*.cepeo.on.ca
- Conseil des écoles publiques de l’Est de l’Ontario -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 44:3a:59:7a:5b:d1:c0:0c:91:59:a7:21:0d:28:52:40 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Conseil des écoles publiques de l’Est de l’Ontario
Organization:
Conseil des écoles publiques de l’Est de l’Ontario
State / Province:
Ontario
Locality: Ottawa
Country: CA
Locality: Ottawa
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 44:3a:59:7a:5b:d1:c0:0c:91:59:a7:21:0d:28:52:40Serial Number (int): 90690471759876559415071651380572213824
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: d2:69:83:93:3f:0f:9b:32:15:85:ca:db:58:94:5f:14:13:0a:5c:7e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 53:08:1c:2a:e4:36:ad:ae:aa:29:0c:03:44:0d:a7:97:12:90:bc:48
Fingerprint (sha256): 1b:af:32:27:94:02:42:ec:36:c4:5d:a3:5d:d2:a9:0c:b2:1d:fc:e0:46:8f:79:d2:11:98:88:8e:66:77:ea:cc
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate *.cepeo.on.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cepeo.on.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cepeo.on.ca
cepeo.on.ca
cepeo.on.ca
Other certificates including the domain name cepeo.on.ca
(limited to 100 certificates)
cac.cepeo.on.ca
cadenas.cepeo.on.ca
sst.cepeo.on.ca
*.cepeo.on.ca
*.cepeo.on.ca
ei.cepeo.on.ca
www.dica.cepeo.on.ca
*.cepeo.on.ca
cac.cepeo.on.ca
sst.cepeo.on.ca
radar.cepeo.on.ca
portailparents.cepeo.on.ca
horizon2025.cepeo.on.ca
*.cepeo.on.ca
horizon2025.cepeo.on.ca
www.sems.cepeo.on.ca
cac.cepeo.on.ca
cac.cepeo.on.ca
centrale.cepeo.on.ca
portailparents.cepeo.on.ca
*.cepeo.on.ca
inscription.cepeo.on.ca
ei.cepeo.on.ca
assistance.cepeo.on.ca
horizon2025.cepeo.on.ca
cac.cepeo.on.ca
vpn.cepeo.on.ca
horizon2025.cepeo.on.ca
cac.cepeo.on.ca
www.sems.cepeo.on.ca
cac.cepeo.on.ca
giare.cepeo.on.ca
*.cepeo.on.ca
reussite.cepeo.on.ca
reussite.cepeo.on.ca
cac.cepeo.on.ca
cac.cepeo.on.ca
ei.cepeo.on.ca
cac.cepeo.on.ca
reussite.cepeo.on.ca
reussite.cepeo.on.ca
cac.cepeo.on.ca
*.cepeo.on.ca
www.sems.cepeo.on.ca
inscription.cepeo.on.ca
ei.cepeo.on.ca
reussite.cepeo.on.ca
sst.cepeo.on.ca
*.cepeo.on.ca
*.cepeo.on.ca
*.cepeo.on.ca
*.cepeo.on.ca
www.dica.cepeo.on.ca
idp.cepeo.on.ca
*.cepeo.on.ca
vpn.cepeo.on.ca
assistance.cepeo.on.ca
*.cepeo.on.ca
cadenas.cepeo.on.ca
horizon2025.cepeo.on.ca
giare.cepeo.on.ca
www.sems.cepeo.on.ca
horizon2025.cepeo.on.ca
inscription.cepeo.on.ca
idp.cepeo.on.ca
portailparents.cepeo.on.ca
radar.cepeo.on.ca
idp.cepeo.on.ca
giare.cepeo.on.ca
portailparents.cepeo.on.ca
inscription.cepeo.on.ca
idp.cepeo.on.ca
radar.cepeo.on.ca
sst.cepeo.on.ca
ei.cepeo.on.ca
horizon2025.cepeo.on.ca
cadenas.cepeo.on.ca
sst.cepeo.on.ca
*.cepeo.on.ca
*.cepeo.on.ca
ei.cepeo.on.ca
www.dica.cepeo.on.ca
*.cepeo.on.ca
cac.cepeo.on.ca
sst.cepeo.on.ca
radar.cepeo.on.ca
portailparents.cepeo.on.ca
horizon2025.cepeo.on.ca
*.cepeo.on.ca
horizon2025.cepeo.on.ca
www.sems.cepeo.on.ca
cac.cepeo.on.ca
cac.cepeo.on.ca
centrale.cepeo.on.ca
portailparents.cepeo.on.ca
*.cepeo.on.ca
inscription.cepeo.on.ca
ei.cepeo.on.ca
assistance.cepeo.on.ca
horizon2025.cepeo.on.ca
cac.cepeo.on.ca
vpn.cepeo.on.ca
horizon2025.cepeo.on.ca
cac.cepeo.on.ca
www.sems.cepeo.on.ca
cac.cepeo.on.ca
giare.cepeo.on.ca
*.cepeo.on.ca
reussite.cepeo.on.ca
reussite.cepeo.on.ca
cac.cepeo.on.ca
cac.cepeo.on.ca
ei.cepeo.on.ca
cac.cepeo.on.ca
reussite.cepeo.on.ca
reussite.cepeo.on.ca
cac.cepeo.on.ca
*.cepeo.on.ca
www.sems.cepeo.on.ca
inscription.cepeo.on.ca
ei.cepeo.on.ca
reussite.cepeo.on.ca
sst.cepeo.on.ca
*.cepeo.on.ca
*.cepeo.on.ca
*.cepeo.on.ca
*.cepeo.on.ca
www.dica.cepeo.on.ca
idp.cepeo.on.ca
*.cepeo.on.ca
vpn.cepeo.on.ca
assistance.cepeo.on.ca
*.cepeo.on.ca
cadenas.cepeo.on.ca
horizon2025.cepeo.on.ca
giare.cepeo.on.ca
www.sems.cepeo.on.ca
horizon2025.cepeo.on.ca
inscription.cepeo.on.ca
idp.cepeo.on.ca
portailparents.cepeo.on.ca
radar.cepeo.on.ca
idp.cepeo.on.ca
giare.cepeo.on.ca
portailparents.cepeo.on.ca
inscription.cepeo.on.ca
idp.cepeo.on.ca
radar.cepeo.on.ca
sst.cepeo.on.ca
ei.cepeo.on.ca
horizon2025.cepeo.on.ca
Certificate
The complete raw certificate details for *.cepeo.on.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIQRDpZelvRwAyRWachDShSQDANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y MzEyMjExNzQ5MzFaFw0yNTAxMDgxNzQ5MzBaMIGKMQswCQYDVQQGEwJDQTEQMA4G A1UECBMHT250YXJpbzEPMA0GA1UEBxMGT3R0YXdhMUAwPgYDVQQKDDdDb25zZWls IGRlcyDDqWNvbGVzIHB1YmxpcXVlcyBkZSBs4oCZRXN0IGRlIGzigJlPbnRhcmlv MRYwFAYDVQQDDA0qLmNlcGVvLm9uLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAmmDcFUP5MeXAobfLmUgWb5TbiktfH576NlRu6dIa7Z2DFhZvnYWG 5vUhhvc+4mJyplwW/PkDCNmqVZERjbiULc924xW02kyb5G7aoJeDk2dgwlWcJlYd DgSGS6bc5/KZDruLLovB8tOHeyb+Jc159hDL5rPsK+o0J947B59aQ/dQnjodMWkZ bWFkobylfva12CsaHOQNVeAFQ0+bVv1h78Jzu6lMLnJuieMvkgLrkDTDy3KSBhB5 7ftJL6XLCra8cbCPQR6aIDzN61rxW0UHYK3jLZMB/lnSatleQ+n8faC8ermbwp5N Q7beess+QBqdnNPwS5c9IAGeTGDBXsYv7QIDAQABo4IC3zCCAtswDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQU0mmDkz8PmzIVhcrbWJRfFBMKXH4wHwYDVR0jBBgwFoAU gqJwdN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzAB hhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2Fp YS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSG Imh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwJQYDVR0RBB4wHIIN Ki5jZXBlby5vbi5jYYILY2VwZW8ub24uY2EwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjATBgNVHSAEDDAKMAgGBmeBDAECAjCC AX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYA5tIxY0B3jMEQQQbXcbnOwdJA9paE hvu6hzId/R43jlAAAAGMjX8ugAAABAMARzBFAiEAk2OIt9Wg25isB1a49cCdptkY uT+OgRUcg7E+UnDlzMECIAwghzMvv2n/nRjjL5W3Iu3oHBGd38WvNqWNidz+xzwr AHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGMjX8uoAAABAMA RzBFAiB71GDjDI1B8WGvI7cbRSSOmoT2XWBzjTLnW9muNusaMwIhAP7XFnL6W31b UrfbpNXTMnFWKk6Ul45bP0xH8nLV8CWxAHcATnWjJ1yaEMM4W2zU3z9S6x3w4I4b jWnAsfpksWKaOd8AAAGMjX8u0gAABAMASDBGAiEAjfYYAuMf32igl7pfw7CBpy3N Wkagypl10PYyTU9lxVQCIQCkqkdB4kJcy/U/P1/vvWmmC4Wmh0kYsLP4c/KttzcC 9jANBgkqhkiG9w0BAQsFAAOCAQEAQR2E26ij7jbPpHHFA2DbXDuh6IsTcHwC+UWP gSROoWrzCQ3ZkuSPyT5D+tGfpJibNwRNoQMQ7So2iZkE8++Og1iRsLeO2MKZSo+z HfBI9nFfynlniW3TZEX1fUtrORQZl1XiDhs7f9muD5mZvddsTtMA+t2aIwZzk5Do /EKdFi4Tl5wbPkSKKjuNIeYaHEFrTMNzKcuGZX1Y2lsgG8jif3dFYvGsTYOfr9G9 6nNP2I9IowWaQ5XmZ2uXb80uGn12MaSjq+Xpz4vAlgxu43Z8QRS0S1PJlpECs/pY zjd+XqZnRSORbr0DGxwUsjqlWTkV4fa/TQwxL+nytjyK4Z9QLA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmDcFUP5MeXAobfLmUgW b5TbiktfH576NlRu6dIa7Z2DFhZvnYWG5vUhhvc+4mJyplwW/PkDCNmqVZERjbiU Lc924xW02kyb5G7aoJeDk2dgwlWcJlYdDgSGS6bc5/KZDruLLovB8tOHeyb+Jc15 9hDL5rPsK+o0J947B59aQ/dQnjodMWkZbWFkobylfva12CsaHOQNVeAFQ0+bVv1h 78Jzu6lMLnJuieMvkgLrkDTDy3KSBhB57ftJL6XLCra8cbCPQR6aIDzN61rxW0UH YK3jLZMB/lnSatleQ+n8faC8ermbwp5NQ7beess+QBqdnNPwS5c9IAGeTGDBXsYv 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 90690471759876559415071651380572213824 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 17:49:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 17:49:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Conseil des écoles publiques de l’Est de l’Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cepeo.on.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19488462262752118849157117375371771241895267265177139008896224140234683703719725781721538257199732262424063120838850512239368182841002175548554003772167641078892270653129309593231661780568107578424269394710407920081890655189334125062121963499918517679592946236677641487180329735049662409790299898778259844380045973232152637441387648228334886814905272510320992996969930269181504448634623821582798574690768587419252061107419443703274308771408360511149977811454628826055424175642126271136096033913106176585892438785460649012960639325649107189379337285472556484994175997205061416605537134330945126501312978503245771452397 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d26983933f0f9b321585cadb58945f14130a5c7e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cepeo.on.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cepeo.on.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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