abdlan.gov.ab.ca

- Government of the Province of Alberta -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 24:da:ba:fa:94:d6:73:30:e6:a0:d9:6b:f1:90:65:f2 was issued on by Sectigo Limited.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Government of the Province of Alberta

Organization: Government of the Province of Alberta
State / Province: Alberta
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 24:da:ba:fa:94:d6:73:30:e6:a0:d9:6b:f1:90:65:f2
Serial Number (int): 48987920944707507177504322989136569842
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 3d:b0:a5:18:a6:ad:da:f2:25:de:77:57:1e:d8:12:50:fe:7e:a4:36
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): ca:db:21:75:a6:d0:69:8a:a3:0d:13:db:ed:fe:35:d7:7c:91:4d:28
Fingerprint (sha256): 06:63:4e:49:86:76:e5:59:4e:16:e8:40:b5:e1:b8:b3:b6:6b:43:fb:5f:34:eb:64:4a:d8:a5:a2:21:cc:61:b6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate abdlan.gov.ab.ca

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abdlan.gov.ab.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abdlan.gov.ab.ca
abdlan.alberta.ca
copproxy.abdlan.gov.ab.ca
copproxytrain.abdlan.gov.ab.ca
copweb.abdlan.gov.ab.ca
copwebtrain.abdlan.gov.ab.ca
train.abdlan.alberta.ca
train.abdlan.gov.ab.ca
www.abdlan.alberta.ca
www.abdlan.gov.ab.ca
www.train.abdlan.alberta.ca
www.train.abdlan.gov.ab.ca

Other certificates including the domain name gov.ab.ca

(limited to 100 certificates)
www.extintuat.gov.ab.ca
mail.nrcb.gov.ab.ca
www.pablo.gov.ab.ca
library.gov.ab.ca
uat.epstest.gov.ab.ca
access.lan.gov.ab.ca
www.petrinex.gov.ab.ca
wap.gov.ab.ca
rrrsuat.gov.ab.ca
cpi.gov.ab.ca
webmail.gov.ab.ca
healthshare.gov.ab.ca
travis2.gov.ab.ca
www.hrtrn1.gov.ab.ca
portal.aet.gov.ab.ca
aemagis.gov.ab.ca
www.itsmprd.gov.ab.ca
*.forms.gov.ab.ca
extranetsyt.inftra.gov.ab.ca
sspr.gov.ab.ca
nadc.gov.ab.ca
rtc.lan.gov.ab.ca
www.lrc.education.gov.ab.ca
abdlan.gov.ab.ca
alta.registries.gov.ab.ca
extern.wln.gov.ab.ca
lyncaccess2.gov.ab.ca
xtrauat.edc.gov.ab.ca
www.tradesecrets.gov.ab.ca
www.adoptionsadmin.gov.ab.ca
acfa.gov.ab.ca
mahextranet.gov.ab.ca
secureaccess.pdd.gov.ab.ca
www.blimsonline.gov.ab.ca
abdlan.gov.ab.ca
owa-auth.gov.ab.ca
healthshare.gov.ab.ca
www.ecollision.gov.ab.ca
www.mims.gov.ab.ca
qpsecure.gov.ab.ca
extranet.gov.ab.ca
datalink.gov.ab.ca
ownernet.gov.ab.ca
eascdv.env.gov.ab.ca
www.ftoa.trans.gov.ab.ca
eascuv.env.gov.ab.ca
www.trans.gov.ab.ca
www3.eub.gov.ab.ca
www.petrinex.gov.ab.ca
extranetuat.learning.gov.ab.ca
gpas.trans.gov.ab.ca
acis.gov.ab.ca
secureaccess2.gov.ab.ca
environment.extranet.gov.ab.ca
secureaccess.srd.gov.ab.ca
uat.trans.gov.ab.ca
qp.inter.gov.ab.ca
extranet.inftra.gov.ab.ca
*.epstest.gov.ab.ca
wln.inftra.gov.ab.ca
*.edt.gov.ab.ca
aemagis.gov.ab.ca
www.padev1.gov.ab.ca
addrveruat.gov.ab.ca
ext.sp.mah.gov.ab.ca
*.ds.ma.gov.ab.ca
www.hr90uataext.gov.ab.ca
uat.adfs.aet.gov.ab.ca
gpas.env.gov.ab.ca
extern1.commonuat.secureaccess.gov.ab.ca
ocs.gov.ab.ca
goauat.portal.gov.ab.ca
secureaccess.gov.ab.ca
registries.gov.ab.ca
ps.adfs.aet.gov.ab.ca
magic.agric.gov.ab.ca
external.sp.environment.gov.ab.ca
cdms.ext.gov.ab.ca
tracs.finance.gov.ab.ca
cj.external.gov.ab.ca
wln.inftra.gov.ab.ca
www.lrc.education.gov.ab.ca
lyncaccess2.gov.ab.ca
abdlan.gov.ab.ca
itr.gov.ab.ca
prod.util.moves.gov.ab.ca
goainternational.gov.ab.ca
sydsql.lrc.education.gov.ab.ca
www.fundingconsortium.gov.ab.ca
ocswc.lan.gov.ab.ca
xwiki.gov.ab.ca
www.padev1.gov.ab.ca
ext.sp.agric.gov.ab.ca
www.servicelink.gov.ab.ca
TheHive.gov.ab.ca
sni.cloudflaressl.com
blimscem.gov.ab.ca
wap.gov.ab.ca
extranet.inftra.gov.ab.ca
library.gov.ab.ca

Certificate

The complete raw certificate details for abdlan.gov.ab.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQJYvWYg3FPY7EbiXAyf
am8dC1R5rnNmx+zvsxeWsTOBP1GAXr3VtAOCmzYNmI2Um9bzVMGFiKae4HEEiQif
f31/w9QLFO9vqj9UOpcJ5IRqD3eh0J+VxqB5ltnGM90vX92AZ8DUv2sDPThUvOtm
n3ym6D2txkZHCBjCmGljShA0K2WoQfIl08PNS5xjmB8bSYUjow4u7i6cL7pKxXYC
5hvADbq6017H2GYhMoliDQuQeLwCjaX/3FVA682FL6GLRfHdfIEa24bqZxLrvMrI
rWeoDp40iTszx/b8/Kf/mw4bYgDksa4qAx33Mes+LWUNHhKVtS4xY9GJFwMk2QeV
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48987920944707507177504322989136569842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government of the Province of Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abdlan.gov.ab.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24365150029760918922575610970107609537888317029830141781097651048479272955022231343771551542979446198879349179664834293423466111346505681581381623717073385738839138059759536737346148109676026230791775545137883406771120254838565632376099446226329248807023775172684320009806575470266232370295257954307910907949573534479959247552750321355213588907919544119367737582560326832140734031391640851017891480052182668790786473196791184601134830877307941697197582112699458437961412094688660881416050336992889855273283757072230811935099224053122765495861481137963968675737575903029797656138077611439189144821605649046093443863933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3db0a518a6addaf225de77571ed81250fe7ea436
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (306 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdlan.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdlan.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copproxy.abdlan.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copproxytrain.abdlan.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copweb.abdlan.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copwebtrain.abdlan.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.abdlan.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.abdlan.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abdlan.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abdlan.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.train.abdlan.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.train.abdlan.gov.ab.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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