The Canada Life Assurance Company

- The Canada Life Assurance Company -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 10:3e:72:e8:ad:d8:d0:be:3e:55:3e:1e:c3:1f:0b:45 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

The Canada Life Assurance Company

Company registration number: 2020-01-03
Organization: The Canada Life Assurance Company
Address: 190 Simcoe St
State / Province: Ontario
Locality: Toronto
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 10:3e:72:e8:ad:d8:d0:be:3e:55:3e:1e:c3:1f:0b:45
Serial Number (int): 21591900967219353316915287613098625861
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b0:06:a8:63:44:74:38:41:14:3c:b9:94:db:b4:e2:d2:69:30:95:a4
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 07:6e:ca:89:66:26:56:91:5f:fb:b1:f4:5d:bc:d6:66:e6:52:bd:76
Fingerprint (sha256): 0f:f1:a6:91:db:d3:22:f9:58:70:8a:17:d8:6b:22:61:8b:45:d1:dd:e5:80:fa:75:98:06:9f:c9:8a:6a:b0:6c

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate The Canada Life Assurance Company

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for The Canada Life Assurance Company

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canadalife.com

Certificate

The complete raw certificate details for The Canada Life Assurance Company in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINHzCCCwegAwIBAgIQED5y6K3Y0L4+VT4ewx8LRTANBgkqhkiG9w0BAQ0FADBP
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf
RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yNDA1MTYxOTMwMzBa
Fw0yNTA2MTIxOTMwMjlaMIIBdzELMAkGA1UEBhMCQ0ExEDAOBgNVBAgTB09udGFy
aW8xEDAOBgNVBAcTB1Rvcm9udG8xFjAUBgNVBAkTDTE5MCBTaW1jb2UgU3QxEzAR
BgsrBgEEAYI3PAIBAxMCQ0ExKjAoBgNVBAoTIVRoZSBDYW5hZGEgTGlmZSBBc3N1
cmFuY2UgQ29tcGFueTEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xEzAR
BgNVBAUTCjIwMjAtMDEtMDMxHzAdBgorBgEEAYOeXwENEw9SZWdpc3RlcmVkIE1h
cmsxGTAXBgorBgEEAYOeXwEEEwkwMTgxMzA4OTcxEjAQBgorBgEEAYOeXwEDEwJF
TTE7MDkGCisGAQQBg55fAQITK0V1cm9wZWFuIFVuaW9uIEludGVsbGVjdHVhbCBQ
cm9wZXJ0eSBPZmZpY2UxKjAoBgNVBAMTIVRoZSBDYW5hZGEgTGlmZSBBc3N1cmFu
Y2UgQ29tcGFueTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALz3opyE
pbbZpYL7OZuJCfbfhvMdNBbitfggTmvs9HbdG/S/SuzxWvRzd6YcbjizrZdhPjRh
iSLIZPuYKCLkHwFpQ2YA32AmZ9VzspMi0rBK8sFAdbzso21KqxUlUIqp2Rho6qUT
1W69Yn8+FHaZYRaMGj21WVtw2oM9bmtnC2KWjUF2feTQXBD/e6NwwA730eLMowe5
fOYhzJNwjrZ4cdQac8lX34IcPI5Nn8Hik2qNRY/gDDMoCcCIknvlHICSaQsfdSzn
vx6MvnBZUvdeKo4wV42L1VEApC+rp3dOCW++jgYXLmXT1lvzTnzGqjRZDWwz/2qZ
tU+FFH1YJPGJhKcCAwEAAaOCB8swggfHMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FLAGqGNEdDhBFDy5lNu04tJpMJWkMB8GA1UdIwQYMBaAFO+8PLSvOtBFXnZU38dk
eOktHXQ/MGYGCCsGAQUFBwEBBFowWDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Au
ZW50cnVzdC5uZXQwMQYIKwYBBQUHMAKGJWh0dHA6Ly9haWEuZW50cnVzdC5uZXQv
dm1jMi1jaGFpbi5jZXIwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL2NybC5lbnRy
dXN0Lm5ldC92bWMyLmNybDCCBbwGCCsGAQUFBwEMBIIFrjCCBaqiggWmoIIFojCC
BZ4wggWaMIIFlhYNaW1hZ2Uvc3ZnK3htbDAzMDEwDQYJYIZIAWUDBAIBBQAEIAyw
8hkZgBYKIRjYcwhnX4XEWL5JT3sP82XqS/BSfLtvMIIFThaCBUpkYXRhOmltYWdl
L3N2Zyt4bWw7YmFzZTY0LEg0c0lBQUFBQUFBQS8zVlYyMm9qUnhSOEQrUWZPcE9u
UUhlcnIzTXhsaGRiWkplRkZTd2s3THQyTkpZRTJwR1FScGI5OTZrNk0vSW1EekZJ
cDlXWHFuT3E2N1R2UDd6KzJLdVg3blRlSGZwNTRhMHJWTmUzaC9XdTM4eUx5L0Jz
NnVMRHc2Ky8zUDltalByVTlkMXBOUnhPZCtweGZmamVxYy83L2VVOHlKUUsyUVli
dGZycjJ5ZjE1K3Z4Y0JyVTEvMWxZejczeXNya3Q1SGtUcFhXT2ZWMDJlM1h5djJo
bERIRVA3OXMvcDFHS05UMzFibjdlam84Ny9iZHZCaDIvWnM1bmd1RmRQdnp2TmdP
dy9GdU5ydGVyL1lhN2VHMG1RWG4zQXdvaFhyWmRkZW53K3U4Y01vcDd6TS9CVGlV
dWg5Mnc3NTcrSHZicWNXcVg2MVg2c3Z1dVZPUDUvUGx0T3BiekI1K0hGZjkyLzFz
M0lpOFRsMDdLR0FaYjNPaDNqQUl0aTRVc3RyUGk5K2ZIdDBpZkN6VWRiY2V0c2c3
UUw1dHQ5dHNoK25IN0Q4WVljTHdnUVgrRDRadmJQTVRwWEcybW1DT3EyRjdPL1JS
L2dxMW5oZkxKdG1nYzIxOWE2TDFPdGpHVkxiUnBmRkpseTFJSysxTXNwVnh0alla
TWJTbFRTZ29hbytxTU9YSEFZaGJCNHphRUNQYjBwVDRJQ3JWOGlCZ3ZNT3BoRmta
ZU44NjdiaEFDSnNsaGhaRUFYdGxnYVRhTWJPSUh4bTREcWRyR3lsb1cySGNqUFNB
SklXTUF0YkF5Vnk4OFpLRFJ3WE0zak1UUWpYNHJtd3cwTExXQVVtUHRKNVRRTXhT
b2NRV0F5NGtsaVh5WkIwNWlYeDVKYUlMSTVCR1ZrM09DdXZRanBWQ0ZpeExaampO
clZHT05lVE13dWtFZWxRMWtqT0NzeElKR3hhVmlGUEtpRmZpTllzTGdza2kwVHln
cm1RRUVhVHV4UDNSaE5BeXpaclFreERWS0VRQ3RLT1d1dVN5czBsRHc3SVY1Wmtw
eUxBa21Xc3NCekpETE9Ua2tXUUREU3M5TW84cEFTVmlhK0xGU1JWeHBOVk1qTjVx
OER1SkhFbHpaeUFCS0FLTUZxbm5tQWxJR2pGV2JwMVEwWlZ5RnpvTFpRUmxFSTVT
a2sxeXFtcW5IMEZ1ckJJNUF6WHpnb05VTmFlSmtCbmJSSE5oRkEzRmtnT29WWXhE
dTdNUllQZFJmTjR0TTNOU0lhU2lmVFNSUzJDUWlOK292UFZTR1hlTlduakgwTEs4
UmxURlZESjUwVlNBeXhTeGtkSXFLblJyUnJXTXRZNDRSMHVKb0Y0a3poSnhwNXIz
SDBaUEJOd2liSUlDRnBHdmFHTFh4RkxPNnh2T3NxU1hPR3lscVNiQVdxSzNEWW1R
S0EwQ2trQUxTVjgyTml4SzdrbHNrREpOSVBvZFRpMHpHbDNYanQ2aForQzMwZTJB
Z2tENFprdDRpb3ZVNmN4bTc2UURzb2hhVFZkYzAvRVNzYk5lbExnYWVpT3p4WW11
MzNuVXN1SVJTTWJiU3RJNjhtaU5VVENkbHFkTEdvdCtocG4wMktZTkRGQWI3a2JS
aXhHcHhwN2JLT2gzZE5UR1JrOTRjZWtoZGozZkJiNktVODlYUDUrQ1NscFplc1JX
WnlsMlpHWUVVNmFlaVFKbWRrV0t0T0lOZm5xbCtUL280UjlONm1JZ1Z3Y0FBQT09
MBkGA1UdEQQSMBCCDmNhbmFkYWxpZmUuY29tMA4GA1UdDwEB/wQEAwIHgDATBgNV
HSUEDDAKBggrBgEFBQcDHzBQBgNVHSAESTBHMDcGCmCGSAGG+mwKAQswKTAnBggr
BgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAwGCisGAQQBg55f
AQEwgYoGCisGAQQB1nkCBAIEfAR6AHgAdgBVWVOuMJYAgGzS61IIpsmekxgorBBW
tEIcVTYVTF91rAAAAY+C4nd/AAAEAwBHMEUCIQC0W/B3asEcC0SpNbQXGQ1CZR6I
vR0Y8jH+0Nqe4YblrgIgdQO2RzZoUjSI2BLEwcDCGa/f2EBn7h6AAkjimCChEZgw
DQYJKoZIhvcNAQENBQADggIBANvNhyqkyOQaRBuBB3jEvSPxJ29KsUHkijC3Xj0U
0HF8wYi5hKD/TTYwDfaCIEJkpF/35pSiKOXhcXSvLPYjrRCmeBAK2Sm89+1Yz8PM
BMK4CoDpCi1RMG3To4qfCYuNwynJ/yoFfIkSKJEBsq7IjEt8rTC/VNCI5lEOFQW6
h3c7gV5t2UqoNbCYXdhOE979DJ+vBjKtG8NcISb4WpldnWBAJjY5aSMNb2UdRIR/
Fh2CtdYITTLm7f9fk70EJZtTvKYsyqTocknA/Uy9nm9XtU93aVgX0lDzGgD32PbY
8YeBYE0JzSwv9ll5TFdhdGr6ZmY/EsDNlULLofNFMeQWe5pmSR/PLWgNRCP8ZovX
pyl377dsledTeMI7przgu5IPtcwLkx6QaBs2esgSvDxu6P6PRAVGz8b/e3cSuq+f
sx06Tejbsjn+TcULN5ocMLXiairR0N61XirwabezePoTuGdIsa0a0WImw8fZMGfM
2BR9rV9N6BmSGGYyUwXuSYFTfKDv8AOlTkgIrKBPGSJlCYWlc0hlC2YAlfz55Kbm
rIsAIuXWrHIL/1mmnmQDzqC5QryVxOMWiK/xEcOH12CEG085TLKdVmFgYLbq85Wo
HsoE4r7K5pjLVPDkXsmhPVQYs5SszKVdGiPNz1N22g4UIqNPOpZZHq5DZmQqt5wG
uVFO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPeinISlttmlgvs5m4kJ
9t+G8x00FuK1+CBOa+z0dt0b9L9K7PFa9HN3phxuOLOtl2E+NGGJIshk+5goIuQf
AWlDZgDfYCZn1XOykyLSsErywUB1vOyjbUqrFSVQiqnZGGjqpRPVbr1ifz4Udplh
FowaPbVZW3Dagz1ua2cLYpaNQXZ95NBcEP97o3DADvfR4syjB7l85iHMk3COtnhx
1BpzyVffghw8jk2fweKTao1Fj+AMMygJwIiSe+UcgJJpCx91LOe/Hoy+cFlS914q
jjBXjYvVUQCkL6und04Jb76OBhcuZdPWW/NOfMaqNFkNbDP/apm1T4UUfVgk8YmE
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21591900967219353316915287613098625861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 19:30:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-12 19:30:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '190 Simcoe St'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Canada Life Assurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2020-01-03'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '018130897'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'European Union Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Canada Life Assurance Company'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23854914802353708358975015336987177680604044254550457342164669299786493635298600683444253428548567796974875259861499906540856682328081917224670175912419916752044793459844483047318438827324984345288236070482692449543989565465091027505928283558504095178357340226763783129126757877408581822395985720786354616031513144976574832366140246648773922987229363440770258692195387702897821814806989825326935953136701849274919351101854810763235313722256165035700206364682111041643275206800740066305336812329185606490147841252528193265088356242859375080719130002125662680018965128732829459743814197671672423458210473144246971499687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b006a86344743841143cb994dbb4e2d2693095a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1454 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															0cb0f2191980160a2118d87308675f85c458be494f7b0ff365ea4bf0527cbb6f
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadalife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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