GTMSSACC.ia.ca
- Industrial Alliance Insurance and Financial Services Inc. -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 0e:b4:07:b6:d5:3c:ed:50:84:1e:a6:ea:72:7c:7f:e1 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Industrial Alliance Insurance and Financial Services Inc.
Organization:
Industrial Alliance Insurance and Financial Services Inc.
State / Province:
Quebec
Locality: Quebec
Country: CA
Locality: Quebec
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:b4:07:b6:d5:3c:ed:50:84:1e:a6:ea:72:7c:7f:e1Serial Number (int): 19543961837911857678830771418664042465
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 69:d0:06:14:95:01:67:1a:64:27:0c:0f:ff:96:78:27:b0:f3:fb:2c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 2c:c1:a9:3f:25:06:5b:26:23:c2:3f:30:1a:1a:4b:99:02:88:d5:37
Fingerprint (sha256): 15:9e:72:bb:32:68:08:d9:93:5d:45:11:33:6e:38:aa:d2:63:8b:cf:f9:51:e4:c8:6d:08:72:14:34:cd:51:c1
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate GTMSSACC.ia.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for GTMSSACC.ia.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
GTMSSACC.ia.ca
Other certificates including the domain name ia.ca
(limited to 100 certificates)
partners.ia.ca
sts.accp.ia.ca
auto.ia.ca
trk.mail-corpo.ia.ca
www.security.ia.ca
sva0735.ia.iafg.net
connect.ia.ca
admin.uat-flex.ia.ca
covid-conseiller.ia.ca
test222.ia.ca
content.accp.secureweb.ia.ca
auto.ia.ca
sts.accp.ia.ca
voyagedereve.ia.ca
ia.ca
portail-02.wifi.ia.ca
security.ia.ca
GTMSS.ia.ca
test222.ia.ca
trk.mail-corpo.ia.ca
Collectif-bo-integration-2022-accp.ia.ca
linstantia.ia.ca
extension.apps.astor.ai
admin.devtest-flex.ia.ca
www.regimeiaah.ia.ca
app.lab.secure.ia.ca
www.security.ia.ca
portail-accp-01.wifi.ia.ca
testev.ia.ca
promo.ia.ca
app.flex.ia.ca
signing.ia.ca
security.ia.ca
content.devtest-flex.ia.ca
test222.ia.ca
iacampus.ia.ca
test222.ia.ca
test2222.ia.ca
securite.ia.ca
*.portal.api.ia.ca
auto.ia.ca
Collectif-bo-integration-2022-prod.ia.ca
cee.ia.ca
evolife.accp.apis.ia.ca
authentification.asmb.secureweb.ia.ca
test222.ia.ca
fs52.ia.ca
security.ia.ca
test2222.ia.ca
test2222.ia.ca
elleven.minhacentralonline.com.br
ece.ia.ca
auto.ia.ca
securite.ia.ca
auto.ia.ca
mastrategie.ia.ca
webmail.intg.ia.ca
auto.ia.ca
evo.accp.ia.ca
www.regimeiaah.ia.ca
TestWild.ia.ca
app.devtest.ia.ca
adj.accp.ia.ca
login.accp.privatewealth.ia.ca
test222.ia.ca
dialog.ia.ca
innovation.ia.ca
devjira.ia.ca
*.asmb.secureweb.ia.ca
rri.ia.ca
auto.ia.ca
GTMSSACC.ia.ca
remote01.ia.ca
www.security.ia.ca
accp.api.ia.ca
apis.ia.ca
lean.ia.ca
login.service.partners.ia.ca
login.develop.benefits.ia.ca
covid-advisor.ia.ca
evo.dev.ia.ca
auto.ia.ca
dealers.ia.ca
www.securite.ia.ca
qc-remote.ia.ca
auto.ia.ca
*.ia.ca
rest.devtest-flex.ia.ca
expw-e.uc.iafg.net
test2222.ia.ca
auto.ia.ca
intranet.intg.ia.ca
mulesoft.dev.mtls.genericsalesforce.ia.ca
expw-e.uc.iafg.net
fs52.ia.ca
content.accp.ia.ca
proxy.intg.secureweb.ia.ca
accp.apis.ia.ca
iaconnectlab.ia.ca
content.accp.secureweb.ia.ca
sts.accp.ia.ca
auto.ia.ca
trk.mail-corpo.ia.ca
www.security.ia.ca
sva0735.ia.iafg.net
connect.ia.ca
admin.uat-flex.ia.ca
covid-conseiller.ia.ca
test222.ia.ca
content.accp.secureweb.ia.ca
auto.ia.ca
sts.accp.ia.ca
voyagedereve.ia.ca
ia.ca
portail-02.wifi.ia.ca
security.ia.ca
GTMSS.ia.ca
test222.ia.ca
trk.mail-corpo.ia.ca
Collectif-bo-integration-2022-accp.ia.ca
linstantia.ia.ca
extension.apps.astor.ai
admin.devtest-flex.ia.ca
www.regimeiaah.ia.ca
app.lab.secure.ia.ca
www.security.ia.ca
portail-accp-01.wifi.ia.ca
testev.ia.ca
promo.ia.ca
app.flex.ia.ca
signing.ia.ca
security.ia.ca
content.devtest-flex.ia.ca
test222.ia.ca
iacampus.ia.ca
test222.ia.ca
test2222.ia.ca
securite.ia.ca
*.portal.api.ia.ca
auto.ia.ca
Collectif-bo-integration-2022-prod.ia.ca
cee.ia.ca
evolife.accp.apis.ia.ca
authentification.asmb.secureweb.ia.ca
test222.ia.ca
fs52.ia.ca
security.ia.ca
test2222.ia.ca
test2222.ia.ca
elleven.minhacentralonline.com.br
ece.ia.ca
auto.ia.ca
securite.ia.ca
auto.ia.ca
mastrategie.ia.ca
webmail.intg.ia.ca
auto.ia.ca
evo.accp.ia.ca
www.regimeiaah.ia.ca
TestWild.ia.ca
app.devtest.ia.ca
adj.accp.ia.ca
login.accp.privatewealth.ia.ca
test222.ia.ca
dialog.ia.ca
innovation.ia.ca
devjira.ia.ca
*.asmb.secureweb.ia.ca
rri.ia.ca
auto.ia.ca
GTMSSACC.ia.ca
remote01.ia.ca
www.security.ia.ca
accp.api.ia.ca
apis.ia.ca
lean.ia.ca
login.service.partners.ia.ca
login.develop.benefits.ia.ca
covid-advisor.ia.ca
evo.dev.ia.ca
auto.ia.ca
dealers.ia.ca
www.securite.ia.ca
qc-remote.ia.ca
auto.ia.ca
*.ia.ca
rest.devtest-flex.ia.ca
expw-e.uc.iafg.net
test2222.ia.ca
auto.ia.ca
intranet.intg.ia.ca
mulesoft.dev.mtls.genericsalesforce.ia.ca
expw-e.uc.iafg.net
fs52.ia.ca
content.accp.ia.ca
proxy.intg.secureweb.ia.ca
accp.apis.ia.ca
iaconnectlab.ia.ca
content.accp.secureweb.ia.ca
Certificate
The complete raw certificate details for GTMSSACC.ia.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIQDrQHttU87VCEHqbqcnx/4TANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y MjAxMjExOTA4MTdaFw0yMzAxMjExOTA4MTdaMIGMMQswCQYDVQQGEwJDQTEPMA0G A1UECBMGUXVlYmVjMQ8wDQYDVQQHEwZRdWViZWMxQjBABgNVBAoTOUluZHVzdHJp YWwgQWxsaWFuY2UgSW5zdXJhbmNlIGFuZCBGaW5hbmNpYWwgU2VydmljZXMgSW5j LjEXMBUGA1UEAxMOR1RNU1NBQ0MuaWEuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnAJIE+nXvHKyQ9JrAf2jBsEpO023j61azPAQ3NWa6a6IsjbEH MbZdFEy4UMfrGPPGJk7ZPz29/fCYU5DbGLpQ5bFlaYbFML+RcFBeghduw24ldTZk l3GPIRSMnyPifDgUsK22CsCGhskHm8C8R5VJI9/WgV+Iq0CYQSHnprhFGVKeVyQ+ 30wCTcZpjInNC9OtU83ihHWWSy6FJHj7zL4JHWIsBDGXAUXzrmgosCx1be8vHECh 3CGuUuxbVyaAvppR4VWrImtF6zoPmr1EOZEvbuchqZp7FEKhZanJGCLaLTFIDIiI Uapeex+QtLuUDJ96EjcNtDAruk7adS57Ga7nAgMBAAGjggGeMIIBmjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBRp0AYUlQFnGmQnDA//lngnsPP7LDAfBgNVHSMEGDAW gBSConB03bxTP8971PfNf6dgxgpMvzBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUH MAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8v YWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCag JIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDAZBgNVHREEEjAQ gg5HVE1TU0FDQy5pYS5jYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMEwGA1UdIARFMEMwNwYKYIZIAYb6bAoBBTApMCcGCCsG AQUFBwIBFhtodHRwczovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAj08EnShdGFWR r0p7Jec5Ge65SV25OUUQV6ujGAN1LcWJh3bMoRiRSq5825JQhmA7Ij3tPF4+irrY vE0wv9ParZ5WRSp98yU8zZ5qcfuK1UmoT/cyT/OYTt4rlYn2kj7IdeVfe3i9aOIc sj4AGNqHlkjvE9qgg2KqImxofitHayClqhmvoGQEJW9PjQOJlbUkg4p1+6/NzGHs 3tckgm5bNN7RnAQE4wLMIx+jgmydFqJ0Ad2kGyeVqgUMe1ZfvbCRCu09tDEAC9X3 s2zkkyDelyc5bUFLbdqcyGSTz6nkdQjVqeD4Sqpy2nh2yozcPZ8JepMrWFV8gpaa fhQHNAre -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwCSBPp17xyskPSawH9o wbBKTtNt4+tWszwENzVmumuiLI2xBzG2XRRMuFDH6xjzxiZO2T89vf3wmFOQ2xi6 UOWxZWmGxTC/kXBQXoIXbsNuJXU2ZJdxjyEUjJ8j4nw4FLCttgrAhobJB5vAvEeV SSPf1oFfiKtAmEEh56a4RRlSnlckPt9MAk3GaYyJzQvTrVPN4oR1lksuhSR4+8y+ CR1iLAQxlwFF865oKLAsdW3vLxxAodwhrlLsW1cmgL6aUeFVqyJrRes6D5q9RDmR L27nIamaexRCoWWpyRgi2i0xSAyIiFGqXnsfkLS7lAyfehI3DbQwK7pO2nUuexmu 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19543961837911857678830771418664042465 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-21 19:08:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-21 19:08:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTMSSACC.ia.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21082078198366318391583502532251417429910189173447610755565152593118126120189763630539076477907167012023305007537535612625402918506152482456209508196515412697726299494816443650714709751619214586823192176668892247977615771394951898575387545456248447867338269417566677450015192488403526135698580448461611219287439227814049824116178278545729157446627571714472113447710421292089904989969517260009919153821368532654587759495380717577747946444290757138532940358617965114580860582224830616177028491335488624759428189595640700558091811361011459488048333331943291976481763237952142537683953931963304467924229333748908815920871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 69d006149501671a64270c0fff967827b0f3fb2c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GTMSSACC.ia.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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