cic.gc.ca

- Immigration, Refugees and Citizenship Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 12:44:8c:21:34:c8:a8:d6:c9:96:83:7e:71:ff:ef:7e was issued on by Entrust, Inc..

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Immigration, Refugees and Citizenship Canada

Organization: Immigration, Refugees and Citizenship Canada
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 12:44:8c:21:34:c8:a8:d6:c9:96:83:7e:71:ff:ef:7e
Serial Number (int): 24282022278718531189922259547665198974
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: ad:dc:fc:d5:5f:b3:bf:86:3e:92:2d:d7:ae:46:d1:18:86:c7:80:0a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 27:2e:a3:9f:39:43:2e:55:41:9c:54:7e:e4:98:93:9a:80:eb:55:d8
Fingerprint (sha256): 05:4f:1d:85:45:1a:94:cf:04:dd:bd:4e:9d:a7:6b:98:9b:82:fc:5a:3c:bd:30:f6:b9:47:e1:d7:4b:03:47:ba

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cic.gc.ca

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cic.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cic.gc.ca
www.cic.gc.ca
immigration.gc.ca
citizenship.gc.ca
citoyennete.gc.ca
servicesfornewcomers.cic.gc.ca
servicespourlesnouveauxarrivants.cic.gc.ca
ci.gc.ca
serendreaucanada.gc.ca
goingtocanada.gc.ca
cic.gslb.global.gc.ca
www.immigration.gc.ca
www.citizenship.gc.ca
www.citoyennete.gc.ca
www.servicesfornewcomers.cic.gc.ca
www.servicespourlesnouveauxarrivants.cic.gc.ca
www.ci.gc.ca
www.serendreaucanada.gc.ca
www.goingtocanada.gc.ca
www.cic.gslb.global.gc.ca
immigration.canada.ca
www.immigration.canada.ca
citizenship.canada.ca
www.citizenship.canada.ca
citoyennete.canada.ca
www.citoyennete.canada.ca
servicesfornewcomers.canada.ca
servicespourlesnouveauxarrivants.canada.ca
www.servicespourlesnouveauxarrivants.canada.ca
ircc.canada.ca
www.ircc.canada.ca
www.goingtocanada.canada.ca
serendreaucanada.canada.ca
www.serendreaucanada.canada.ca
refugees.canada.ca
www.refugees.canada.ca
refugies.canada.ca
www.refugies.canada.ca
settlement.canada.ca
www.settlement.canada.ca
etablissement.canada.ca
www.etablissement.canada.ca
passport.canada.ca
www.passport.canada.ca
passeport.canada.ca
www.passeport.canada.ca
www.servicesfornewcomers.canada.ca
goingtocanada.canada.ca

Other certificates including the domain name cic.gc.ca

(limited to 100 certificates)
Secure.cic.gc.ca
remote.cic.gc.ca
refugee-refugie-development.apps.cic.gc.ca
newgcs-nouveaussc.cic.gc.ca
cic.gc.ca
icare-iedec.cic.gc.ca
portal-portail.apps.cic.gc.ca
prson-srpel-emergency-fix.apps.cic.gc.ca
gcmsjobbank-SYSTESTMEL.cic.gc.ca
eservices.cic.gc.ca
extern.cic.gc.ca
*.cic.gc.ca
mobile.cic.gc.ca
services3.cic.gc.ca
ct-tc-pef.apps.cic.gc.ca
gcmsjobbank-PRD.cic.gc.ca
frs-stg.cic.gc.ca
gccic-psoft-gchrms-ig.cic.gc.ca
cicgatewaysigning-aus.cic.gc.ca
refugee-refugie-sandbox.apps.cic.gc.ca
frs-prd.cic.gc.ca
gccic-psoft-ig-gc89cert.cic.gc.ca
prt-srp.apps.cic.gc.ca
gcs-ssc.cic.gc.ca
onlineservices-servicesenligne.cic.gc.ca
extern.cic.gc.ca
citapply-citdemande.apps.cic.gc.ca
mobile.cic.gc.ca
pgp-development.apps.cic.gc.ca
ccps-stcc-trn.cic.gc.ca
sra-ads.cic.gc.ca
pgp-sandbox.apps.cic.gc.ca
onlineservices-servicesenligne.cic.gc.ca
eservices.cic.gc.ca
extern.cic.gc.ca
refugee-refugie.apps.cic.gc.ca
portal-portail.apps.cic.gc.ca
gcmscasestatus-PRD.cic.gc.ca
*.ra.apps.cic.gc.ca
extern.cic.gc.ca
api.a2sc-csa2-dev.apps.cic.gc.ca
tempo-pef.cic.gc.ca
gcmsjobbank-STG.cic.gc.ca
esubmission-soumissionenligne.cic.gc.ca
gcs-ssc-stg.cic.gc.ca
extern.cic.gc.ca
gcs-ssc.cic.gc.ca
gcs-ssc-stg.cic.gc.ca
CICPRCard.cic.gc.ca
extern.cic.gc.ca
pgp.cic.gc.ca
citapply-citdemande.apps.cic.gc.ca
services3.cic.gc.ca
gcs-ssc-sys.cic.gc.ca
frs-ste.cic.gc.ca
api.pgp-vt-ov-sandbox.apps.cic.gc.ca
tempo-trn.cic.gc.ca
MAIL.cic.gc.ca
icare-iedec-train.canada.ca
gcmsjobbank-PRD.cic.gc.ca
tempo-pte.cic.gc.ca
b.sra-ads.cic.gc.ca
specialmeasures-mesuresspeciales-emergency-fix.apps.cic.gc.ca
extern.cic.gc.ca
gcmsjobbank-PRD.cic.gc.ca
icare-iedec.cic.gc.ca
tempo-ste.cic.gc.ca
ra.apps.cic.gc.ca
a.sra-ads.cic.gc.ca
onlineservices-servicesenligne.cic.gc.ca
thingate.cic.gc.ca
*.cic.gc.ca
gcs-ssc.cic.gc.ca
cicgateway-dev.cic.gc.ca
gcs-ssc-stg.cic.gc.ca
icare-iedec.cic.gc.ca
NJES1S1106.CI.GC.CA
gcmsPIL005-SYSTESTMEL.cic.gc.ca
frs-ste.cic.gc.ca
cic.gc.ca
gcs-ssc.cic.gc.ca
icare-iedec.cic.gc.ca
dmp-portal.cic.gc.ca
gcs-ssc.cic.gc.ca
frs-dev.cic.gc.ca
prson-srpel-dev.apps.cic.gc.ca
thingate.cic.gc.ca
gcmsPIL005-PRD.cic.gc.ca
mobile.cic.gc.ca
ct-tc-stg.apps.cic.gc.ca
prson-srpel-emergency-fix.apps.cic.gc.ca
thingate.cic.gc.ca
extern.cic.gc.ca
secure.cic.gc.ca
gcmscasestatus-PRD.cic.gc.ca
tracker-suivi.apps.cic.gc.ca
onlineservices-dev.ci.gc.ca
icare-iedec.cic.gc.ca
pgp-sandbox.apps.cic.gc.ca
cic.gc.ca

Certificate

The complete raw certificate details for cic.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM4GmeKIzOlTnAArtxXj
g7BfbqIgv7ZhaufLzLfHWhP7JyrXsy9S9kt3feAXJYgpIR+SWgQUDoaza33lTEol
oeu6EkcURNf5ZGKRB0lfDLkVM1f7yf2NOhVE6oCONr+1x1v/f0SAQ8gT9ID+FXZ1
lrF7eOV/uK7telUbeD5V+96k+WyXMdq61d+RfrGVSlEChGrenWtnejf5DMkhCEEW
lpHzc7dhHi+EA4hi4ve8yeBRL8PN4X8ZvE7uSFktI0zV8vrb/XR3ZOCPpRb6ecFz
VH5BMinRD+GMSupMh3KwvhlbS3N5f1YtL7fiOBFlF4Hil3yC97CzVSU7zhTlrswU
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24282022278718531189922259547665198974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-25 14:31:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 14:31:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Immigration, Refugees and Citizenship Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cic.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24339349654862531365468508474755560075822873555541193637343995842427162508374210684386845915036383152157536716623227679282053792402506696310271061314837339819411590691488154753452133164200336827306016948740768570238354835246045052826035701979927580350327506216699336203291085840133268300989235342446915465293743247319294218447206413456508616655326343167487692460568513695195301988973983723524819374410524925328425591901228326749651024917817835147574594452798155113508329665897594367681205816125944907292504533510199572730712277919580166253062341250071650193755728084201380866551677312223726657457876040329298782721257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							addcfcd55fb3bf863e922dd7ae46d11886c7800a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1228 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immigration.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizenship.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citoyennete.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesfornewcomers.cic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicespourlesnouveauxarrivants.cic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serendreaucanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goingtocanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cic.gslb.global.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immigration.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizenship.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citoyennete.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicesfornewcomers.cic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicespourlesnouveauxarrivants.cic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serendreaucanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goingtocanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cic.gslb.global.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immigration.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immigration.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizenship.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizenship.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citoyennete.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citoyennete.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesfornewcomers.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicespourlesnouveauxarrivants.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicespourlesnouveauxarrivants.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ircc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ircc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goingtocanada.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serendreaucanada.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serendreaucanada.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refugees.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refugees.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refugies.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refugies.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settlement.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.settlement.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etablissement.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etablissement.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passport.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passeport.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passeport.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicesfornewcomers.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goingtocanada.canada.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000187b8d3f57a0000040300463044022052ee19a636bf590b32500cb99def9bc17c21eb1414b4e44e34bea1cbe71c313b02203d252dcf110cd65743d320958ac24b2b8f205ea471ee9f5c55115837b50bffa3007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000187b8d3f59100000403004730450220710cd9de31e26f1f42013b243920067e539e00cfa4a188619b02c810716b25aa022100ffb254619eba6557d02150a51b127d9f67743cb27f5d0446b6f75bc953ca65f800750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000187b8d3f5b8000004030046304402201e419d6041c7a738e57e5302d0cc74afd0cef0286d9ebc9113e1ad2f9fffb377022034eadb8495228332bd992795bbe6d21a08c6881e7e129e7b35b6060af47cda6b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c218c2800987cb9db86f6c13a953e780a48f0f9779009d95b60f0bf1153e2097930cf832ae33fe59c1f230a22e6a103ef6d9fd2e5347feefd7f8acad434e8c3059cb109fabf693fa31a0266df2f8b21797ae963a433c906044405979f0223d1b880835294514d60d572c2b52d15ccb642f2757c864f650a969d3169db5cbcf2d94aa72e4a20aad4bc1b3e5545f6d6d4d9a0102f50a63dff6306a0c67d6413e90ba63192530766b9cc1d2f4bd3461e35bb44d2618907289ce5333bedb00625d1a977864595c33eac97ced71b866223d3ae9a54c8682dd9159191abe247905c423b4ad1552a4f564e3368232ca0422b462a2c49e2145dcb7017695cd38d625f60f