mpac.ca
- Municipal Property Assessment Corporation -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 5c:da:38:2a:00:00:00:00:50:d6:0e:6e was issued on by Entrust, Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Municipal Property Assessment Corporation
Organization:
Municipal Property Assessment Corporation
Organization unit: Information Technology
Organization unit: Information Technology
State / Province:
Ontario
Locality: Pickering
Country: CA
Locality: Pickering
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 5c:da:38:2a:00:00:00:00:50:d6:0e:6eSerial Number (int): 28736431959526027280055144046
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 41:5c:dc:af:e9:5e:34:67:6b:7c:bf:3a:14:fe:89:62:a0:e8:24:b6
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): b6:b4:b8:62:d4:1a:67:c3:df:63:ca:ce:85:6a:76:34:6d:1c:2a:f8
Fingerprint (sha256): 24:99:96:bb:28:3a:3e:b2:03:6d:a7:01:a2:07:56:97:1b:58:8e:74:42:e7:f6:16:3d:a6:b0:56:17:e2:11:ed
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate mpac.ca
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mpac.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
m.mpac.ca
mpac.ca
www.mpac.ca
mpac.ca
www.mpac.ca
Other certificates including the domain name mpac.ca
(limited to 100 certificates)
*.aws.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
b2buat.mpac.ca
*.aws.mpac.ca
soporte.cjgconsultores.com
support.akylade.com
acs-online.mpac.ca
it-helpdesk.hccom.org
guestportal.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
*.aws.mpac.ca
it.oodc.com.ph
services.mpac.ca
*.aws.mpac.ca
*.aws.mpac.ca
desk.mpac.ca
*.aws.mpac.ca
adfs.mpac.ca
*.aws.mpac.ca
b2b.data.mpac.ca
it.oodc.com.ph
services.mpac.ca
servicedesk.aws.mpac.ca
mpac.prd.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
help.bookfocal.com
guestportal.mpac.ca
support.spidercost.com
help.tradetechnica.com
apps.mpac.ca
*.aws.mpac.ca
quiz.apexstrategygroup.org
*.aws.mpac.ca
b2b.data.mpac.ca
ra.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
apps2.mpac.ca
support.cosmicktechnologies.com
instream.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
support.orly.com
blackduck.aws.mpac.ca
helpdesk.al-mozon.com
api-acs-online.mpac.ca
support.45z.net
casper.mpac.ca
b2b.web.mpac.ca
helpdesk.ie-launch.com
help.tradetechnica.com
mgmttun.mpac.ca
support.thebestclaims.com
sightline.mpac.ca
b2b.web.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
support.cosmicktechnologies.com
survey.makusafe.com
sclearpasslab.prd.mpac.ca
www.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
*.k8s.mpac.ca
servicesuat.mpac.ca
support.foodaccessportal.org
apps2.mpac.ca
ClarityConnect.mpac.ca
mpac.ca
*.aws.mpac.ca
www.axi.sierraleone.mpac.ca
aws.mpac.ca
test1.mpac.ca
aaa.mpac.ca
sap-ec-npr-02.prd.mpac.ca
support.45z.net
annualreport.mpac.ca
apps2.mpac.ca
support.cosmicktechnologies.com
support.cosmicktechnologies.com
guestportal.mpaclab.net
anyconnect.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
sap-ec-prd-01.prd.mpac.ca
guestportal.mpac.ca
it.tnsos.help
it-helpdesk.hccom.org
webtrends.mpac.ca
api-acs-online1.mpac.ca
mpac.ca
servicedesk.mpac.ca
lync01.um.mpac.ca
portal.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
b2buat.mpac.ca
*.aws.mpac.ca
soporte.cjgconsultores.com
support.akylade.com
acs-online.mpac.ca
it-helpdesk.hccom.org
guestportal.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
*.aws.mpac.ca
it.oodc.com.ph
services.mpac.ca
*.aws.mpac.ca
*.aws.mpac.ca
desk.mpac.ca
*.aws.mpac.ca
adfs.mpac.ca
*.aws.mpac.ca
b2b.data.mpac.ca
it.oodc.com.ph
services.mpac.ca
servicedesk.aws.mpac.ca
mpac.prd.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
help.bookfocal.com
guestportal.mpac.ca
support.spidercost.com
help.tradetechnica.com
apps.mpac.ca
*.aws.mpac.ca
quiz.apexstrategygroup.org
*.aws.mpac.ca
b2b.data.mpac.ca
ra.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
apps2.mpac.ca
support.cosmicktechnologies.com
instream.mpac.ca
*.aws.mpac.ca
support.cosmicktechnologies.com
it.oodc.com.ph
support.orly.com
blackduck.aws.mpac.ca
helpdesk.al-mozon.com
api-acs-online.mpac.ca
support.45z.net
casper.mpac.ca
b2b.web.mpac.ca
helpdesk.ie-launch.com
help.tradetechnica.com
mgmttun.mpac.ca
support.thebestclaims.com
sightline.mpac.ca
b2b.web.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
servicesdev.mpac.ca
support.cosmicktechnologies.com
survey.makusafe.com
sclearpasslab.prd.mpac.ca
www.mpac.ca
it.oodc.com.ph
it.oodc.com.ph
*.k8s.mpac.ca
servicesuat.mpac.ca
support.foodaccessportal.org
apps2.mpac.ca
ClarityConnect.mpac.ca
mpac.ca
*.aws.mpac.ca
www.axi.sierraleone.mpac.ca
aws.mpac.ca
test1.mpac.ca
aaa.mpac.ca
sap-ec-npr-02.prd.mpac.ca
support.45z.net
annualreport.mpac.ca
apps2.mpac.ca
support.cosmicktechnologies.com
support.cosmicktechnologies.com
guestportal.mpaclab.net
anyconnect.mpac.ca
*.aws.mpac.ca
it.oodc.com.ph
sap-ec-prd-01.prd.mpac.ca
guestportal.mpac.ca
it.tnsos.help
it-helpdesk.hccom.org
webtrends.mpac.ca
api-acs-online1.mpac.ca
mpac.ca
servicedesk.mpac.ca
lync01.um.mpac.ca
portal.mpac.ca
Certificate
The complete raw certificate details for mpac.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIMXNo4KgAAAABQ1g5uMA0GCSqGSIb3DQEBCwUAMIG6MQsw CQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2Vl IHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMTIg RW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MS4wLAYDVQQD EyVFbnRydXN0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gTDFLMB4XDTE1MTEx MzE3MDkwNloXDTE2MTExMzE3MzkwNVowgZoxCzAJBgNVBAYTAkNBMRAwDgYDVQQI EwdPbnRhcmlvMRIwEAYDVQQHEwlQaWNrZXJpbmcxMjAwBgNVBAoTKU11bmljaXBh bCBQcm9wZXJ0eSBBc3Nlc3NtZW50IENvcnBvcmF0aW9uMR8wHQYDVQQLExZJbmZv cm1hdGlvbiBUZWNobm9sb2d5MRAwDgYDVQQDEwdtcGFjLmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44F2KZJR0sq1pI0I8Vs6aN8myCj4rDfYWXzm F1dPdheWsOWsNxvoNvPQWYOc6EautaVFANaW1nom4hUVp97ovTSkD95LmlRmWqqn Lzgut0Sa7nqhpDtzMJ6rqQDkjI0T+g2Mf9GjPdwvN5GDyNbSkqTOaAbIbuoQvHwJ 3eqHrWIEMIZWU0tttmRtjrjFt9iwrSskW7KdGrJysIfA3VdULG/5s8ida3mU63RI Pf7RpCcwaTVa6wni8K5iy7zPgnuSqdwLRbucV5x32wELXzD/Uh2bec29BNZQQ+F2 Xb62mG5xknmOH+j++K5E5tjkuyIC/Aa1cIVWrc/7xN8cLOd3gwIDAQABo4IBkzCC AY8wCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAz BgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsu Y3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBa MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcw AoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMCoGA1Ud EQQjMCGCCW0ubXBhYy5jYYIHbXBhYy5jYYILd3d3Lm1wYWMuY2EwHwYDVR0jBBgw FoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFEFc3K/pXjRna3y/OhT+ iWKg6CS2MAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAAgf/YtXFWC748fH PQFbkmVxLTGYxV1FWamz5P2EnMLg4GNGjh5/SBxLGp66zmg8QsWZu4T/rWb1kkkD lW6doGh6aym6iSpFEsBBj/N4g/ewdWYqBHteg3NeupT+DiS1asgoxB0dJCPshlLQ FSBsPbAd/aOf7VW6VAY96XrQ8c/vxyptweLecWpyHjQfr46yvZE/7fLKlsfv7Uh7 qzxVAzu0LZfB0EHgDE1kodJuxSkEYZ98ExDywcSc8+bGZL8auqI8dh0qIa4Tikja ezU+8H8YIM2f6FKueHDg3RMX7m77wE5NX6mmBMtH5iw92XsJLMGXzejPB7sXfrXP FzXc5pI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44F2KZJR0sq1pI0I8Vs6 aN8myCj4rDfYWXzmF1dPdheWsOWsNxvoNvPQWYOc6EautaVFANaW1nom4hUVp97o vTSkD95LmlRmWqqnLzgut0Sa7nqhpDtzMJ6rqQDkjI0T+g2Mf9GjPdwvN5GDyNbS kqTOaAbIbuoQvHwJ3eqHrWIEMIZWU0tttmRtjrjFt9iwrSskW7KdGrJysIfA3VdU LG/5s8ida3mU63RIPf7RpCcwaTVa6wni8K5iy7zPgnuSqdwLRbucV5x32wELXzD/ Uh2bec29BNZQQ+F2Xb62mG5xknmOH+j++K5E5tjkuyIC/Aa1cIVWrc/7xN8cLOd3 gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 28736431959526027280055144046 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-13 17:09:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-13 17:39:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pickering' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Municipal Property Assessment Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mpac.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28719935107710436208994396117122679765165335736736761566877873153330749489374643976089749519244975256047326627652788910045201971776172935596238738061122002083369013751093061571265790006084848948066675677904590855115497338038160283919191820514584915736130765692362254377620975067876005830566571195195774859911231490377519745678089659651078702869199462203028025251080293889619518969545111250180030232060335137512593912267136548162774222571912872516053790636350291725670315987178463444998826745596221906449897866153108489113025172929862503829962217069669394973195376286650256393262508864842631341140067647957886684329859 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mpac.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpac.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpac.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 415cdcafe95e34676b7cbf3a14fe8962a0e824b6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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