rm1ac.international.gc.ca

- Global Affairs Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0c:cf:6e:db:c3:69:74:99:00:00:00:00:50:f8:2b:05 was issued on by Entrust, Inc..

With 149 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Global Affairs Canada

Organization: Global Affairs Canada
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:cf:6e:db:c3:69:74:99:00:00:00:00:50:f8:2b:05
Serial Number (int): 17027789875636756844673745269720361733
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 51:7d:7b:21:72:47:f5:12:6e:76:b5:a5:fb:87:79:d6:af:b2:48:86
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ab:70:5a:3c:1b:dc:8c:9c:da:bf:05:c6:bd:01:62:b0:d7:85:37:a5
Fingerprint (sha256): 29:ed:c6:7e:7d:25:7f:dc:11:a3:34:1c:a5:44:5f:b6:07:b8:c9:94:c6:ec:af:ab:d8:59:2e:35:e0:1b:ef:7d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate rm1ac.international.gc.ca

149

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rm1ac.international.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rm1ac.international.gc.ca
afghanistan.gc.ca
www.afghanistan.gc.ca
afriquedusud.gc.ca
www.afriquedusud.gc.ca
alenaaujourdhui.ca
www.alenaaujourdhui.ca
alena-aujourdhui.org
www.alena-aujourdhui.org
alenaaupresent.ca
www.alenaaupresent.ca
algeria.gc.ca
www.algeria.gc.ca
algerie.gc.ca
www.algerie.gc.ca
allemagne.gc.ca
www.allemagne.gc.ca
arabiesaoudite.gc.ca
www.arabiesaoudite.gc.ca
argentina.gc.ca
www.argentina.gc.ca
argentine.gc.ca
www.argentine.gc.ca
atlanta.gc.ca
www.atlanta.gc.ca
australia.gc.ca
www.australia.gc.ca
australie.gc.ca
www.austria.gc.ca
austria.gc.ca
autriche.gc.ca
www.autriche.gc.ca
balticstates.gc.ca
www.balticstates.gc.ca
bangladesh.gc.ca
www.bangladesh.gc.ca
barbade.gc.ca
www.barbade.gc.ca
barbados.gc.ca
www.barbados.gc.ca
belgique.gc.ca
www.belgique.gc.ca
belgium.gc.ca
www.belgium.gc.ca
birmanie.gc.ca
www.birmanie.gc.ca
boisdoeuvre.gc.ca
www.boisdoeuvre.gc.ca
boston.gc.ca
www.boston.gc.ca
bourses.gc.ca
www.bourses.gc.ca
bourses-scholarships.gc.ca
www.bourses-scholarships.gc.ca
brasil.gc.ca
www.brasil.gc.ca
brazil.gc.ca
www.brazil.gc.ca
brunei.gc.ca
www.brunei.gc.ca
bsec.international.gc.ca
www.bsec.international.gc.ca
burma.gc.ca
www.burma.gc.ca
businesswomenintrade.gc.ca
www.businesswomenintrade.gc.ca
cambodge.gc.ca
www.cambodge.gc.ca
cambodia.gc.ca
www.cambodia.gc.ca
cameroon.gc.ca
www.cameroon.gc.ca
cameroun.gc.ca
www.cameroun.gc.ca
canadacourse.ca
www.canadacourse.ca
canadacourse.com
www.canadacourse.com
canada-eu.gc.ca
www.canada-eu.gc.ca
canadaexpo2020.ca
www.canadaexpo2020.ca
canadaexpo2020.com
www.canadaexpo2020.com
canada-ue.gc.ca
www.canada-ue.gc.ca
can-am.gc.ca
www.can-am.gc.ca
candoc.gc.ca
www.candoc.gc.ca
ccea-ccae.ca
www.ccea-ccae.ca
ccea-ccae.com
www.ccea-ccae.com
cfsi-icse.gc.ca
www.cfsi-icse.gc.ca
chicago.gc.ca
www.chicago.gc.ca
chile.gc.ca
www.chile.gc.ca
chili.gc.ca
www.chili.gc.ca
china.gc.ca
www.china.gc.ca
chine.gc.ca
www.chine.gc.ca
cisjordanieetgaza.gc.ca
www.cisjordanieetgaza.gc.ca
colombia.gc.ca
www.colombia.gc.ca
colombie.gc.ca
www.colombie.gc.ca
congo.gc.ca
www.congo.gc.ca
controlesalexportation.gc.ca
www.controlesalexportation.gc.ca
coree.gc.ca
www.coree.gc.ca
costarica.gc.ca
www.costarica.gc.ca
cotedivoire.gc.ca
www.cotedivoire.gc.ca
courscanada.ca
www.courscanada.ca
courscanada.com
www.courscanada.com
courscanadien.ca
www.courscanadien.ca
courscanadien.com
www.courscanadien.com
croatia.gc.ca
www.croatia.gc.ca
croatie.gc.ca
www.croatie.gc.ca
csr.gc.ca
www.csr.gc.ca
cuba.gc.ca
www.cuba.gc.ca
czechrepublic.gc.ca
www.czechrepublic.gc.ca
bresil.gc.ca
www.bresil.gc.ca
www.australie.gc.ca
www.burkinafaso.gc.ca
burkinafaso.gc.ca
canada.org.tw
www.canada.org.tw
canadexport.gc.ca
www.canadexport.gc.ca

Other certificates including the domain name international.gc.ca

(limited to 100 certificates)
mailgateway.dev.international.gc.ca
sdcvpn01h.international.gc.ca
dalasvpn01h.international.gc.ca
www.listserv.international.gc.ca
data.international.gc.ca
eam-systest.sp.international.gc.ca
develang.international.gc.ca
develang.international.gc.ca
data.international.gc.ca
dev-travel.international.gc.ca
rm3hq.international.gc.ca
rm3hq.international.gc.ca
SP.international.gc.ca
signetweb.international.gc.ca
MXICOVPN01H.international.gc.ca
pilotasa01.international.gc.ca
piprod2.international.gc.ca
sdcvpn01h.international.gc.ca
goa-oma.international.gc.ca
w01.international.gc.ca
sl.media.international.gc.ca
elang.international.gc.ca
www.international.gc.ca
w03.international.gc.ca
guestportal11.international.gc.ca
w05.international.gc.ca
iec-eic.international.gc.ca
rm2dg.international.gc.ca
travel-smart.international.gc.ca
signetweb.international.gc.ca
SEOULVPN01H.international.gc.ca
dev-goa-oma.international.gc.ca
AEMDispatcher.international.gc.ca
appdemo.international.gc.ca
sdcvpn01h.international.gc.ca
DELHIVPN01H.international.gc.ca
staffing-les.international.gc.ca
rm3hq.international.gc.ca
SPOREVPN01H.international.gc.ca
w06.international.gc.ca
as-dev.international.gc.ca
guestportal.international.gc.ca
FS-QA.international.gc.ca
w05.international.gc.ca
listservdev.international.gc.ca
eam-dev.sp.international.gc.ca
TOKYOVPN01H.international.gc.ca
SP-QA.international.gc.ca
eam.sp.international.gc.ca
collab.international.gc.ca
tcse-ts15.international.gc.ca
travel-smart.international.gc.ca
CRCASVPN01.international.gc.ca
wcdev.international.gc.ca
seoulvpn01h.international.gc.ca
dev-goa-oma.international.gc.ca
wc.international.gc.ca
rm1ac.international.gc.ca
GANZUVPN01H.international.gc.ca
wifi-pilot.international.gc.ca
eam-dev.sp.international.gc.ca
evoswa.international.gc.ca
pi.international.gc.ca
rm2dg.international.gc.ca
pi.international.gc.ca
bilat.international.gc.ca
*.international.gc.ca
*.dev.cloud-nuage.international.gc.ca
intl-ts16.international.gc.ca
appdemo.international.gc.ca
wc.international.gc.ca
w05.international.gc.ca
signetweb.international.gc.ca
CNGNYVPN01H.international.gc.ca
elang.international.gc.ca
wifiauth1.d.r.dfait-maeci.gc.ca
tradefacts-donneescommerciales.international.gc.ca
mailgateway.international.gc.ca
rm4rz.international.gc.ca
www.listserv.dfait-maeci.gc.ca
signetweb.international.gc.ca
rm2dg.international.gc.ca
elang.international.gc.ca
kompass-iec-eic.international.gc.ca
www1.international.gc.ca
*.dev.cloud-nuage.international.gc.ca
SPOREVPN01H.international.gc.ca
dv05.international.gc.ca
tcsf-ts16.international.gc.ca
FS-DEV.international.gc.ca
www1.international.gc.ca
mailgateway.dev.international.gc.ca
wc.international.gc.ca
lbpvpn01h.international.gc.ca
develang.international.gc.ca
rm1ac.international.gc.ca
mailgateway.dev.international.gc.ca
wc.international.gc.ca
HQL-PMKWC02.p.dfait-maeci.gc.ca
ExchangeServer-QA.d.r.dfait-maeci.gc.ca

Certificate

The complete raw certificate details for rm1ac.international.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LdwzzSAcPnSUEbkPCz+
5Z/eamnaxpPTWl9x3NJHVG7WrbGegxkjDWExLBORdFlw3jD1699TGk8RLRWjpD/4
J0NvBE/cEZje4tj0AKXEi/ByPMaod/RPqVGsAgRlmY0fxqJv3/bIyAhKrg0It0UG
odP1+3eqMbg05rllQz9JenXyId97R53x5ewECbiOeQHZ3NNXYs1TpVO3G9xRgdp0
SeoUoqXMp+h55QfYCatfuaTQTA2Ct9xJEQxQONjBMOD2kCKoI+G5I53oBz/B0GP0
+iJNY42A6J+GnkMlmJgO0bMXchQ7FE4wR+VufDjV8Jcb3Q9suBv5fHFmS3mz07Dg
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17027789875636756844673745269720361733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 11:07:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-07 11:37:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Affairs Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rm1ac.international.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29377744713823623318173176601059809288838276086960216136623230798612748026293867990497253880539302725935343478549187973178342864166149949958033529216872369716860395466875400094169830626220917231063033988432039603020295494610682891823249654181440975099678720990487649864718599920726916173128412118052222425253770979267631707499666190162567487528411736301569707777601271899877140095997288336202013721211876146193607914647180251974561344768594859657352266521067167512324317457668103720991504386821603803888102483515771532418748023974937626001730431148894174317309183182664871124611497253559755460209219805392162597691481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2841 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm1ac.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afghanistan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afghanistan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afriquedusud.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afriquedusud.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alenaaujourdhui.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alenaaujourdhui.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alena-aujourdhui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alena-aujourdhui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alenaaupresent.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alenaaupresent.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algeria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.algeria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algerie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.algerie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allemagne.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allemagne.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabiesaoudite.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arabiesaoudite.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentina.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.argentina.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.argentine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanta.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.austria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autriche.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autriche.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balticstates.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balticstates.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangladesh.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bangladesh.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbade.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbade.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbados.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbados.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgique.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belgique.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgium.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belgium.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birmanie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birmanie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boisdoeuvre.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boisdoeuvre.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boston.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boston.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourses.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bourses.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourses-scholarships.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bourses-scholarships.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brasil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunei.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunei.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsec.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsec.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burma.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burma.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesswomenintrade.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesswomenintrade.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodge.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodge.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameroon.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cameroon.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameroun.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cameroun.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadacourse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadacourse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadacourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadacourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada-eu.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canada-eu.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaexpo2020.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadaexpo2020.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaexpo2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadaexpo2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada-ue.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canada-ue.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'can-am.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.can-am.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candoc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candoc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccea-ccae.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccea-ccae.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccea-ccae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccea-ccae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfsi-icse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfsi-icse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicago.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chile.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chile.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chili.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chili.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisjordanieetgaza.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisjordanieetgaza.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colombia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colombie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congo.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.congo.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlesalexportation.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.controlesalexportation.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coree.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coree.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costarica.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costarica.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotedivoire.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotedivoire.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courscanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courscanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courscanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courscanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courscanadien.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courscanadien.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courscanadien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courscanadien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croatia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croatia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croatie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croatie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csr.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuba.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuba.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechrepublic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.czechrepublic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bresil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bresil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burkinafaso.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burkinafaso.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada.org.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canada.org.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadexport.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadexport.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							517d7b217247f5126e76b5a5fb8779d6afb24886
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006fbdca7ad96e9c55da90fddcf13ce668d8cb47a38427a2e86e8ffc0102b73f069a5e294931f83133836f43f8a13059e3d42f332e83389e1104e8a25987bc83573a0020ea3fa309eac0e03ec83ce9729dbde818df1292717b6bacb3da9de055e524407438c7eb7237c39bd98f9e9d473ad717de6372ff6ca04ff2667393b78e6a7c4865023b83f79d374ea18b9201180a7265ca20374adaccee8fcc7fe4173adb3cdedc6f39852d9913420a21a7bf5f4f67dac97ab99560c925d490fc27eb5ef3009695addd736e285d79526cfff3bacd3157290a5ddb180efbcdad3396d677be55ecbd1f260c46a84fa7ad8b9fd27983640467dc349600cdc16e996e98149b06