science-libraries.canada.ca

- National Research Council Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number d0:1e:43:c1:03:74:e0:f7:00:00:00:00:50:fb:b5:45 was issued on by Entrust, Inc..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Research Council Canada

Organization: National Research Council Canada
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d0:1e:43:c1:03:74:e0:f7:00:00:00:00:50:fb:b5:45
Serial Number (int): 276636566242567109098760624646592902469
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 11:e8:e8:9f:22:b9:4c:00:c0:7c:9c:d5:35:c5:54:ae:dd:26:6d:02
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): bc:3b:c5:05:bf:ef:bc:c9:9f:ba:d5:09:8b:c2:fb:aa:5f:98:fc:45
Fingerprint (sha256): 09:16:68:68:42:74:94:62:a7:5c:45:46:51:ac:89:09:79:24:80:7f:f5:40:a3:01:0b:d1:d5:da:59:70:4f:5d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate science-libraries.canada.ca

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for science-libraries.canada.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

science-libraries.canada.ca
bibliotheques-scientifiques.canada.ca
fsl-bsf.scitech.gc.ca
bsf-fsl.scitech.gc.ca
scitech.gc.ca
fsl-bsf.nrc-cnrc.gc.ca
bsf-fsl.cnrc-nrc.gc.ca
nsl-bsn.nrc-cnrc.gc.ca
bsn-nsl.cnrc-nrc.gc.ca
nrc-publications.canada.ca
publications-cnrc.canada.ca
nparc.nrc-cnrc.gc.ca
nparc.cnrc-nrc.gc.ca
nrc-digital-repository.canada.ca
depot-numerique-cnrc.canada.ca
dr-dn.nrc-cnrc.gc.ca
dn-dr.cnrc-nrc.gc.ca
oai-pmh.nrc-cnrc.gc.ca
oai-pmh.cnrc-nrc.gc.ca
login-connexion.nrc-cnrc.gc.ca
connexion-login.cnrc-nrc.gc.ca
wae.nrc-cnrc.gc.ca
wae.cnrc-nrc.gc.ca

Other certificates including the domain name canada.ca

(limited to 100 certificates)
*.dev.tc.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
greenbuildingsfunding-financementbatimentsverts.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
administration-83-03.canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca
pop.ctst.email-courriel.canada.ca

Certificate

The complete raw certificate details for science-libraries.canada.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthFbsaJLNtO0cckBGzZc
xZTz7EFJkpVvR06aiwlTUsh/RxGQiVNkf8O1jLFJ6B5iLQek+Li/Mcx7xeRggt5+
qtfHJa8yFUnqpZ2fQpr7mFhSWUdDDSpAWJASNdb8N9EADTKqGlK8iyFgzhYH04/F
SMecl01zuuxG02oXVcOhxEzTdf3EG+c5rfJVlnMNtz7Qto2e+xENfXZvKVsYYMTN
dKOtGOLW45r+lr9Xtgy1n6tOG5eYyLOnWZyojkpwt244q+g/gAr6so8wV0qcSYaG
gZAKcZ/X84j+xU1v9GRZmUEbwxspw6TTL/ib5o69taWU3ZumWac54qAGKLWTJcsK
3popFOZagT+8EdZ8CfmVVCtjbgsIHkaFnE8cViM5877o+gUcp+Nv7WaAGAz48SnW
iVZU558ZXTyYuLii+GtV7O7f/UlYVoOilARQlVx3RxlVz2qdWwsBfOTCtsTZXhb4
lPo9J+5zV1IQ6tbFfbhWV6Cn+mbQPzBuM5pvA2EM9zMQsW8bra0ofIuh9j4U11Kj
MNBLlM3kcRO4G+PIYhAcsB0h4XE04FRW1EGQovBa6damk+GnyVN5VLhuNXWWfOuR
bMxvmK3TLhUYmgbHNVCaDSyWpAhRJYXGX+gQK4YKqwoHVHWJOw/DEImwYzSf+M/6
ekfU3OLDiI6C+u5/NFcXhmsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276636566242567109098760624646592902469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 12:05:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-11 12:35:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Research Council Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'science-libraries.canada.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742771842227021489119662060031284998478825273158478139406049904533514203430501049289977747792106381602666499499962633782485691725352217672954371564147516256449783145444992326339785598747391121264047394863580814885878545692124681665626694503417886664306955625835874482129887498181498557952249334282424501913889120855471134080415269186502146652111602562879196616760118351453921151837176822854831479159513265109200001329558267064214731581527405578066542891354093259904021427328341899814825201117813863960523835890400881277355613976223452119758622317886132912593074194356169651491419729182373901312695078746543044731299647859890692494913053689910491765416968877676792858811905207893686000053771861409274584286165610165710236398369455992999044261299017349393695319275562241069662804401480675583458716506856389615721780600868628561321937654188595143290602974809775716667764275118335330158781840794919349764800814875944271776506877756349137160537131793836052064156125473287678073340621022339413383276133728189203227351559426679244032208171653424936545987852496597177902457545897369680006370573759126388344564181087162490329844889813889945866242432776166492337072036742539282967527859622639850455689024723081468977303292547061319049558853227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science-libraries.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotheques-scientifiques.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsl-bsf.scitech.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsf-fsl.scitech.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scitech.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsl-bsf.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsf-fsl.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsl-bsn.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsn-nsl.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrc-publications.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications-cnrc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nparc.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nparc.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrc-digital-repository.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depot-numerique-cnrc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-dn.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dn-dr.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oai-pmh.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oai-pmh.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-connexion.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexion-login.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wae.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wae.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11e8e89f22b94c00c07c9cd535c554aedd266d02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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