*.uleth.ca
- University of Lethbridge -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 38:ac:12:32:5a:67:69:fe:c5:a8:41:2c:e7:a3:7a:e7 was issued on by Entrust, Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
University of Lethbridge
Organization:
University of Lethbridge
State / Province:
Alberta
Locality: Lethbridge
Country: CA
Locality: Lethbridge
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 38:ac:12:32:5a:67:69:fe:c5:a8:41:2c:e7:a3:7a:e7Serial Number (int): 75330211896382941469542715979924208359
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 17:e5:f1:0e:d2:a4:d4:fe:23:a3:fb:23:6a:14:1d:68:7e:36:b5:3f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 22:19:88:c1:35:81:f2:7c:b5:3b:e0:90:a0:b5:5d:6a:a2:d0:0d:1f
Fingerprint (sha256): 19:64:50:66:15:5b:37:6d:f8:7f:60:61:cc:b1:9e:67:40:0b:f5:4d:8b:51:ee:8c:22:12:98:61:b5:68:46:ca
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate *.uleth.ca
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.uleth.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.uleth.ca
uleth.ca
www.uleth.ca
uleth.ca
www.uleth.ca
Other certificates including the domain name uleth.ca
(limited to 100 certificates)
login-test.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
oasis.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
libguides.uleth.ca
digitallibrary.uleth.ca
vpn.uleth.ca
*.uleth.ca
vpn2.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
vpn.uleth.ca
campaigns.uleth.ca
*.uleth.ca
uslims.uleth.ca
vpn.uleth.ca
arrti.uleth.ca
webmail.uleth.ca
*.uleth.ca
login.uleth.ca
login-test.uleth.ca
bookstore.uleth.ca
*.uleth.ca
vpn.uleth.ca
*.uleth.ca
oasis.uleth.ca
*.uleth.ca
acs1.net.uleth.ca
webexchange.uleth.ca
ise.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
idp-test.uleth.ca
oasis.uleth.ca
campaigns.uleth.ca
idp.uleth.ca
*.uleth.ca
*.uleth.ca
expenseclaim.uleth.ca
login-test.uleth.ca
*.uleth.ca
*.uleth.ca
svnhost.cs.uleth.ca
batradar.net.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
go.uleth.ca
bookstore.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
campaigns.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
chemtest.uleth.ca
*.uleth.ca
its-isemnt1-p.uleth.ca
*.uleth.ca
*.uleth.ca
batman-ms.net.uleth.ca
*.uleth.ca
learning.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
cwms-admin.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
its-iseadm2-p.uleth.ca
*.uleth.ca
*.uleth.ca
millennium.uleth.ca
arrti.uleth.ca
libguides.uleth.ca
*.uleth.ca
its-iseadm2-p.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
oasis.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
libguides.uleth.ca
digitallibrary.uleth.ca
vpn.uleth.ca
*.uleth.ca
vpn2.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
vpn.uleth.ca
campaigns.uleth.ca
*.uleth.ca
uslims.uleth.ca
vpn.uleth.ca
arrti.uleth.ca
webmail.uleth.ca
*.uleth.ca
login.uleth.ca
login-test.uleth.ca
bookstore.uleth.ca
*.uleth.ca
vpn.uleth.ca
*.uleth.ca
oasis.uleth.ca
*.uleth.ca
acs1.net.uleth.ca
webexchange.uleth.ca
ise.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
idp-test.uleth.ca
oasis.uleth.ca
campaigns.uleth.ca
idp.uleth.ca
*.uleth.ca
*.uleth.ca
expenseclaim.uleth.ca
login-test.uleth.ca
*.uleth.ca
*.uleth.ca
svnhost.cs.uleth.ca
batradar.net.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
go.uleth.ca
bookstore.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
campaigns.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
chemtest.uleth.ca
*.uleth.ca
its-isemnt1-p.uleth.ca
*.uleth.ca
*.uleth.ca
batman-ms.net.uleth.ca
*.uleth.ca
learning.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
cwms-admin.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
its-iseadm2-p.uleth.ca
*.uleth.ca
*.uleth.ca
millennium.uleth.ca
arrti.uleth.ca
libguides.uleth.ca
*.uleth.ca
its-iseadm2-p.uleth.ca
Certificate
The complete raw certificate details for *.uleth.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgIQOKwSMlpnaf7FqEEs56N65zANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDA0MTIxOTQ5MDNaFw0yNTA0MjExOTQ5MDJaMGwxCzAJBgNVBAYTAkNBMRAwDgYD VQQIEwdBbGJlcnRhMRMwEQYDVQQHEwpMZXRoYnJpZGdlMSEwHwYDVQQKExhVbml2 ZXJzaXR5IG9mIExldGhicmlkZ2UxEzARBgNVBAMMCioudWxldGguY2EwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2oUAyySkpFO4dzmFhgsNmcnsxZ7ll mlrcjGHhmzRNyc6gk60nzNcpl8vMH4gak5f3eE4KQCXn5k0sQKu7tCh82tfVDqhL O3wf179itvxVlNrO5z1Gz0Tn40GSfiP3pXOq1PjJxMxDeEX9z7No6qQnjrdoOq5P etgDWdhTy0RqBf4Clj5K5UFN8fanjF5z3Sj+wAhK/6Rut13mO19euKLR5s7oNSSM EgIQjC6ja4ocBhS+U8hSteqy+ZmB5H3MmCWTI/sM+jr3TED3Uhdp1QcbXIQMzMhu 5I/AElBGvduB1twt7f1439HKjpWUOFg4NiTCRJp7EZl9QNsXD/cHApVttosY0lKP 3GfbZ+amkyfq8rNu7vvangdLdDxg0CBdCi1CwGZiRtu/Eds89j+zRYfMUGzDWFy+ Yl5jPUE7gROVpNo8ofWO3doj/g/idKPqNWlCHjSLF30gIjL41dWvYSwow+A2AlPd 0EY6WBvrbHz++hnTwTahnYLiBmYbGNUZ8UvSgGXQ8yv0e24MXiDfiIaS3YmlIKJq kfx4x5YYi29JYykhwSyLZARedXFaineIeAg9+0oTqXyyKzbmEUBxLa91Z67llfTv b23AkysSUNL4FJ1stoo2lGu+Cd3xvlK53tr/ONphzGtl2SFNyBgwK3MFmiE/RUg5 nC7veDPyQ0DMlwIDAQABo4IBeTCCAXUwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU F+XxDtKk1P4jo/sjahQdaH42tT8wHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+n YMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5l bnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9s MWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50 cnVzdC5uZXQvbGV2ZWwxay5jcmwwLQYDVR0RBCYwJIIKKi51bGV0aC5jYYIIdWxl dGguY2GCDHd3dy51bGV0aC5jYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMBMGA1UdIAQMMAowCAYGZ4EMAQICMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdOcN7Ya8oxLGUdYMoyrqU Cad01qw4piKYtQLEEnPwlbiJ3xl5VyTDTNQ5GaGzR8winRLPXh9dew84SdCd1dkE LSnbx/FKVEJYgalI44cFFRK7u6O4WkaUtoD2mOhkZxjrmBZwUfdwytRbCisQyK2t tLgB3dEuCZt6Bl9+aQBTPAeJ13I4nDt3Gfk1c3bD/UL6dtQG3rfNlPjrGTxrVvYG vldBTF7yc7QcSW/O48qsvyT/lkkMAG7UK91vWI5vWgsxT4eGY+3fe8LPR4TSJvUV qz2U5gkPRECpokA7ijmvcdzL4EzdnAWy7Iv+gdKg17qEmd1XNj7dE9VH6Xz+Y+sI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtqFAMskpKRTuHc5hYYLD ZnJ7MWe5ZZpa3Ixh4Zs0TcnOoJOtJ8zXKZfLzB+IGpOX93hOCkAl5+ZNLECru7Qo fNrX1Q6oSzt8H9e/Yrb8VZTazuc9Rs9E5+NBkn4j96VzqtT4ycTMQ3hF/c+zaOqk J463aDquT3rYA1nYU8tEagX+ApY+SuVBTfH2p4xec90o/sAISv+kbrdd5jtfXrii 0ebO6DUkjBICEIwuo2uKHAYUvlPIUrXqsvmZgeR9zJglkyP7DPo690xA91IXadUH G1yEDMzIbuSPwBJQRr3bgdbcLe39eN/Ryo6VlDhYODYkwkSaexGZfUDbFw/3BwKV bbaLGNJSj9xn22fmppMn6vKzbu772p4HS3Q8YNAgXQotQsBmYkbbvxHbPPY/s0WH zFBsw1hcvmJeYz1BO4ETlaTaPKH1jt3aI/4P4nSj6jVpQh40ixd9ICIy+NXVr2Es KMPgNgJT3dBGOlgb62x8/voZ08E2oZ2C4gZmGxjVGfFL0oBl0PMr9HtuDF4g34iG kt2JpSCiapH8eMeWGItvSWMpIcEsi2QEXnVxWop3iHgIPftKE6l8sis25hFAcS2v dWeu5ZX0729twJMrElDS+BSdbLaKNpRrvgnd8b5Sud7a/zjaYcxrZdkhTcgYMCtz BZohP0VIOZwu73gz8kNAzJcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 75330211896382941469542715979924208359 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 19:49:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-21 19:49:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lethbridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Lethbridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uleth.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745064930408589162766687473372498459340648639020748273523548218627799853863275835628042886841744499464189296533396196788980526135624605250907711710117149366622142520786784210174249030001303980876555378276584322344214986389500657681077960662966803459650355397465982654079823785977152106789423820719486362638507421496162651726557931071766068594006771889375052811958607802470004011743706386231133826087733592877024362613742255433197982511732709670471588891606797117480739314583567098216888668534999235942795457392206226329748362012128286645111530528619884955221468119437210271017842580667945207562284028900007365311438493767940727518480158055036789157438460844458972457317783261030029198349727761957147189673134918267320075355275197151635526857921186918512458722378903687133049155905504761516182789634162754124097429449322626279584117473382044082911686354164805668852518171359265260022990022133450465645253201471731577134068395838281453680101831031261059805196383204938862469933391719003899011709758471345121603418018022339531907718037019552082732312975808116024943368233624676565455313592654131999642330159694524529938068648400580737690754632044458530014479762826580182135418450702778956217184443605258418270464438667077367690745138327 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 17e5f10ed2a4d4fe23a3fb236a141d687e36b53f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uleth.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uleth.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uleth.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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