sva0736.ia.iafg.net

- Industrial Alliance Insurance and Financial Services Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6e:ac:e2:59:7e:4f:b9:09:f8:d6:ab:a0:f6:77:f0:42 was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrial Alliance Insurance and Financial Services Inc.

Organization: Industrial Alliance Insurance and Financial Services Inc.
State / Province: Quebec
Locality: Quebec
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:ac:e2:59:7e:4f:b9:09:f8:d6:ab:a0:f6:77:f0:42
Serial Number (int): 147112745510977115617557649489781059650
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fb:26:16:6d:f6:0c:42:6b:18:7f:31:ca:3d:d5:27:56:f5:c0:c4:fc
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 70:e3:90:6b:b9:40:9b:0b:c3:92:8b:a5:fc:64:ea:18:b5:98:c3:e6
Fingerprint (sha256): 2c:77:4d:c0:07:f3:c4:1a:fa:d8:08:66:c1:c5:d3:c1:3d:2a:8d:7a:a5:2c:8a:76:49:ca:ea:bd:c3:e8:35:1a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sva0736.ia.iafg.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sva0736.ia.iafg.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sva0736.ia.iafg.net
portail-02.wifi.ia.ca
ir-spon-portal-visit.ia.iafg.net
mesappareils.ia.iafg.net
mydevices.ia.iafg.net

Other certificates including the domain name iafg.net

(limited to 100 certificates)
securefonc.inalco.com
*.iagextp01-cae-ase-prod-01.ase.ia.iafg.net
webmail.inalco.com
sva0735.ia.iafg.net
iagomnip01-cac-aks-cw-01.aks.ia.iafg.net
authentification.intg.secureweb.ia.iafg.net
api.AutoriteCertification.ia.iafg.net
iafg.net
iafg.net
accp.login.service.dealers.ia.iafg.net
iagtelc01-cac-ise01.iafg.net
el-nxportal.accp.part.iafg.net
fs52.ia.ca
iafg.net
*.asmb.secureweb.ia.ca
test.ee-tokenapi.accp.webapp.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
expw-e.uc.iafg.net
MQ-Investments-PTS-BYM-02-PROD.iafg.net
expw-e.uc.iafg.net
fs52.ia.ca
proxy.intg.secureweb.ia.ca
*.intg.secureweb.ia.ca
dev.login.service.dealers.ia.iafg.net
*.prod.ia.iafg.net
el-nxportal-mpls-dr.prod.part.iafg.net
se.webgateway.accp.ia.iafg.net
*.intg.ia.iafg.net
*.intg.sitecore.ia.iafg.net
iafg.net
sva0890.ia.iafg.net
webmail.ia.ca
iaginfrp01.azure.ia.iafg.net
sva0736.ia.iafg.net
sva0767.ia.iafg.net
expw-e.uc.iafg.net
sva0735.ia.iafg.net
iafg.net
authentification.asmb.secureweb.ia.iafg.net
accp.login.service.dealers.ia.iafg.net
api.EntrustAutomation.ia.iafg.net
ref.dev.azure.ia.iafg.net
se.webgateway.ia.iafg.net
*.intg.secureweb.ia.ca
sva0737.ia.iafg.net
iagtelc01-cae-ise01.iafg.net
fs52.ia.ca
iaginfrp01-itsm.azure.ia.iafg.net
sva0736.ia.iafg.net
iagclienta01.azure.ia.iafg.net
hdwqc032.ia.iafg.net
fs52.ia.iafg.net
*.prod.ia.iafg.net
iagomnid01-cac-aks-cw-01.dev.aks.ia.iafg.net
ref.dev.azure.ia.iafg.net
*.dev.sitecore.ia.iafg.net
MQ-Investments-PTS-BYM-02-DEV.iafg.net
webmail.ia.ca
api.EntrustAutomation.ia.iafg.net
sva1391.ia.iafg.net
secureweb.fnct.api.ia.iafg.net
iafg.net
se.webgateway.intg.ia.iafg.net
iafg.net
*.sitecore.ia.iafg.net
ee-tokenapi.intg.webapp.ia.iafg.net
portail-accp-01.wifi.ia.ca
dev.login.service.dealers.ia.iafg.net
secureweb.accp.api.ia.iafg.net
se.webgateway.ia.iafg.net
jira.iaah.iafg.net
*.fnct.sitecore.ia.iafg.net
el-nxpace-mpls-dr.prod.part.iafg.net
iaginfrd01-itsm.azure.ia.iafg.net
sva1389.ia.iafg.net
sva0891.ia.iafg.net
secureweb.intg.api.ia.iafg.net
lidqca8.ia.iafg.net
ref.dev.azure.ia.iafg.net
secureweb.asmb.api.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
se.webgateway.intg.ia.iafg.net
accp.api.ia.iafg.net
*.accp.websct.ia.iafg.net
*.accp.ia.iafg.net
beyondinsight.intg.ia.iafg.net
*.prod.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
*.iagextp01-cac-ase-prod-01.ase.ia.iafg.net
iaginfra01.azure.ia.iafg.net
*.intg.websct.ia.iafg.net
webmail.ia.ca
iaginfrl01.azure.ia.iafg.net
expw-e.uc.iafg.net
iafg.net
*.accp.sitecore.ia.iafg.net
se.webgateway.intg.ia.iafg.net
iagcorpd01.azure.ia.iafg.net
sva1390.ia.iafg.net

Certificate

The complete raw certificate details for sva0736.ia.iafg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIQbqziWX5PuQn41qug9nfwQjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MjA4MjYxNzMzMDdaFw0yMzA5MjUxNzMzMDdaMIGRMQswCQYDVQQGEwJDQTEPMA0G
A1UECBMGUXVlYmVjMQ8wDQYDVQQHEwZRdWViZWMxQjBABgNVBAoTOUluZHVzdHJp
YWwgQWxsaWFuY2UgSW5zdXJhbmNlIGFuZCBGaW5hbmNpYWwgU2VydmljZXMgSW5j
LjEcMBoGA1UEAxMTc3ZhMDczNi5pYS5pYWZnLm5ldDCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBAN1d4sOwCwbUnY27olf5afllYBRyMOSzVEsJFN3lgILJ
1KO4HcWASavBppFZAhGyCUr/A28ArFE+SDPPypCf9+BHI7kIJiYNYXb5QK4zndci
OQhHXR62vB+rl8qbf2fgE5cOjgz6qEIiS0roLEwVKMNygifurNWYtuVDy3XxrvNR
a/ydBxw+IjxyjXoTy9IoM/0GlydPmp+2oULwi/niyEOd7+XZNt1chJ15IKuUy++S
TI519+Y/ABzyhF8yWH2j4/9oSXkShmCLOYGY7B5P980Ft0tcfQNP8FgqoQA8oHQg
/y4Q3WuUz2UHx5x9Uy5pgFgLtWWpFTFD5eHuP4t0zkftprxy/C82qouLvo0ohI9Q
qgDUrzIsdpGU1sRWOTve/BF1BGnGBnHW9xTin7fDWNTNHwug6ZkXsZGCjG7C4nD8
hOq6ZHfgkea4QFHcKmeMUlP6CMz0onV1a+MdQ/HGw/VhslMNDxqFw0EU35DqA/7X
9CRxFNtAjlb3TY2rvgQQytkzDTA/oAVjqGrlYreivcSkrQWwt03Fzd2hG38lKCyF
u535gogbfCZagrBS9PzK4be7nxN4t8igEEjQaxq8bBCKKcTzIYfBPCNbumYqPwvS
nBaH2scZcRlgw3vrCVCEHk7Ky+xtz5xrJAB95INQonV2hLJJWW9YwaXliRKgHq5R
AgMBAAGjggIPMIICCzAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT7JhZt9gxCaxh/
Mco91SdW9cDE/DAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzBoBggr
BgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0
MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1
Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9s
ZXZlbDFrLmNybDCBiQYDVR0RBIGBMH+CE3N2YTA3MzYuaWEuaWFmZy5uZXSCFXBv
cnRhaWwtMDIud2lmaS5pYS5jYYIgaXItc3Bvbi1wb3J0YWwtdmlzaXQuaWEuaWFm
Zy5uZXSCGG1lc2FwcGFyZWlscy5pYS5pYWZnLm5ldIIVbXlkZXZpY2VzLmlhLmlh
ZmcubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwTAYDVR0gBEUwQzA3BgpghkgBhvpsCgEFMCkwJwYIKwYBBQUHAgEWG2h0
dHBzOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAL+5Sjo7frNUHRYj1+Pt8WVJEPGe
mufQAdeCaWtGSIUV1Y/aG2mxDWoQW3fq25YxXR7jvEOj42CfbLtumHSBMwEPyhUG
FqXZTk2TZHXqW8A00Klx1JoFB5+X8Q0NUHgsN2sJoJS3ADb7xvrJQHqvHCn8qGuM
ffKmDoqp3ULtOYlc2CJeVUw4slRFqNI138TQL0BPNGY1Ope2dN9cCiJo03P4u9iw
CKIhZhUxIWt1/ulnUFApu4oizls6jAcISW7EO1e/xZKgMa7G0PLYK/8h+EqG8qmT
deBuvQQZwKuKxWonz44BjUUrey+37LL9LSfWvy2cy7vonwIgp4CliFJxF/w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147112745510977115617557649489781059650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 17:33:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 17:33:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sva0736.ia.iafg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903097513410361458996289058230981117423571575567309424495870805308429290792720552162502655803694574544601652471844319559474747942322333133034552376673580955671948108098421350195488147826724925482131782256097556553483216463053214906869359208422547906773510299176753984581451906644064725559319750965371095678412006735067403942862787653568682721021286743285937883918175831452268139907606165844386813970793647992958218232363825689637178393986006046610878531078296667422513997879833615959185062542082406724880045185446590718163501680726768778884497919345410557548514864330533096192598499887522325178985948666334145515049001915431377339747127036869393881363810595668557483676250534091065504943063432055990523153618861053026257112310923991813011191352354747362998081595294820203729388182369893552914341716291809978451357747548077862797518417000811793058675805364405901372788864205397201560653691231128000795598067558761409900868617053382873899991839949802480017294886733577308318251958662585083902133323451085102462766918794422173572039920356592080423382246569120851261744666992031911118883345638791192295624397564034231257838085103487445735042799189970468026802823445146406634581735567161460813311124278165389793507004785549876799240842833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb26166df60c426b187f31ca3dd52756f5c0c4fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sva0736.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail-02.wifi.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-spon-portal-visit.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesappareils.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydevices.ia.iafg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bfb94a3a3b7eb3541d1623d7e3edf1654910f19e9ae7d001d782696b46488515d58fda1b69b10d6a105b77eadb96315d1ee3bc43a3e3609f6cbb6e98748133010fca150616a5d94e4d936475ea5bc034d0a971d49a05079f97f10d0d50782c376b09a094b70036fbc6fac9407aaf1c29fca86b8c7df2a60e8aa9dd42ed39895cd8225e554c38b25445a8d235dfc4d02f404f3466353a97b674df5c0a2268d373f8bbd8b008a221661531216b75fee967505029bb8a22ce5b3a8c0708496ec43b57bfc592a031aec6d0f2d82bff21f84a86f2a99375e06ebd0419c0ab8ac56a27cf8e018d452b7b2fb7ecb2fd2d27d6bf2d9ccbbbe89f0220a780a588527117fc