicespourlesnouveauxarrivants.cic.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serendreaucanada.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goingtocanada.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cic.gslb.global.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immigration.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizenship.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citoyennete.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicesfornewcomers.cic.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicespourlesnouveauxarrivants.cic.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serendreaucanada.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goingtocanada.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cic.gslb.global.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immigration.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immigration.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizenship.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizenship.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citoyennete.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citoyennete.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesfornewcomers.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicespourlesnouveauxarrivants.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicespourlesnouveauxarrivants.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ircc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ircc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goingtocanada.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serendreaucanada.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serendreaucanada.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refugees.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refugees.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refugies.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refugies.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settlement.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.settlement.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etablissement.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etablissement.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passport.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passeport.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passeport.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicesfornewcomers.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goingtocanada.canada.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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