expw-e.uc.iafg.net

- Industrial Alliance Insurance and Financial Services -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 77:37:9e:ff:5f:45:91:02:00:00:00:00:50:ea:a4:d8 was issued on by Entrust, Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrial Alliance Insurance and Financial Services

Organization: Industrial Alliance Insurance and Financial Services
State / Province: Quebec
Locality: Quebec
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:37:9e:ff:5f:45:91:02:00:00:00:00:50:ea:a4:d8
Serial Number (int): 158466932679008399091069982680120206552
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 5c:44:b5:c1:37:04:d9:7d:5a:5c:9a:08:1c:b2:75:30:15:1b:73:0c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 30:df:0e:b2:12:ad:a5:39:2f:48:41:4c:81:7d:11:81:cf:b0:2e:26
Fingerprint (sha256): 1a:84:5e:c3:c9:a9:bb:f3:5f:c8:e9:9c:fb:8d:53:e0:6f:37:74:2d:22:61:b5:16:e7:8b:73:02:9b:7a:f6:56

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate expw-e.uc.iafg.net

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expw-e.uc.iafg.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expw-e.uc.iafg.net
sva1425.ia.iafg.net
sva1424.ia.iafg.net
expw-ec.ia.ca
expw-e1.ia.ca
expw-e2.ia.ca
expw-e1.meeting.ia.ca
expw-e2.meeting.ia.ca
ia.ca
meeting.ia.ca

Other certificates including the domain name iafg.net

(limited to 100 certificates)
securefonc.inalco.com
*.iagextp01-cae-ase-prod-01.ase.ia.iafg.net
webmail.inalco.com
sva0735.ia.iafg.net
iagomnip01-cac-aks-cw-01.aks.ia.iafg.net
authentification.intg.secureweb.ia.iafg.net
api.AutoriteCertification.ia.iafg.net
iafg.net
iafg.net
accp.login.service.dealers.ia.iafg.net
iagtelc01-cac-ise01.iafg.net
el-nxportal.accp.part.iafg.net
fs52.ia.ca
iafg.net
*.asmb.secureweb.ia.ca
test.ee-tokenapi.accp.webapp.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
expw-e.uc.iafg.net
MQ-Investments-PTS-BYM-02-PROD.iafg.net
expw-e.uc.iafg.net
fs52.ia.ca
proxy.intg.secureweb.ia.ca
*.intg.secureweb.ia.ca
dev.login.service.dealers.ia.iafg.net
*.prod.ia.iafg.net
el-nxportal-mpls-dr.prod.part.iafg.net
se.webgateway.accp.ia.iafg.net
*.intg.ia.iafg.net
*.intg.sitecore.ia.iafg.net
iafg.net
sva0890.ia.iafg.net
webmail.ia.ca
iaginfrp01.azure.ia.iafg.net
sva0736.ia.iafg.net
sva0767.ia.iafg.net
expw-e.uc.iafg.net
sva0735.ia.iafg.net
iafg.net
authentification.asmb.secureweb.ia.iafg.net
accp.login.service.dealers.ia.iafg.net
api.EntrustAutomation.ia.iafg.net
ref.dev.azure.ia.iafg.net
se.webgateway.ia.iafg.net
*.intg.secureweb.ia.ca
sva0737.ia.iafg.net
iagtelc01-cae-ise01.iafg.net
fs52.ia.ca
iaginfrp01-itsm.azure.ia.iafg.net
sva0736.ia.iafg.net
iagclienta01.azure.ia.iafg.net
hdwqc032.ia.iafg.net
fs52.ia.iafg.net
*.prod.ia.iafg.net
iagomnid01-cac-aks-cw-01.dev.aks.ia.iafg.net
ref.dev.azure.ia.iafg.net
*.dev.sitecore.ia.iafg.net
MQ-Investments-PTS-BYM-02-DEV.iafg.net
webmail.ia.ca
api.EntrustAutomation.ia.iafg.net
sva1391.ia.iafg.net
secureweb.fnct.api.ia.iafg.net
iafg.net
se.webgateway.intg.ia.iafg.net
iafg.net
*.sitecore.ia.iafg.net
ee-tokenapi.intg.webapp.ia.iafg.net
portail-accp-01.wifi.ia.ca
dev.login.service.dealers.ia.iafg.net
secureweb.accp.api.ia.iafg.net
se.webgateway.ia.iafg.net
jira.iaah.iafg.net
*.fnct.sitecore.ia.iafg.net
el-nxpace-mpls-dr.prod.part.iafg.net
iaginfrd01-itsm.azure.ia.iafg.net
sva1389.ia.iafg.net
sva0891.ia.iafg.net
secureweb.intg.api.ia.iafg.net
lidqca8.ia.iafg.net
ref.dev.azure.ia.iafg.net
secureweb.asmb.api.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
se.webgateway.intg.ia.iafg.net
accp.api.ia.iafg.net
*.accp.websct.ia.iafg.net
*.accp.ia.iafg.net
beyondinsight.intg.ia.iafg.net
*.prod.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
*.iagextp01-cac-ase-prod-01.ase.ia.iafg.net
iaginfra01.azure.ia.iafg.net
*.intg.websct.ia.iafg.net
webmail.ia.ca
iaginfrl01.azure.ia.iafg.net
expw-e.uc.iafg.net
iafg.net
*.accp.sitecore.ia.iafg.net
se.webgateway.intg.ia.iafg.net
iagcorpd01.azure.ia.iafg.net
sva1390.ia.iafg.net

Certificate

The complete raw certificate details for expw-e.uc.iafg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgIQdzee/19FkQIAAAAAUOqk2DANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODExMjkxMzI1NDRaFw0xOTExMjkxMzU1NDJaMIGLMQswCQYDVQQGEwJDQTEPMA0G
A1UECBMGUXVlYmVjMQ8wDQYDVQQHEwZRdWViZWMxPTA7BgNVBAoTNEluZHVzdHJp
YWwgQWxsaWFuY2UgSW5zdXJhbmNlIGFuZCBGaW5hbmNpYWwgU2VydmljZXMxGzAZ
BgNVBAMTEmV4cHctZS51Yy5pYWZnLm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBAJS6OPUJpK2Dph6EugRBx1jxCzw42ibJ11ANQkG26HklTrTs9Y3s
qLKItOn/l3V17sQhAJ+wdg0zpUA38I7TVWQgHBARz55+ILcvRdFsbeK4UjZVwmok
hGr8nltSLJIfO/HDo5ozGCoqdw+viwzuW1BsXtx2rZS0RRvZEAHAGzGvGQHY6l9W
VBmx/NkwzK4mI+Wxmd9o9X0jF7i4fvLneMSR0QO2h2wtUnVQpLUwylY/e8QEKtrK
jBTIX7zLovsQdkDk6NmU1O8tEbbUODqwDsefazAsi6p4cj5P7fMNTFdHXDsoxetg
44bDEgx8z/asoAK6MRQQmKQKnxHFpwvlI493wEaW462AtPwC7XxndPubGu7kJQ9y
zh6IXOYms+MxujEZpi6ka1rkYEBc19OgzvyVL3VX2nYmJBOg04MFFJH3nmrOL6Be
PtyaQ1dPtAiD50yfQcHJ5sIpPhtpkAyY53O3kxH0wj1xuobpzCoqcm/41s/OxGhM
G8/LGDbx04+kQ5Q3EM3C8WuNAdKe+0dAetITh5xXB3LJoUuajbnngkz1DVD6CNR3
bKl65cp5looN8oaKK22Las4EdYuTatqqA3OmtrT2gs1J7vIkxDeJDxYMR+7RRAlB
9aPpvKQ0qSHsWUMidKZuELElOSNICOQUMu+sFgGRa/kaQv2gwU1F502nAgMBAAGj
ggI8MIICODATBgorBgEEAdZ5AgQDAQH/BAIFADCBugYDVR0RBIGyMIGvghJleHB3
LWUudWMuaWFmZy5uZXSCE3N2YTE0MjUuaWEuaWFmZy5uZXSCE3N2YTE0MjQuaWEu
aWFmZy5uZXSCDWV4cHctZWMuaWEuY2GCDWV4cHctZTEuaWEuY2GCDWV4cHctZTIu
aWEuY2GCFWV4cHctZTEubWVldGluZy5pYS5jYYIVZXhwdy1lMi5tZWV0aW5nLmlh
LmNhggVpYS5jYYINbWVldGluZy5pYS5jYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6
Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQwQjA2BgpghkgB
hvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBh
MAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9v
Y3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3Qu
bmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+n
YMYKTL8wHQYDVR0OBBYEFFxEtcE3BNl9WlyaCByydTAVG3MMMAkGA1UdEwQCMAAw
DQYJKoZIhvcNAQELBQADggEBAJaTK2cg8Jja0kp962k3BU4T1OkIuZtf2omIvqKx
c5c5aukOsGxYBvhqHm5YOEoty/alJJ9oGNPgNxEiA8ZIZoMq5T/3heKwbYzj88eR
2HPToctjHsEyIpF6TP2EBJHD+VOshX8cuv/VzVt4PwqS1IsBA+tFy7i6jwM/LtgS
gifMS1BuqG4Sld84IdSrKlSnjO8ZBD4rthWXhJ0dgucfW1NKWgyVsden1RnprOq5
U7UXX0nnka8E1tjJmY7WvgKXHgfjPPJ/kVgHbcUGWgeFEaz64UZ+GAExLXkFgj1p
ZaqSD8Z8txW8mmSFmyDN6xv9k6P+Q68Wbc9ZptiJvv/UC8E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlLo49QmkrYOmHoS6BEHH
WPELPDjaJsnXUA1CQbboeSVOtOz1jeyosoi06f+XdXXuxCEAn7B2DTOlQDfwjtNV
ZCAcEBHPnn4gty9F0Wxt4rhSNlXCaiSEavyeW1Iskh878cOjmjMYKip3D6+LDO5b
UGxe3HatlLRFG9kQAcAbMa8ZAdjqX1ZUGbH82TDMriYj5bGZ32j1fSMXuLh+8ud4
xJHRA7aHbC1SdVCktTDKVj97xAQq2sqMFMhfvMui+xB2QOTo2ZTU7y0RttQ4OrAO
x59rMCyLqnhyPk/t8w1MV0dcOyjF62DjhsMSDHzP9qygAroxFBCYpAqfEcWnC+Uj
j3fARpbjrYC0/ALtfGd0+5sa7uQlD3LOHohc5iaz4zG6MRmmLqRrWuRgQFzX06DO
/JUvdVfadiYkE6DTgwUUkfeeas4voF4+3JpDV0+0CIPnTJ9Bwcnmwik+G2mQDJjn
c7eTEfTCPXG6hunMKipyb/jWz87EaEwbz8sYNvHTj6RDlDcQzcLxa40B0p77R0B6
0hOHnFcHcsmhS5qNueeCTPUNUPoI1HdsqXrlynmWig3yhoorbYtqzgR1i5Nq2qoD
c6a2tPaCzUnu8iTEN4kPFgxH7tFECUH1o+m8pDSpIexZQyJ0pm4QsSU5I0gI5BQy
76wWAZFr+RpC/aDBTUXnTacCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158466932679008399091069982680120206552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 13:25:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 13:55:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expw-e.uc.iafg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 606754984068898582302427774751386990815593483550644866522910667467589592551921795472029346965724804412648620573944731623203735436437384426464527608153678818947289205019482485061160584153101449351232856478340167903906111073515715915127082252956611440690021847395186312569007671993526777393492277542030590861588361690371590785954748787431367816442239460554433758303790346233270740888627346920156898337162823726388665380669766687952543812161826084545643433050040009980609915948163022130220262798619128671551170624932667817022219134362776979974183863412132808837828302178358625771191276926163205644221946334138982611814776092039833583955443609955393863276991331968914728153269038534705932679260308912124442096346543286191430681520103170456420155151999520557184614987661176650211314383901042818519599663961532719448039801858759293148386506605395382449794941664496777871335650622306978600239637426865727432491955289662409612381439571939135209024875899388886545441190072081696758932418760348409971948972089402234968477952595015166065844531040670668342805370574889077541130476728066208874739086701542625613688957418765965673819123313448780091757583702100705386028260211817169518998355704010750698866525445567613981921835957164815284936592807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e.uc.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sva1425.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sva1424.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-ec.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e1.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e2.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e1.meeting.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e2.meeting.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeting.ia.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c44b5c13704d97d5a5c9a081cb27530151b730c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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