intra.bicg.mto.gov.on.ca

- Government of Ontario -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1d:fb:3d:be:85:83:a7:8b:94:46:c9:23:43:10:65:b7 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Government of Ontario

Organization: Government of Ontario
State / Province: Ontario
Locality: Toronto
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 1d:fb:3d:be:85:83:a7:8b:94:46:c9:23:43:10:65:b7
Serial Number (int): 39852130710912169309684487240373265847
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 09:f3:40:47:d9:78:05:36:0a:ce:ad:ca:31:02:b0:4f:d3:fb:02:3b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): a5:77:0e:15:1c:81:e0:16:fd:af:50:ce:20:5c:9b:a7:29:65:3f:e4
Fingerprint (sha256): 06:aa:41:2c:16:ce:a2:2f:e3:7e:37:38:3e:7f:5b:5d:71:c6:03:9c:ec:33:ae:b7:45:57:a3:0c:c4:65:72:58

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate intra.bicg.mto.gov.on.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intra.bicg.mto.gov.on.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intra.bicg.mto.gov.on.ca
www.intra.bicg.mto.gov.on.ca

Other certificates including the domain name gov.on.ca

(limited to 100 certificates)
www.yoctpa.mcys.gov.on.ca
intra.aris.mto.gov.on.ca
*.uat.ase.gocloud.gov.on.ca
decisia.lexum.com
www.csrtcva.mcscs.jus.gov.on.ca
www.fsco.gov.on.ca
sip.stage.ees.gov.on.ca
intra.stage.grants.gov.on.ca
ws.dev.opc.rus.mto.gov.on.ca
*.dev.app.rlso.cloud.mto.gov.on.ca
stage.applications.lrc.gov.on.ca
www.tts.ssb.gov.on.ca
ws.api.stage.onsis.edu.gov.on.ca
intra.stage.peis.cyssc.gov.on.ca
intra.test.ehosso.sus.gov.on.ca
ws.build.sd.its.gov.on.ca
intra.ws2.dev.jip.jus.gov.on.ca
intra.avl.health.gov.on.ca
stage.apps.lrc.gov.on.ca
www.elto.gov.on.ca
slasto-tsapno.gov.on.ca
www.raqsb.mto.gov.on.ca
www.orgforms.gov.on.ca
load12.stage.onsis.edu.gov.on.ca
sdwis.moh.gov.on.ca
intra.stage.sus.gov.on.ca
intra.landmark.fin.gov.on.ca
www.yoctpa.children.gov.on.ca
www.pas.gov.on.ca
dev.sp.ltc.gov.on.ca
dev2.login.publicsecure.gov.on.ca
hcc3.hcc.moh.gov.on.ca
www.ohp.mcl.gov.on.ca
www2.fsco.gov.on.ca
www.osc.ca
www.edtpre.health.gov.on.ca
stage.oneksso.sus.gov.on.ca
intra.ws2.test.jip.jus.gov.on.ca
stage.energy.gov.on.ca
intra.sharepoint.ddsb.csc.gov.on.ca
load.dmrv.edcs.csc.gov.on.ca
www.ecis.edu.gov.on.ca
intra.load.stage.oid.cmod.csc.gov.on.ca
ws.dss.mto.gov.on.ca
ontario.ca
HSIMI.COM
stage.ws2.api.agrisuite.omafra.gov.on.ca
www.eydportal.edcs.csc.gov.on.ca
*.mscrm.sdc.gov.on.ca
ws.stage.esdi.mto.gov.on.ca
stage.secure.sp.ltc.gov.on.ca
stage.geohub.lio.gov.on.ca
www.nursingstrategy.health.gov.on.ca
www.osc.gov.on.ca
intra.ws.dev.gtw.apim.mto.gov.on.ca
dev.oms.mto.gov.on.ca
intra.dev.sp.sdc.gov.on.ca
www.eoss.tcu.gov.on.ca
oentrain.edu.gov.on.ca
stage.lrcsde.lrc.gov.on.ca
www.esubmit.health.gov.on.ca
intra.dev.boe.eois.labour.gov.on.ca
www.hoursofwork.labour.gov.on.ca
ws.stage.osapcontrib.iaccess.gov.on.ca
www.csrtcva.mcscs.jus.gov.on.ca
www.apps.lrc.gov.on.ca
ws.apiplatform.mto.gov.on.ca
stage.esclaim.labour.gov.on.ca
intra.myops.gov.on.ca
www.rlso-onlineservices.mto.gov.on.ca
vcse2.jvn.jus.gov.on.ca
www.quarts.mah.gov.on.ca
www.services1.gov.on.ca
RASToken1.gov.on.ca
oscom-tor-ef01.osc.gov.on.ca
www.edt.health.gov.on.ca
www.sts.gov.on.ca
cacgigdcdbdb204.service.cihs.gov.on.ca
vcse1.jvn.jus.gov.on.ca
ws.stage.daudms.css.gov.on.ca
www.premier.gov.on.ca
decisia.lexum.com
www.environet.lrc.gov.on.ca
ws.stage.appco.services.ltc.gov.on.ca
Ws.intra.stage.ims.fin.gov.on.ca
www.samo.css.gov.on.ca
intra.dev03.hyp.ifis.gov.on.ca
intra.stage.conversion.otc.onttax.fin.gov.on.ca
www.firstwatch.gov.on.ca
intra.stage.ltch.training.health.gov.on.ca
hawkular-metrics.pc.prd.ros.gocloud.gov.on.ca
intra.test.chatbot.css.gov.on.ca
stage.cpin.children.gov.on.ca
eforms1.osc.gov.on.ca
grafana-openshift-grafana.pc.prd.ros.gocloud.gov.on.ca
www2.fsco.gov.on.ca
sfis.edu.gov.on.ca
intra.load.opsdocs.gov.on.ca
www.ask.omafra.gov.on.ca
intra.dev.gisetl.lrc.gov.on.ca

Certificate

The complete raw certificate details for intra.bicg.mto.gov.on.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIQHfs9voWDp4uURskjQxBltzANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDAyMTYxODQ0MjZaFw0yNTAzMDkxODQ0MjVaMHQxCzAJBgNVBAYTAkNBMRAwDgYD
VQQIEwdPbnRhcmlvMRAwDgYDVQQHEwdUb3JvbnRvMR4wHAYDVQQKExVHb3Zlcm5t
ZW50IG9mIE9udGFyaW8xITAfBgNVBAMTGGludHJhLmJpY2cubXRvLmdvdi5vbi5j
YTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL6g6yfILJLGTGNtAmi0
cXEMX4zmIfq1tnyS2GO397gOaQDxrUUP+QjxnezdrpcvN95Mgh7FgA78lQXauz6q
gEh4MdmRUEzOvbD7JMMduXAgR3LWnccmpPIXNrbzw5ciUzXDebYfRokug4ERoU5z
JWr+/Z9XGmQ+GwreeLolT9DiXsePeH8AP62zkrPG2Di+Yq53DmloMqzErJnxxxEa
h5aKqZtxquo3LEeAX3eR2wkd1/+8XESlc3SCmE/AgNo3YMT+i3Tu22Txask1UXpX
vDIdOBzyYoEuSgKFPFyxWv8B1GdgmymGztbFvlPMrZewFa01wq/68xgLqQPJ/9XR
BPoBZSOYD/RV4Vv9BWIDpnW4DHD7r8BXAFpImxtaI2ZEXXfbOn7HkYfC37RoRuC7
VAUyAuEB8XG0IO4BW5SuEInAybow9Ay7+h0XeMh+PVHJh1LTrFlBKaBKAO208qoM
z5OdkBvaufFgk2T7L5JZvu/Q7cXyBBBzb3sdLAdhAdLK3unFWmgO9bwJfSQ9tmry
DRjSf7TuZJoJfhQfDr7XALnXLchIHKpz4cI00W05H2Up8cuOhORdsDrtlU8QgRo3
7P7cJ+xapiWkCfNrMyr2A+Re0vuBzLSUw5/mG3Qu8yHlenK0UZsQcykRk6ErBs2l
euitg52we9PKTpz2v2ZjZxxVAgMBAAGjggGNMIIBiTAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQJ80BH2XgFNgrOrcoxArBP0/sCOzAfBgNVHSMEGDAWgBSConB03bxT
P8971PfNf6dgxgpMvzBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6
Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1
c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDov
L2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBBBgNVHREEOjA4ghhpbnRyYS5i
aWNnLm10by5nb3Yub24uY2GCHHd3dy5pbnRyYS5iaWNnLm10by5nb3Yub24uY2Ew
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAT
BgNVHSAEDDAKMAgGBmeBDAECAjATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAQEATU6z/MXdYOTwgprCITx9l9AZP4vWdiYQ6wN6hZtOmSSUf0HP
RYGRCtj18v7XzYJPq+RqNi5+ZiTXZ/sHBTreDXSg8E39rtREPuSvvvFD0l0mzRVm
J1qvNxMrejlqJ+2KjPbybMfmZA2LrhvJql5mQzdbFEUb9szb0x1PBS5bXwYvmM25
0YMM0/USdWzE2LvschzAW+XatdBlOLYyBcMmvFIQt+5Itn/gOqluXjheZXoM0mmc
Y/oslIkj+m6ofL5t+4dScLUJ5Bx2JkXE5AK7MKDp67iHDK68WDuLLVagyRqQNsY2
rxop3ypOeYGDsTJD4A+XCE2rVMKFvB/nGdmFTA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvqDrJ8gsksZMY20CaLRx
cQxfjOYh+rW2fJLYY7f3uA5pAPGtRQ/5CPGd7N2uly833kyCHsWADvyVBdq7PqqA
SHgx2ZFQTM69sPskwx25cCBHctadxyak8hc2tvPDlyJTNcN5th9GiS6DgRGhTnMl
av79n1caZD4bCt54uiVP0OJex494fwA/rbOSs8bYOL5irncOaWgyrMSsmfHHERqH
loqpm3Gq6jcsR4Bfd5HbCR3X/7xcRKVzdIKYT8CA2jdgxP6LdO7bZPFqyTVRele8
Mh04HPJigS5KAoU8XLFa/wHUZ2CbKYbO1sW+U8ytl7AVrTXCr/rzGAupA8n/1dEE
+gFlI5gP9FXhW/0FYgOmdbgMcPuvwFcAWkibG1ojZkRdd9s6fseRh8LftGhG4LtU
BTIC4QHxcbQg7gFblK4QicDJujD0DLv6HRd4yH49UcmHUtOsWUEpoEoA7bTyqgzP
k52QG9q58WCTZPsvklm+79DtxfIEEHNvex0sB2EB0sre6cVaaA71vAl9JD22avIN
GNJ/tO5kmgl+FB8OvtcAudctyEgcqnPhwjTRbTkfZSnxy46E5F2wOu2VTxCBGjfs
/twn7FqmJaQJ82szKvYD5F7S+4HMtJTDn+YbdC7zIeV6crRRmxBzKRGToSsGzaV6
6K2DnbB708pOnPa/ZmNnHFUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39852130710912169309684487240373265847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 18:44:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 18:44:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government of Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intra.bicg.mto.gov.on.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777696788990585745380060969879811877405969378300686402016081253474139048095271554495298736999027885943673853906727111749300085275239141965463768537196451633743563718400182262773800882224631649948241065836386049178206908619240429640543119287706251964014112862509179389172544132464314668006286975115686789924508874684720019281022262128993238554564582606048345596695185658461240776673881684613935510694166291580872809696218483838168056938584164473653924339029706216232978525617483354850168154002927587481220687525084191927046997167497977326782654118681698142361530526029179876940877487708212891232568278151475625108558246567398241499349660720349696330836942767028805800740860234193649455099707022514958118251488699158971451248458773273329355997293129507713355346962447546653161977488689996463695245445511045129774495119074912774840666153241283935120209894153561998339970550007074995683970048748228017862200549985795233619042264513590869624046254064797829954298730620249260123850066733769838908019088648300034588444438758505879340227250122659241279670199266734642646403748519170100436453400821763727225789602377762307896180141973893020797259977228612080263168065863809301858029596472615786900369747721877339460140975312116049525942459477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09f34047d97805360aceadca3102b04fd3fb023b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intra.bicg.mto.gov.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intra.bicg.mto.gov.on.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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