cfc-swc.gc.ca

- Shared Services Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 77:10:eb:7e:da:ff:7c:e8:92:92:a9:54:25:f6:ad:2d was issued on by Entrust, Inc..

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Shared Services Canada

Organization: Shared Services Canada
State / Province: Quebec
Locality: Gatineau
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 77:10:eb:7e:da:ff:7c:e8:92:92:a9:54:25:f6:ad:2d
Serial Number (int): 158265984664923479146170839118409805101
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: db:6d:cc:1b:2f:4c:e8:b1:bd:a4:e7:a8:df:92:bd:30:16:eb:b1:83
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e7:84:3a:95:b3:02:c1:7e:6a:61:80:31:a2:29:2c:81:9a:45:36:6e
Fingerprint (sha256): 07:79:8e:56:40:1f:8a:85:85:1f:a9:ce:43:57:f2:92:d0:69:1a:34:3c:01:b2:9e:3e:4a:1c:9b:d2:f5:5f:9c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cfc-swc.gc.ca

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cfc-swc.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cfc-swc.gc.ca
www.cfc-swc.gc.ca
6dec.gc.ca
dec6.gc.ca
endviolence.gc.ca
fegc-wage.gc.ca
femmes-egalite-genres.canada.ca
femmes-women.gc.ca
femmes.gc.ca
finilaviolence.gc.ca
iwd.gc.ca
jif.gc.ca
mhf.gc.ca
swc-cfc.gc.ca
wage-fegc.gc.ca
whm.gc.ca
women-femmes.gc.ca
women-gender-equality.canada.ca
women.gc.ca
www.6dec.gc.ca
www.dec6.gc.ca
www.endviolence.gc.ca
www.fegc-wage.gc.ca
www.femmes-egalite-genres.canada.ca
www.finilaviolence.gc.ca
www.iwd.gc.ca
www.jif.gc.ca
www.mhf.gc.ca
www.swc-cfc.gc.ca
www.wage-fegc.gc.ca
www.women-gender-equality.canada.ca
www.women.gc.ca
www.femmes-women.gc.ca
www.femmes.gc.ca
www.whm.gc.ca
www.women-femmes.gc.ca

Other certificates including the domain name cfc-swc.gc.ca

(limited to 100 certificates)
cfc-swc.gc.ca
cfc-swc.gc.ca
cfc-swc.gc.ca
app.fegc-wage.gc.ca
www.cfc-swc.gc.ca

mail.fegc-wage.gc.ca
cfc-swc.gc.ca
mail.fegc-wage.gc.ca
cfc-swc.gc.ca

Certificate

The complete raw certificate details for cfc-swc.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJJzCCCA+gAwIBAgIQdxDrftr/fOiSkqlUJfatLTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDAyMDIxMjU5MDhaFw0yNTAyMTYxMjU5MDdaMGoxCzAJBgNVBAYTAkNBMQ8wDQYD
VQQIEwZRdWViZWMxETAPBgNVBAcTCEdhdGluZWF1MR8wHQYDVQQKExZTaGFyZWQg
U2VydmljZXMgQ2FuYWRhMRYwFAYDVQQDEw1jZmMtc3djLmdjLmNhMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J7r+AkQxX3T4kWSC1Py5/tzs+0bdESu
ykQCQ7ae+jEdjHNmcZPkyoTY+FtLv3+LWh/QsrcswMOgJpMAc1TKbkrvZJtk61kq
vMN6FiSJ0OT5+9TTeTpVC6btQVZkdzCO+/5uhrPEV+VGdA5ioOE04I9+PMLbxZl5
btPkm2OcL1tzH0E6CmuG+YiO3/42vrHl++d4oQcn/3fS/0UA9bbCb12ceKZoF8XR
mi1zqhzuRjrT8GjlJYfHPJPHkkk+UijcM291leTXbiOc/6eS4UORs9gYvAa9LKPa
krK+XuC9YP8SQ6DKzPWhCDrz1VqdIkPagr0Cn3dKf2l3ac2S/wW/qQIDAQABo4IF
djCCBXIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU223MGy9M6LG9pOeo35K9MBbr
sYMwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEE
XDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEF
BQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMG
A1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5j
cmwwggK5BgNVHREEggKwMIICrIINY2ZjLXN3Yy5nYy5jYYIRd3d3LmNmYy1zd2Mu
Z2MuY2GCCjZkZWMuZ2MuY2GCCmRlYzYuZ2MuY2GCEWVuZHZpb2xlbmNlLmdjLmNh
gg9mZWdjLXdhZ2UuZ2MuY2GCH2ZlbW1lcy1lZ2FsaXRlLWdlbnJlcy5jYW5hZGEu
Y2GCEmZlbW1lcy13b21lbi5nYy5jYYIMZmVtbWVzLmdjLmNhghRmaW5pbGF2aW9s
ZW5jZS5nYy5jYYIJaXdkLmdjLmNhgglqaWYuZ2MuY2GCCW1oZi5nYy5jYYINc3dj
LWNmYy5nYy5jYYIPd2FnZS1mZWdjLmdjLmNhggl3aG0uZ2MuY2GCEndvbWVuLWZl
bW1lcy5nYy5jYYIfd29tZW4tZ2VuZGVyLWVxdWFsaXR5LmNhbmFkYS5jYYILd29t
ZW4uZ2MuY2GCDnd3dy42ZGVjLmdjLmNhgg53d3cuZGVjNi5nYy5jYYIVd3d3LmVu
ZHZpb2xlbmNlLmdjLmNhghN3d3cuZmVnYy13YWdlLmdjLmNhgiN3d3cuZmVtbWVz
LWVnYWxpdGUtZ2VucmVzLmNhbmFkYS5jYYIYd3d3LmZpbmlsYXZpb2xlbmNlLmdj
LmNhgg13d3cuaXdkLmdjLmNhgg13d3cuamlmLmdjLmNhgg13d3cubWhmLmdjLmNh
ghF3d3cuc3djLWNmYy5nYy5jYYITd3d3LndhZ2UtZmVnYy5nYy5jYYIjd3d3Lndv
bWVuLWdlbmRlci1lcXVhbGl0eS5jYW5hZGEuY2GCD3d3dy53b21lbi5nYy5jYYIW
d3d3LmZlbW1lcy13b21lbi5nYy5jYYIQd3d3LmZlbW1lcy5nYy5jYYINd3d3Lndo
bS5nYy5jYYIWd3d3LndvbWVuLWZlbW1lcy5nYy5jYTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBMGA1UdIAQMMAowCAYGZ4EM
AQICMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgDm0jFjQHeMwRBBBtdxuc7B
0kD2loSG+7qHMh39HjeOUAAAAY1p5sdNAAAEAwBHMEUCIQDMG8HLS42uvMJRrfhQ
SnfPdcILQThW5xmIA8DsI1qpSgIgTL9vAe7w1ZviNF3kKhhLmJbeEq5wikP3BYeO
ge40QuYAdwCi4wrkRe+9rZt+OO1HZ3dT14JbhJTXK14bLMS5UKRH5wAAAY1p5sd4
AAAEAwBIMEYCIQD/Kdxgb8YUxQsBDQE1H/m7wg19tRj2QxioeaM7pbhL+gIhAOIn
HkEqyLWVccj9vpANNaJ6K2WuIg5Xd9eAVHg+2Gi6AHcATnWjJ1yaEMM4W2zU3z9S
6x3w4I4bjWnAsfpksWKaOd8AAAGNaebHpwAABAMASDBGAiEAmosaYq3Nt+rxkPKs
HdQIpINnPH8NQqlkAucbab/r7nwCIQDpTcknmVijIgNPm19drjrGMhLHcB3UPr/j
JrETSib3ojANBgkqhkiG9w0BAQsFAAOCAQEAh1NAfNkiQxeSg3xx+/bKH69nvvU/
qFqJOtbTAkzVlQku9knETZlCyj34M2E1IYd7vT3tAoH5QfYx3EWtt+5bS6D7QNva
KBcqNN8dUCU0WkYAmNyYykwKfasfhp+S1bORKY5KUiIs07tC+jhxFWtWwdnfFY9o
KWLOAnLxQyPI18/y5gIR3mIUvBwYbTB0cLwR5jmD4bNimaq/jdxjqQZFx2VJ4cX6
550Upm1itmxNzoudgyL6s7kc3Qv+IvEIKdYmHAleuNup+vzo8dzChNmAmHv8NwBi
ufMxYbaXfFkXI8FKKXcYqkwn3THuUe911MpuVqeiI5A+qx1tFjeu1sRWYg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J7r+AkQxX3T4kWSC1Py
5/tzs+0bdESuykQCQ7ae+jEdjHNmcZPkyoTY+FtLv3+LWh/QsrcswMOgJpMAc1TK
bkrvZJtk61kqvMN6FiSJ0OT5+9TTeTpVC6btQVZkdzCO+/5uhrPEV+VGdA5ioOE0
4I9+PMLbxZl5btPkm2OcL1tzH0E6CmuG+YiO3/42vrHl++d4oQcn/3fS/0UA9bbC
b12ceKZoF8XRmi1zqhzuRjrT8GjlJYfHPJPHkkk+UijcM291leTXbiOc/6eS4UOR
s9gYvAa9LKPakrK+XuC9YP8SQ6DKzPWhCDrz1VqdIkPagr0Cn3dKf2l3ac2S/wW/
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158265984664923479146170839118409805101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 12:59:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-16 12:59:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gatineau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shared Services Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cfc-swc.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28355747549820142965447514837824383127517769760754519221604050627414732914232937541324633830759403112529962231641812643185051762186020151168789653335613892788167607666117507813059880229974724487360270311410524812082067375644625187687964524034075825824462622306768750786261820919389864366852186321594171600580690582904791567636781987767854238301770026675099119446660565011106268557124249700458090676412600329755705795306466257916003697146297245716345036116455826656902267634727076531375783736721727176166793441238891547566721871040386070594456710288220087341396015866324256854289583783680920487563709208303769697501097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db6dcc1b2f4ce8b1bda4e7a8df92bd3016ebb183
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc-swc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfc-swc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6dec.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dec6.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endviolence.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fegc-wage.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femmes-egalite-genres.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femmes-women.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femmes.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finilaviolence.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jif.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhf.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swc-cfc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wage-fegc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whm.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women-femmes.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women-gender-equality.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.6dec.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dec6.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.endviolence.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fegc-wage.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.femmes-egalite-genres.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finilaviolence.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jif.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhf.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swc-cfc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wage-fegc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.women-gender-equality.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.women.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.femmes-women.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.femmes.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whm.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.women-femmes.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d69e6c74d0000040300473045022100cc1bc1cb4b8daebcc251adf8504a77cf75c20b413856e7198803c0ec235aa94a02204cbf6f01eef0d59be2345de42a184b9896de12ae708a43f705878e81ee3442e6007700a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018d69e6c7780000040300483046022100ff29dc606fc614c50b010d01351ff9bbc20d7db518f64318a879a33ba5b84bfa022100e2271e412ac8b59571c8fdbe900d35a27a2b65ae220e5777d78054783ed868ba0077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d69e6c7a700000403004830460221009a8b1a62adcdb7eaf190f2ac1dd408a483673c7f0d42a96402e71b69bfebee7c022100e94dc9279958a322034f9b5f5dae3ac63212c7701dd43ebfe326b1134a26f7a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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