srv404s.services.gc.ca

- Department of Employment and Social Development Canada (ESDC) -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ba:8c:b3:7c:7a:34:8b:01:00:00:00:00:50:df:6d:17 was issued on by Entrust, Inc..

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Department of Employment and Social Development Canada (ESDC)

Organization: Department of Employment and Social Development Canada (ESDC)
Organization unit: HRSDC-RHDCC
State / Province: Quebec
Locality: Gatineau
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ba:8c:b3:7c:7a:34:8b:01:00:00:00:00:50:df:6d:17
Serial Number (int): 247966969189621125414098052912924028183
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 53:36:f0:1d:13:68:e7:e7:2b:9c:9f:d6:a8:3d:36:00:e0:8d:72:ee
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): be:71:a0:4d:21:0b:74:81:f5:1b:c0:62:43:26:77:67:09:12:c5:12
Fingerprint (sha256): 2c:0c:7f:1a:a5:78:69:a6:99:58:a2:3d:65:bc:05:d9:09:7e:be:15:fc:1c:2d:d6:ca:71:a9:91:f2:2b:6e:1b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate srv404s.services.gc.ca

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for srv404s.services.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

srv404s.services.gc.ca
www13.rhdcc.gc.ca
www13.hrsdc.gc.ca
www19.rhdcc-hrsdc.gc.ca
yesidcs.gc.ca
www13.hrsdc-rhdcc.gc.ca
www13.rhdcc-hrsdc.gc.ca
employeurs.guichetemplois.gc.ca
employers.jobbank.gc.ca
www.guichetemplois.gc.ca
www.jobbank.gc.ca
seeker.jobbank.gc.ca
www.emploisetc.gc.ca
chercheur.guichetemplois.gc.ca
www.jobsetc.gc.ca
seekers.jobbank.gc.ca
chercheurs.guichetemplois.gc.ca
employer.jobbank.gc.ca
employeur.guichetemplois.gc.ca

Other certificates including the domain name services.gc.ca

(limited to 100 certificates)
srv137.services.gc.ca
srv115.services.gc.ca
srv129.services.gc.ca
srv132.services.gc.ca
ECDSA-srv253.services.gc.ca
srv100.services.gc.ca
srv404s.services.gc.ca
srv130.services.gc.ca
srv253.services.gc.ca
creative.services.gc.ca
srv252.services.gc.ca
srv130.services.gc.ca
srv115.services.gc.ca
srv253.services.gc.ca
srv270.hrdc-drhc.gc.ca
srv146.services.gc.ca
srv265.hrdc-drhc.gc.ca
mah-lb.services.gc.ca
cc.services.gc.ca
srv145.services.gc.ca
srv137.services.gc.ca
srv129.services.gc.ca
srv136.services.gc.ca
srv129.services.gc.ca
srv111.services.gc.ca
srv146.services.gc.ca
srv137.services.gc.ca
srv156.services.gc.ca
srv100.services.gc.ca
srv145.services.gc.ca
creative.services.gc.ca
srv253.services.gc.ca
*.hrdc-drhc.net
srv137.services.gc.ca
srv404s.services.gc.ca
srv270.hrdc-drhc.gc.ca
srv404s.services.gc.ca
srv404s.services.gc.ca
docupl-encaps.services.gc.ca
srv251.services.gc.ca
srv136.services.gc.ca
srv137.services.gc.ca
srv265.hrdc-drhc.gc.ca
srv253.services.gc.ca
srv115.services.gc.ca
templates.services.gc.ca
srv115.services.gc.ca
srv111.services.gc.ca
srv100.services.gc.ca
srv388.services.gc.ca
srv253.services.gc.ca
srv404s.services.gc.ca
benefitsfinder.services.gc.ca
srv146.services.gc.ca
srv114.services.gc.ca
srv263.services.gc.ca
srv253.services.gc.ca
srv404s.services.gc.ca
srv253.services.gc.ca
srv217.services.gc.ca
srv115.services.gc.ca
srv145.services.gc.ca
srv404s.services.gc.ca
srv138.services.gc.ca
srv115.services.gc.ca
srv133.services.gc.ca
creative.services.gc.ca
srv145.services.gc.ca
srv404s.services.gc.ca
srv132.services.gc.ca
srv133.services.gc.ca
srv129.services.gc.ca
srv136.services.gc.ca
srv122.services.gc.ca
srv135.services.gc.ca
srv404s.services.gc.ca
srv144.services.gc.ca
docupl-encaps.services.gc.ca
srv745.services.gc.ca
ssl-templates.services.gc.ca
srv130.services.gc.ca
srv129.services.gc.ca
srv136.services.gc.ca
noc.esdc.gc.ca
srv132.services.gc.ca
srv253.services.gc.ca
*.dev.services.gc.ca
srv251.services.gc.ca
srv132.services.gc.ca
srv132.services.gc.ca
srv136.services.gc.ca
creative.services.gc.ca
srv212.services.gc.ca
srv130.services.gc.ca
srv404s.services.gc.ca
srv602.services.gc.ca
srv130.services.gc.ca
srv144.services.gc.ca
srv156.services.gc.ca
srv111.services.gc.ca

Certificate

The complete raw certificate details for srv404s.services.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHNRKQp/Eme1PxfjKvum
4DkmIRp7eje/vU0SX+YuIOJABl6dR/IZpRlMD0gt59GOnNgrJ8ZQDjB0kIEHrHSt
syCjtcCLxhYIM860sGeM1/xNNsuzKZR2G+xJKvJodBlxOv7oy8l/aZr8EkSs4o1w
B9fLzKlC/vjcbtFvLq+4qk0xqXHHRCHiUfXTpI0o1FMLKdNj9WmzTbp+ImTkli/W
WUL+FDzXYikVBY5qklqdC4Pj71N+RrmooEWbnFmaTaedMOaCZKVjlcTwYVt0yiO3
DTW8QNoiYDn0TfOSpppv8pE+VDgSsFeUyr3DOf4pgkK42ikLkP3ZdpGcU6DQdUKa
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247966969189621125414098052912924028183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-14 19:11:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 19:41:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gatineau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Employment and Social Development Canada (ESDC)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRSDC-RHDCC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'srv404s.services.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23284713061859265278349416316654562460801816411099948558624227958504654738247486718900328827201248370863981892304310263514527614254003683996112521085560982859764848273116565212323309919089189004975496247289311372205167483891767406207026898481630292772478972705251372709440303487308001813621193112633402987513390874462301027444656849018338902052281063750114301217671933524683165498038900792326630003658180440973840785334703351602092078618266368076817666639093837590820609231517237652553239326690843352994985908365434125575448960220450461288460606117075135645423065669886984494578726442546233350917802063875740744719019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (466 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv404s.services.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www13.rhdcc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www13.hrsdc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www19.rhdcc-hrsdc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesidcs.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www13.hrsdc-rhdcc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www13.rhdcc-hrsdc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeurs.guichetemplois.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employers.jobbank.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guichetemplois.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobbank.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeker.jobbank.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emploisetc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chercheur.guichetemplois.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobsetc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seekers.jobbank.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chercheurs.guichetemplois.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employer.jobbank.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeur.guichetemplois.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5336f01d1368e7e72b9c9fd6a83d3600e08d72ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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