science-libraries.canada.ca
- National Research Council Canada -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number d0:1e:43:c1:03:74:e0:f7:00:00:00:00:50:fb:b5:45 was issued on by Entrust, Inc..
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
National Research Council Canada
Organization:
National Research Council Canada
State / Province:
Ontario
Locality: Ottawa
Country: CA
Locality: Ottawa
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): d0:1e:43:c1:03:74:e0:f7:00:00:00:00:50:fb:b5:45Serial Number (int): 276636566242567109098760624646592902469
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 11:e8:e8:9f:22:b9:4c:00:c0:7c:9c:d5:35:c5:54:ae:dd:26:6d:02
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): bc:3b:c5:05:bf:ef:bc:c9:9f:ba:d5:09:8b:c2:fb:aa:5f:98:fc:45
Fingerprint (sha256): 09:16:68:68:42:74:94:62:a7:5c:45:46:51:ac:89:09:79:24:80:7f:f5:40:a3:01:0b:d1:d5:da:59:70:4f:5d
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate science-libraries.canada.ca
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for science-libraries.canada.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
science-libraries.canada.ca
bibliotheques-scientifiques.canada.ca
fsl-bsf.scitech.gc.ca
bsf-fsl.scitech.gc.ca
scitech.gc.ca
fsl-bsf.nrc-cnrc.gc.ca
bsf-fsl.cnrc-nrc.gc.ca
nsl-bsn.nrc-cnrc.gc.ca
bsn-nsl.cnrc-nrc.gc.ca
nrc-publications.canada.ca
publications-cnrc.canada.ca
nparc.nrc-cnrc.gc.ca
nparc.cnrc-nrc.gc.ca
nrc-digital-repository.canada.ca
depot-numerique-cnrc.canada.ca
dr-dn.nrc-cnrc.gc.ca
dn-dr.cnrc-nrc.gc.ca
oai-pmh.nrc-cnrc.gc.ca
oai-pmh.cnrc-nrc.gc.ca
login-connexion.nrc-cnrc.gc.ca
connexion-login.cnrc-nrc.gc.ca
wae.nrc-cnrc.gc.ca
wae.cnrc-nrc.gc.ca
bibliotheques-scientifiques.canada.ca
fsl-bsf.scitech.gc.ca
bsf-fsl.scitech.gc.ca
scitech.gc.ca
fsl-bsf.nrc-cnrc.gc.ca
bsf-fsl.cnrc-nrc.gc.ca
nsl-bsn.nrc-cnrc.gc.ca
bsn-nsl.cnrc-nrc.gc.ca
nrc-publications.canada.ca
publications-cnrc.canada.ca
nparc.nrc-cnrc.gc.ca
nparc.cnrc-nrc.gc.ca
nrc-digital-repository.canada.ca
depot-numerique-cnrc.canada.ca
dr-dn.nrc-cnrc.gc.ca
dn-dr.cnrc-nrc.gc.ca
oai-pmh.nrc-cnrc.gc.ca
oai-pmh.cnrc-nrc.gc.ca
login-connexion.nrc-cnrc.gc.ca
connexion-login.cnrc-nrc.gc.ca
wae.nrc-cnrc.gc.ca
wae.cnrc-nrc.gc.ca
Other certificates including the domain name canada.ca
(limited to 100 certificates)
*.dev.tc.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
greenbuildingsfunding-financementbatimentsverts.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
administration-83-03.canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca
pop.ctst.email-courriel.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
greenbuildingsfunding-financementbatimentsverts.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
administration-83-03.canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca
pop.ctst.email-courriel.canada.ca
Certificate
The complete raw certificate details for science-libraries.canada.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKjDCCCXSgAwIBAgIRANAeQ8EDdOD3AAAAAFD7tUUwDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTkxMjEyMTIwNTI1WhcNMjIwMzExMTIzNTI0WjCBgTELMAkGA1UEBhMCQ0ExEDAO BgNVBAgTB09udGFyaW8xDzANBgNVBAcTBk90dGF3YTEpMCcGA1UEChMgTmF0aW9u YWwgUmVzZWFyY2ggQ291bmNpbCBDYW5hZGExJDAiBgNVBAMTG3NjaWVuY2UtbGli cmFyaWVzLmNhbmFkYS5jYTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ALYRW7GiSzbTtHHJARs2XMWU8+xBSZKVb0dOmosJU1LIf0cRkIlTZH/DtYyxSege Yi0HpPi4vzHMe8XkYILefqrXxyWvMhVJ6qWdn0Ka+5hYUllHQw0qQFiQEjXW/DfR AA0yqhpSvIshYM4WB9OPxUjHnJdNc7rsRtNqF1XDocRM03X9xBvnOa3yVZZzDbc+ 0LaNnvsRDX12bylbGGDEzXSjrRji1uOa/pa/V7YMtZ+rThuXmMizp1mcqI5KcLdu OKvoP4AK+rKPMFdKnEmGhoGQCnGf1/OI/sVNb/RkWZlBG8MbKcOk0y/4m+aOvbWl lN2bplmnOeKgBii1kyXLCt6aKRTmWoE/vBHWfAn5lVQrY24LCB5GhZxPHFYjOfO+ 6PoFHKfjb+1mgBgM+PEp1olWVOefGV08mLi4ovhrVezu3/1JWFaDopQEUJVcd0cZ Vc9qnVsLAXzkwrbE2V4W+JT6PSfuc1dSEOrWxX24Vlegp/pm0D8wbjOabwNhDPcz ELFvG62tKHyLofY+FNdSozDQS5TN5HETuBvjyGIQHLAdIeFxNOBUVtRBkKLwWunW ppPhp8lTeVS4bjV1lnzrkWzMb5it0y4VGJoGxzVQmg0slqQIUSWFxl/oECuGCqsK B1R1iTsPwxCJsGM0n/jP+npH1Nziw4iOgvrufzRXF4ZrAgMBAAGjggXCMIIFvjCC AlkGA1UdEQSCAlAwggJMghtzY2llbmNlLWxpYnJhcmllcy5jYW5hZGEuY2GCJWJp Ymxpb3RoZXF1ZXMtc2NpZW50aWZpcXVlcy5jYW5hZGEuY2GCFWZzbC1ic2Yuc2Np dGVjaC5nYy5jYYIVYnNmLWZzbC5zY2l0ZWNoLmdjLmNhgg1zY2l0ZWNoLmdjLmNh ghZmc2wtYnNmLm5yYy1jbnJjLmdjLmNhghZic2YtZnNsLmNucmMtbnJjLmdjLmNh ghZuc2wtYnNuLm5yYy1jbnJjLmdjLmNhghZic24tbnNsLmNucmMtbnJjLmdjLmNh ghpucmMtcHVibGljYXRpb25zLmNhbmFkYS5jYYIbcHVibGljYXRpb25zLWNucmMu Y2FuYWRhLmNhghRucGFyYy5ucmMtY25yYy5nYy5jYYIUbnBhcmMuY25yYy1ucmMu Z2MuY2GCIG5yYy1kaWdpdGFsLXJlcG9zaXRvcnkuY2FuYWRhLmNhgh5kZXBvdC1u dW1lcmlxdWUtY25yYy5jYW5hZGEuY2GCFGRyLWRuLm5yYy1jbnJjLmdjLmNhghRk bi1kci5jbnJjLW5yYy5nYy5jYYIWb2FpLXBtaC5ucmMtY25yYy5nYy5jYYIWb2Fp LXBtaC5jbnJjLW5yYy5nYy5jYYIebG9naW4tY29ubmV4aW9uLm5yYy1jbnJjLmdj LmNhgh5jb25uZXhpb24tbG9naW4uY25yYy1ucmMuZ2MuY2GCEndhZS5ucmMtY25y Yy5nYy5jYYISd2FlLmNucmMtbnJjLmdjLmNhMIIB9wYKKwYBBAHWeQIEAgSCAecE ggHjAeEAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAW76G1qs AAAEAwBIMEYCIQCKY3QNWQuJkb3b2jnDdULgiLzBitNu5006d+EsdFuiFQIhAO1B aAuBgbzszQHa/NjJGp98G865x7DCXHuTi+hHGk/PAHcAVhQGmi/XwuzT9eG9RLI+ x0Z2ubyZEVzA75SYVdaJ0N0AAAFu+htauwAABAMASDBGAiEA/dSlP6sxYY3+PCYy CD1IHNUg9aPVd5vi3B8u+LTxhKgCIQC24C/VrIAu38lh+O5hDQbqUevG1t9Hvt27 ocgVVRzxzwB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbvob WtUAAAQDAEYwRAIgEk/ofI3T+/o4hBvR3O7SIbMl5BIGvUMLPXggm8HNJMcCIA/k /LML9dptEoRC6AijnOXana3GWPCnPcKKyjFHJvxxAHYAu9nfvB+KcbWTlCOXqpJ7 RzhXlQqrUugakJZkNo4e0YUAAAFu+hta3wAABAMARzBFAiEAxg3mGZhz4PS9k+0m zeHiYBuIvMpDWSayyuKOTZf4AQICIEoni8spgqfiae7WStPuU//yblwc9EjNfkYe Tqcs3i0fMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9s ZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcC ARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUF BwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYI KwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNl cjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUEejo nyK5TADAfJzVNcVUrt0mbQIwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA xVYcdARpac4lSDlJNUEKHQ6bcjqoarQozHbFbBJ8hyQdzABLMoRkEaLnXw567LsK QRL+38VRYJSsJz1BP4f1o6rfWMK9wTOYrFIoAr+Z6jmhtbZeVtq66QlIq/yKShnB 8cbMTfyWwITMAP6lUitBPDz3xH3+iTAexTQnKz8YFQGTRsaWnbQY5wsHVXkwDTRx NjTYJbIPb5MdoC4F9HlMHIjvPMrLwV1tsl33+jWGQglZPIY6V7JUEd8YD5ZAswK6 lwuMvOo8jL5Oby6dH5f4QAv9QhRUXDYDVN2P3vm5hD8rgMiVIEshLjGnXseSxpbz +Rqu5HHJR0E7dxh+Banwhg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthFbsaJLNtO0cckBGzZc xZTz7EFJkpVvR06aiwlTUsh/RxGQiVNkf8O1jLFJ6B5iLQek+Li/Mcx7xeRggt5+ qtfHJa8yFUnqpZ2fQpr7mFhSWUdDDSpAWJASNdb8N9EADTKqGlK8iyFgzhYH04/F SMecl01zuuxG02oXVcOhxEzTdf3EG+c5rfJVlnMNtz7Qto2e+xENfXZvKVsYYMTN dKOtGOLW45r+lr9Xtgy1n6tOG5eYyLOnWZyojkpwt244q+g/gAr6so8wV0qcSYaG gZAKcZ/X84j+xU1v9GRZmUEbwxspw6TTL/ib5o69taWU3ZumWac54qAGKLWTJcsK 3popFOZagT+8EdZ8CfmVVCtjbgsIHkaFnE8cViM5877o+gUcp+Nv7WaAGAz48SnW iVZU558ZXTyYuLii+GtV7O7f/UlYVoOilARQlVx3RxlVz2qdWwsBfOTCtsTZXhb4 lPo9J+5zV1IQ6tbFfbhWV6Cn+mbQPzBuM5pvA2EM9zMQsW8bra0ofIuh9j4U11Kj MNBLlM3kcRO4G+PIYhAcsB0h4XE04FRW1EGQovBa6damk+GnyVN5VLhuNXWWfOuR bMxvmK3TLhUYmgbHNVCaDSyWpAhRJYXGX+gQK4YKqwoHVHWJOw/DEImwYzSf+M/6 ekfU3OLDiI6C+u5/NFcXhmsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 276636566242567109098760624646592902469 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 12:05:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-11 12:35:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Research Council Canada' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'science-libraries.canada.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742771842227021489119662060031284998478825273158478139406049904533514203430501049289977747792106381602666499499962633782485691725352217672954371564147516256449783145444992326339785598747391121264047394863580814885878545692124681665626694503417886664306955625835874482129887498181498557952249334282424501913889120855471134080415269186502146652111602562879196616760118351453921151837176822854831479159513265109200001329558267064214731581527405578066542891354093259904021427328341899814825201117813863960523835890400881277355613976223452119758622317886132912593074194356169651491419729182373901312695078746543044731299647859890692494913053689910491765416968877676792858811905207893686000053771861409274584286165610165710236398369455992999044261299017349393695319275562241069662804401480675583458716506856389615721780600868628561321937654188595143290602974809775716667764275118335330158781840794919349764800814875944271776506877756349137160537131793836052064156125473287678073340621022339413383276133728189203227351559426679244032208171653424936545987852496597177902457545897369680006370573759126388344564181087162490329844889813889945866242432776166492337072036742539282967527859622639850455689024723081468977303292547061319049558853227 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (592 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science-libraries.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotheques-scientifiques.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsl-bsf.scitech.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsf-fsl.scitech.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scitech.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsl-bsf.nrc-cnrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsf-fsl.cnrc-nrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsl-bsn.nrc-cnrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsn-nsl.cnrc-nrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrc-publications.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications-cnrc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nparc.nrc-cnrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nparc.cnrc-nrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrc-digital-repository.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depot-numerique-cnrc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-dn.nrc-cnrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dn-dr.cnrc-nrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oai-pmh.nrc-cnrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oai-pmh.cnrc-nrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-connexion.nrc-cnrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexion-login.cnrc-nrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wae.nrc-cnrc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wae.cnrc-nrc.gc.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 11e8e89f22b94c00c07c9cd535c554aedd266d02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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