api.explorer-marche-travail.service.canada.ca
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 0f:3a:3b:5a:a5:24:1d:6a:17:8f:7c:9a:0c:e6:ff:ca was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.explorer-marche-travail.service.canada.ca
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:3a:3b:5a:a5:24:1d:6a:17:8f:7c:9a:0c:e6:ff:caSerial Number (int): 20240776998378686684065921606508543946
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6e:8f:e0:0a:cb:51:4e:bb:fd:12:30:ea:57:cc:78:ad:c2:c5:7f:6f
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): cf:82:4a:69:d7:cc:e3:b6:6a:74:46:88:06:6e:bb:4f:59:c0:14:d9
Fingerprint (sha256): 0a:67:e6:6a:45:8d:a1:69:4b:17:76:77:8c:7d:5c:d7:82:53:b7:b8:ae:58:1d:1f:92:ae:2d:1e:89:82:c9:e6
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate api.explorer-marche-travail.service.canada.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.explorer-marche-travail.service.canada.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.explorer-marche-travail.service.canada.ca
Other certificates including the domain name canada.ca
(limited to 100 certificates)
*.dev.tc.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca
pop.ctst.email-courriel.canada.ca
api.explorer-marche-travail.service.canada.ca
rp2-oidc.id.alpha.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca
pop.ctst.email-courriel.canada.ca
api.explorer-marche-travail.service.canada.ca
rp2-oidc.id.alpha.canada.ca
Certificate
The complete raw certificate details for api.explorer-marche-travail.service.canada.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHxDCCBaygAwIBAgIQDzo7WqUkHWoXj3yaDOb/yjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMwODA4MDAwMDAwWhcNMjQwMjA4MjM1OTU5WjA4MTYwNAYDVQQDEy1hcGkuZXhw bG9yZXItbWFyY2hlLXRyYXZhaWwuc2VydmljZS5jYW5hZGEuY2EwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtT/fRs+sQdL//FPS8PRK90v3IvBIz86t S57pDj1qOHe5RVzQe4Szn5HqmdNZV+WPXEsJuGUsZJgqPrLWn02SKuYf24Ak+jCt gY3w8e7pB8/g8xtr3mz2WNRbIKt0SZays6O0l1sDCEkE6dSa99XzaLNocfF0Ct0h ZNp88SJF4z/K7fg6sY3A4LWSnC6x1AiTY5QBG4ffOMbf8wSClUe/dm+VMtPH6IU3 gADR5RTXzQlp3U1uoCwN7jE0U7WarO14kckFQAQUrnumDX8z8UkEF+9hIyS8oKZo O9iVSve65lTCFDJzbXPSxUFbK06VLMt3DwXwmawkqpOWtC11zjtpAgMBAAGjggOk MIIDoDAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQLASogBLhmIzAdBgNVHQ4EFgQU bo/gCstRTrv9EjDqV8x4rcLFf28wOAYDVR0RBDEwL4ItYXBpLmV4cGxvcmVyLW1h cmNoZS10cmF2YWlsLnNlcnZpY2UuY2FuYWRhLmNhMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEag RIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNB NDA5NlNIQTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2Vy dC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmww PgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5k aWdpY2VydC5jb20vQ1BTMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0 dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2Vy dHMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw MjJDQTEuY3J0MAkGA1UdEwQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1 AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABidT5G4cAAAQDAEYw RAIgW3PvsgGK6x5zrpUtdkYkoqEGDLTKdGr/XMpXV+wRPUUCIAJgK/oOC9JK5l7J 5dEnsta17jy+gYZV6C97Eu6XEHK2AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB 2bu/qznYhHMAAAGJ1PkbywAABAMARzBFAiEA/6HzTulv3GsPhuPFwbefiSzxR577 pXCHL0DWgQ16F2wCIHGk1e6WsA6WsS2Gt81sb/YFaeTazPMVSHkOnK9VQ0kLAHUA 2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJ1PkbcgAABAMARjBE AiA/23AFoB5Kyu8MZ+tfCPnXYRemTJpgKVFrJh5oYu0OKQIgCkkaXahobDYS0BYL Crafc0XKFb6z3YaZfdDocCElKi4wDQYJKoZIhvcNAQELBQADggIBAKUoVsgJsC17 w3ApYgI8epN71l5OdiDIgr1UHx4+KzjmRm402hXRgG29Ke7w+HGuVkqxJjzTsIJu J2j+gknbIdiMQlhrP62P4GM54z6+XBw5c+Ean3pL0c0vgTqg7/oRCVt6W6Johgdf t6mhqyzZTRDY81TCXjEl/XYLPkut8g1sG8GbtzueoDYhbhAQtBaZieKwib1sQFUu T+CUV5FEuGpdH96QM2L1L3qz1mA3tWe3wd8/cxMxfqi6W9DfW82WUrljPOGuA1AG LSrruk9upr4/jdzxlShQTm7Y5bdAFwIzATB/TuMXfbNb45CSOJHtnYBpz1uPRdCy UhTRR2hWNctKVhjPXIkHm7aSEA2kYHiq2brSGHdPSL98zqhCpPzZ6NGv3fozD4jv E5pGZ+4KB3KFCX4K4kK1ugvojtWyWYbaWPnqoPMEUIJnH36OZVJsdZDqq+j3m31z O0iKolna1s/s+LD28Nzsd7+g0FJndu82Aaz2SYtb1wbZuK4jGqhUGiRkTa5iGNH0 ufHmSAKBjb5XwFhxqBUj9Fhx8439kXsRE20W6TFAa59RLEEZPp4shAEfuUCF9dEi z3XTSg5czhxOvm+LV08uZSrQI24FxSXZVW4JhMogHkN5oTQbu6iLRFx4tRpnVX2q l2veepJqJHtBKoWYHDs8ka0f1s5/ssSD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbU/30bPrEHS//xT0vD0 SvdL9yLwSM/OrUue6Q49ajh3uUVc0HuEs5+R6pnTWVflj1xLCbhlLGSYKj6y1p9N kirmH9uAJPowrYGN8PHu6QfP4PMba95s9ljUWyCrdEmWsrOjtJdbAwhJBOnUmvfV 82izaHHxdArdIWTafPEiReM/yu34OrGNwOC1kpwusdQIk2OUARuH3zjG3/MEgpVH v3ZvlTLTx+iFN4AA0eUU180Jad1NbqAsDe4xNFO1mqzteJHJBUAEFK57pg1/M/FJ BBfvYSMkvKCmaDvYlUr3uuZUwhQyc21z0sVBWytOlSzLdw8F8JmsJKqTlrQtdc47 aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20240776998378686684065921606508543946 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.explorer-marche-travail.service.canada.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433557438921549249952956323867229359638999924109145224290924623100513056510281996925006304861568465036649190582851072710784318308084082979662480062555575517315355407237926802890386705636662662869731257678676376676128067046995864458292381905449587752181377808336765289030140067300692297076923363491313042067179424806489759122223767641435070001241824537561367677576113189466855138826107622451716746408749619284593367297289006753359985874622408915367099937471944725724456646093279259345282092185785229250112526289620915608000990795174449913442265028572040437651363824228480072678243390299954142711090998537611029396329 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e8fe00acb514ebbfd1230ea57cc78adc2c57f6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.explorer-marche-travail.service.canada.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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