www.monk.ca

- Monk Office Supply Ltd. -

Issued by Trustwave Organization Validation SHA256 CA, Level 1

About this certificate

This digital certificate with serial number 06:70:c8:b5:97:dd:32:dc:89:f9:f3:5c:19:f5:bb:02:19:88:70 was issued on by Trustwave Holdings, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Monk Office Supply Ltd.

Organization: Monk Office Supply Ltd.
State / Province: British Columbia
Locality: Victioria
Country: CA

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:70:c8:b5:97:dd:32:dc:89:f9:f3:5c:19:f5:bb:02:19:88:70
Serial Number (int): 143629345067715579058898917612184535939254384
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 11:ab:42:97:44:4b:b9:b4:ab:a5:2a:91:d1:19:9e:68:67:8d:ab:3d
AuthorityKeyId: ca:ce:1d:18:03:77:1e:1c:f3:7c:58:b2:9a:70:a8:08:80:16:f4:ae

Fingerprint (sha1): 49:07:aa:f5:7e:94:66:91:3e:75:4f:3f:e5:42:a7:ef:2b:ee:56:b1
Fingerprint (sha256): 21:d4:e6:1a:46:93:08:01:79:e6:84:b6:14:99:12:d7:56:0c:3e:95:26:33:4b:45:84:0f:aa:cf:3e:37:9c:56

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate www.monk.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.monk.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.monk.ca
monk.ca

Other certificates including the domain name monk.ca

(limited to 100 certificates)
monk.ca
bts.monk.ca
sni242241.cloudflaressl.com
www.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
flyers.monk.ca
bts.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
*.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
*.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
www.monk.ca
sni242241.cloudflaressl.com
vps.monk.ca
*.monk.ca
*.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
monk.ca
*.monk.ca
sni242241.cloudflaressl.com
myclips.monk.ca
sni.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
*.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
myclips.monk.ca
*.monk.ca
sni242241.cloudflaressl.com
kms.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
*.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
flyertown.ca
sni242241.cloudflaressl.com
vps.monk.ca
sni242241.cloudflaressl.com
*.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
*.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
*.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
*.monk.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
flyertown.ca
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com
sni242241.cloudflaressl.com

Certificate

The complete raw certificate details for www.monk.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgITBnDItZfdMtyJ+fNcGfW7AhmIcDANBgkqhkiG9w0BAQsF
ADCBtTELMAkGA1UEBhMCVVMxETAPBgNVBAgTCElsbGlub2lzMRAwDgYDVQQHEwdD
aGljYWdvMSEwHwYDVQQKExhUcnVzdHdhdmUgSG9sZGluZ3MsIEluYy4xPTA7BgNV
BAMTNFRydXN0d2F2ZSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTSEEyNTYgQ0Es
IExldmVsIDExHzAdBgkqhkiG9w0BCQEWEGNhQHRydXN0d2F2ZS5jb20wHhcNMTUw
NzA3MTIyNDEwWhcNMTYwNzA2MTgyNDEwWjB0MRQwEgYDVQQDDAt3d3cubW9uay5j
YTEgMB4GA1UECgwXTW9uayBPZmZpY2UgU3VwcGx5IEx0ZC4xEjAQBgNVBAcMCVZp
Y3Rpb3JpYTEZMBcGA1UECAwQQnJpdGlzaCBDb2x1bWJpYTELMAkGA1UEBhMCQ0Ew
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2r49HnYVzJm++ccFWcSe
0azKIcwWHUxa1svu5eCjVaLUib3rrAIo62jHzCBLJgmNzkVDnFhWC93HO6XAbZWU
eavMu/MoP+QHJXqxR9njK3CYCF1FJ32agQNm7q2Ib3TGIVfB3WMVANNrDMuY8vqS
ef0IreowRnpsv933WwsM3ljMhC4ijqaBOMhEaTtlr54G8fPEJAnwScECSPknC8ig
boHeEGqidiENvHGafXqZh+/XUcxXcAQ2HG7o2GmceCBXgogGO3FpLesxANQPfMvI
+15QyeEu00lpVWa4OtH8PKaD4hcnrhmenO0vV7edxmCQdtVSJqI4pco5GGcmVDIH
AgMBAAGjggGUMIIBkDAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwHQYDVR0OBBYEFBGrQpdES7m0q6UqkdEZ
nmhnjas9MB8GA1UdIwQYMBaAFMrOHRgDdx4c83xYsppwqAiAFvSuMEgGA1UdIARB
MD8wPQYPKwYBBAGB7RgDAwMDBAQDMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vc3Ns
LnRydXN0d2F2ZS5jb20vQ0EwHwYDVR0RBBgwFoILd3d3Lm1vbmsuY2GCB21vbmsu
Y2EwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC50cnVzdHdhdmUuY29tL09W
Q0EyX0wxLmNybDBxBggrBgEFBQcBAQRlMGMwJgYIKwYBBQUHMAGGGmh0dHA6Ly9v
Y3NwLnRydXN0d2F2ZS5jb20vMDkGCCsGAQUFBzAChi1odHRwOi8vc3NsLnRydXN0
d2F2ZS5jb20vaXNzdWVycy9PVkNBMl9MMS5jcnQwDQYJKoZIhvcNAQELBQADggEB
AOJi+jIZrqjlZ2kztOulS/pywElQfD7kTRRy4A3rjPBXNPglYK2+pmTzrX60rw/A
pMGR+kASi6mP5TTksG3UvR7SkJGNa5ssgj/Dl5DzLAVeHKfrx7gaClotSr6FK0eV
6gyA4FO601bkjWO3vVs1dKdcpxxNHooNnCDzGi0xGGOE8/zZ2Sy4UTGt52YxPBKU
yco17jmtsuzab9rev8kb5Bb2nvcW+0+rsvGS8QbtgrEkVNcLDzfkwq9eh3xggft1
u2mikoFF35FO+Nqh5i4PE/GMnmUpgATmXwHG4AQBxk2HQUdrs9uWaGYQqiDkYhIP
V2MZ1TDEaYHCkEcKbzLrEdM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9q+PR52FcyZvvnHBVnE
ntGsyiHMFh1MWtbL7uXgo1Wi1Im966wCKOtox8wgSyYJjc5FQ5xYVgvdxzulwG2V
lHmrzLvzKD/kByV6sUfZ4ytwmAhdRSd9moEDZu6tiG90xiFXwd1jFQDTawzLmPL6
knn9CK3qMEZ6bL/d91sLDN5YzIQuIo6mgTjIRGk7Za+eBvHzxCQJ8EnBAkj5JwvI
oG6B3hBqonYhDbxxmn16mYfv11HMV3AENhxu6NhpnHggV4KIBjtxaS3rMQDUD3zL
yPteUMnhLtNJaVVmuDrR/Dymg+IXJ64ZnpztL1e3ncZgkHbVUiaiOKXKORhnJlQy
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143629345067715579058898917612184535939254384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Organization Validation SHA256 CA, Level 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-07 12:24:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-06 18:24:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.monk.ca'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Monk Office Supply Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Victioria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24219382501269673119780192412550452015447058663707810387871307582121874702801936439492381225785131302489655092316206632037251595720171266984936963256540172643301888740423826494381753618433898837029421473249621378187204781502973854524106121871617652412263863524363141091730643037351596169921167366898783785509723210037752948135057121977772117687999207691973026583713136062669687270662610886560270582207798608777985276749923758460099825408685074432741120059679336122289561804474108204541695347190713259084701267221658510554083680264995817946614858519984704039115370112297574029077087615187851653202828565169345284813319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11ab4297444bb9b4aba52a91d1199e68678dab3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cace1d1803771e1cf37c58b29a70a8088016f4ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.30360.3.3.3.3.4.4.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monk.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monk.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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