expw-e.uc.iafg.net

- Industrial Alliance Insurance and Financial Services -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number f8:61:05:1e:e7:97:54:b3:00:00:00:00:50:ef:4a:31 was issued on by Entrust, Inc..

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Industrial Alliance Insurance and Financial Services

Organization: Industrial Alliance Insurance and Financial Services
State / Province: Quebec
Locality: Quebec
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f8:61:05:1e:e7:97:54:b3:00:00:00:00:50:ef:4a:31
Serial Number (int): 330152299610503893494638126762405349937
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1f:f4:4e:c2:c3:78:e2:47:a9:c9:27:92:15:c5:e3:a0:62:32:1b:3f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 01:cf:c7:57:a1:7f:7b:7f:6c:6e:93:96:99:b9:2f:6d:95:06:97:d0
Fingerprint (sha256): 2d:75:a1:19:7b:ce:06:3b:11:8f:c1:80:54:d5:27:71:4e:a9:c2:fd:17:2f:29:43:4a:2d:78:e5:f9:38:99:02

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate expw-e.uc.iafg.net

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expw-e.uc.iafg.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

expw-e.uc.iafg.net
expw-e2.ia.ca
expw-e1.ia.ca
expw-ec.ia.ca
expw-e1.meeting.ia.ca
expw-e2.meeting.ia.ca
ia.ca
meeting.ia.ca
cisco-uc.ia.ca
sva1424.ia.iafg.net
sva1425.ia.iafg.net
uc.iafg.net

Other certificates including the domain name iafg.net

(limited to 100 certificates)
securefonc.inalco.com
*.iagextp01-cae-ase-prod-01.ase.ia.iafg.net
webmail.inalco.com
sva0735.ia.iafg.net
iagomnip01-cac-aks-cw-01.aks.ia.iafg.net
authentification.intg.secureweb.ia.iafg.net
api.AutoriteCertification.ia.iafg.net
iafg.net
iafg.net
accp.login.service.dealers.ia.iafg.net
iagtelc01-cac-ise01.iafg.net
el-nxportal.accp.part.iafg.net
fs52.ia.ca
iafg.net
*.asmb.secureweb.ia.ca
test.ee-tokenapi.accp.webapp.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
expw-e.uc.iafg.net
MQ-Investments-PTS-BYM-02-PROD.iafg.net
expw-e.uc.iafg.net
fs52.ia.ca
proxy.intg.secureweb.ia.ca
*.intg.secureweb.ia.ca
dev.login.service.dealers.ia.iafg.net
*.prod.ia.iafg.net
el-nxportal-mpls-dr.prod.part.iafg.net
se.webgateway.accp.ia.iafg.net
*.intg.ia.iafg.net
*.intg.sitecore.ia.iafg.net
iafg.net
sva0890.ia.iafg.net
webmail.ia.ca
iaginfrp01.azure.ia.iafg.net
sva0736.ia.iafg.net
sva0767.ia.iafg.net
expw-e.uc.iafg.net
sva0735.ia.iafg.net
iafg.net
authentification.asmb.secureweb.ia.iafg.net
accp.login.service.dealers.ia.iafg.net
api.EntrustAutomation.ia.iafg.net
ref.dev.azure.ia.iafg.net
se.webgateway.ia.iafg.net
*.intg.secureweb.ia.ca
sva0737.ia.iafg.net
iagtelc01-cae-ise01.iafg.net
fs52.ia.ca
iaginfrp01-itsm.azure.ia.iafg.net
sva0736.ia.iafg.net
iagclienta01.azure.ia.iafg.net
hdwqc032.ia.iafg.net
fs52.ia.iafg.net
*.prod.ia.iafg.net
iagomnid01-cac-aks-cw-01.dev.aks.ia.iafg.net
ref.dev.azure.ia.iafg.net
*.dev.sitecore.ia.iafg.net
MQ-Investments-PTS-BYM-02-DEV.iafg.net
webmail.ia.ca
api.EntrustAutomation.ia.iafg.net
sva1391.ia.iafg.net
secureweb.fnct.api.ia.iafg.net
iafg.net
se.webgateway.intg.ia.iafg.net
iafg.net
*.sitecore.ia.iafg.net
ee-tokenapi.intg.webapp.ia.iafg.net
portail-accp-01.wifi.ia.ca
dev.login.service.dealers.ia.iafg.net
secureweb.accp.api.ia.iafg.net
se.webgateway.ia.iafg.net
jira.iaah.iafg.net
*.fnct.sitecore.ia.iafg.net
el-nxpace-mpls-dr.prod.part.iafg.net
iaginfrd01-itsm.azure.ia.iafg.net
sva1389.ia.iafg.net
sva0891.ia.iafg.net
secureweb.intg.api.ia.iafg.net
lidqca8.ia.iafg.net
ref.dev.azure.ia.iafg.net
secureweb.asmb.api.ia.iafg.net
ee-tokenapi.accp.webapp.ia.iafg.net
se.webgateway.intg.ia.iafg.net
accp.api.ia.iafg.net
*.accp.websct.ia.iafg.net
*.accp.ia.iafg.net
beyondinsight.intg.ia.iafg.net
*.prod.ia.iafg.net
imageserver.secureweb.accp.ia.iafg.net
*.iagextp01-cac-ase-prod-01.ase.ia.iafg.net
iaginfra01.azure.ia.iafg.net
*.intg.websct.ia.iafg.net
webmail.ia.ca
iaginfrl01.azure.ia.iafg.net
expw-e.uc.iafg.net
iafg.net
*.accp.sitecore.ia.iafg.net
se.webgateway.intg.ia.iafg.net
iagcorpd01.azure.ia.iafg.net
sva1390.ia.iafg.net

Certificate

The complete raw certificate details for expw-e.uc.iafg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJEjCCB/qgAwIBAgIRAPhhBR7nl1SzAAAAAFDvSjEwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwMzIyMTc0ODA5WhcNMjEwMTE1MTgxODA3WjCBizELMAkGA1UEBhMCQ0ExDzAN
BgNVBAgTBlF1ZWJlYzEPMA0GA1UEBxMGUXVlYmVjMT0wOwYDVQQKEzRJbmR1c3Ry
aWFsIEFsbGlhbmNlIEluc3VyYW5jZSBhbmQgRmluYW5jaWFsIFNlcnZpY2VzMRsw
GQYDVQQDExJleHB3LWUudWMuaWFmZy5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4IC
DwAwggIKAoICAQCllCmX31CUZU5VhVxa9kXjZmZedKNQundMH7LlbTwDyBIYVMK9
zSNlxZ3SEmlN25xIsL63ADUSZ/XYu0KhMCGpGtIsAynbcAW6PEMhscZqNecjvXf+
QfjLzeP1aw2ql5JyhWAazJOC2m33Qe00k3N0Rl8o+EdYvdJy6GKsvIgxi7v4FPRf
+IMXrMmrd+V15eloFgPbmdPO6v+rOx6yHKX6kMiXAmX0AK/R62BVqE/4jDPIsyGW
1mIXgnF2gqsOSRb6QdFMO5bfAVfEyOFYyPjVgYnNS0HPbGOJxoI/aMNGhIWnR5GM
jthLsHITnH3FAZBxNKOEtDQeO2pdBXh1VfALNaqkYSWU7Gde759YD5pzKlzSFFGr
2pjHyB7C4ALCfTzfyvXDFjGOM9ZkCgI9RVFfLrxvtT1fG5f+ZntgwTvRycbDhAm+
AzcXwJxYqbmJ8lFs8KF/yZ3Vjx1/kb9vEHpPUl4e8hu4OUHhsVNirTAMzq3/mmJ4
Y6fG0rRtlp5uYtW9aF9gZl6Y0OfTjoZhKISRKRXHnPopKlz3iTKk7MrOVdo4YU/F
0/Fp9Vpm0GKjKVJ2UiRODP6MFhP6i9I2e/lyXJ76isaSMB2GWegvz8LX80zbm0xN
TdBAlKeqgNUeVlBY3jw92bC+BgtT5r4Impi2toeT56M1TAZY22zD7WbSyQIDAQAB
o4IEPjCCBDowgdcGA1UdEQSBzzCBzIISZXhwdy1lLnVjLmlhZmcubmV0gg1leHB3
LWUyLmlhLmNhgg1leHB3LWUxLmlhLmNhgg1leHB3LWVjLmlhLmNhghVleHB3LWUx
Lm1lZXRpbmcuaWEuY2GCFWV4cHctZTIubWVldGluZy5pYS5jYYIFaWEuY2GCDW1l
ZXRpbmcuaWEuY2GCDmNpc2NvLXVjLmlhLmNhghNzdmExNDI0LmlhLmlhZmcubmV0
ghNzdmExNDI1LmlhLmlhZmcubmV0ggt1Yy5pYWZnLm5ldDCCAfYGCisGAQQB1nkC
BAIEggHmBIIB4gHgAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8A
AAFppp/kWgAABAMARzBFAiEA2em4snu+xaixlW12qmYzzXp6Nk7iSc6kIQDSE8Aw
M98CIAtWYyJ4uNFtDaaPq9zAx+5u2BNrraMK7jfcN/2j4mEDAHcAVYHUwhaQNgFK
6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFppp/kgwAABAMASDBGAiEAnl0AGWzH
W5FZZCHXjjlPSlheomxhgAmpHhGyOUL1AWUCIQDbI9pnyqSQ2p9hw4zOKOXXQ1PA
5uxYI+A1m88MCPoVHQB2AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDd
AAABaaaf5JkAAAQDAEcwRQIhAOts3PGwDfZl2QL6jItmq6MST1GmmJeIbDry2i4/
bNT4AiBn5+QsHlzwZ0/cPF4/W3PQcec9UJAHEVE07e+erdngPgB1APZclC/RdzAi
FFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABaaaf5KIAAAQDAEYwRAIgGq7yAh2x
MBqlo/BxfRdTHpM4bxPptwOmmQzPTcmeFbMCIGtyhatuUN3bGWsQx/fBjNgqtf76
CtdEV04gLzKcGye0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0
Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggr
BgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgG
CCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5u
ZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWlu
MjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4E
FgQUH/ROwsN44kepySeSFcXjoGIyGz8wCQYDVR0TBAIwADANBgkqhkiG9w0BAQsF
AAOCAQEAU2wBIRgR2JGPXdq7c1938uOsPxSJxqpk6UkIVyNqjqb70gZG9WESt5CQ
Vc3p9AVQY6YiVZM+DKQPoL63JnzSialHKXlVciKCUHNn0IRdVUnL744mkBy9SeS6
Z28ptFcLvzFlSiZPIvLKCl2c+cVaZakE+GY8LYWB9kl+qBtWpBmywe/Et6LZ4hHZ
0fWPuTSHN2J4oyLg85wrAiIbwMSBlIwTdvfC+8SGK8mKb4+63PeVDQ+pbvE9/XRq
J0bYOcP6eXNgExbgyEfgw6xDFL1pZ2P91kRWDwefuyEVMBgwAJtAWwwOHwskQI+3
Rp8luy4ibX1BcDVcG7hAskxamExtHQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApZQpl99QlGVOVYVcWvZF
42ZmXnSjULp3TB+y5W08A8gSGFTCvc0jZcWd0hJpTducSLC+twA1Emf12LtCoTAh
qRrSLAMp23AFujxDIbHGajXnI713/kH4y83j9WsNqpeScoVgGsyTgtpt90HtNJNz
dEZfKPhHWL3ScuhirLyIMYu7+BT0X/iDF6zJq3fldeXpaBYD25nTzur/qzseshyl
+pDIlwJl9ACv0etgVahP+IwzyLMhltZiF4JxdoKrDkkW+kHRTDuW3wFXxMjhWMj4
1YGJzUtBz2xjicaCP2jDRoSFp0eRjI7YS7ByE5x9xQGQcTSjhLQ0HjtqXQV4dVXw
CzWqpGEllOxnXu+fWA+acypc0hRRq9qYx8gewuACwn0838r1wxYxjjPWZAoCPUVR
Xy68b7U9XxuX/mZ7YME70cnGw4QJvgM3F8CcWKm5ifJRbPChf8md1Y8df5G/bxB6
T1JeHvIbuDlB4bFTYq0wDM6t/5pieGOnxtK0bZaebmLVvWhfYGZemNDn046GYSiE
kSkVx5z6KSpc94kypOzKzlXaOGFPxdPxafVaZtBioylSdlIkTgz+jBYT+ovSNnv5
clye+orGkjAdhlnoL8/C1/NM25tMTU3QQJSnqoDVHlZQWN48PdmwvgYLU+a+CJqY
traHk+ejNUwGWNtsw+1m0skCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330152299610503893494638126762405349937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 17:48:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-15 18:18:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'expw-e.uc.iafg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 675502404647849925954458969203873334150998630613536722118526890169773158072485524897114383659613727661253209161439752654059191113697388061365404593386193150497342215372019920023962583980472543409647277941149265310283960783956241578591072364335819765604060060149134824711747840980533594960577364896543688036391955842414969203607028758305886771314150864434971641821962600972035603363657934520747814933875620447780920169432159662602049170894529381073732928123098410514050812238525489271350220942019379752003123834572317054630981672698909793972470368265821172080265949876334734989866403320655554711224002254607056684419943361357039737953336018878855109556691056715262413535367993526656879822529730221591753878705726714323990707751962926040945777851705057252881227913173642548989320784263816779440730753229231428430200162369966994977782584631549999799046770798523186016936680071308184494979968032282221068816515256112904060494245753434569223901624476224995498358280625485268297832628202129497717611071540274131918042958758556492024980646435862081291738869333199898214436629115188785616027246517820487499710994931109977013298876099111207375675724738156875070836390568965716464112359960446180303168336397552389769909997180940211949524144841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e.uc.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e2.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e1.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-ec.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e1.meeting.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expw-e2.meeting.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeting.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisco-uc.ia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sva1424.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sva1425.ia.iafg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc.iafg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169a69fe45a0000040300473045022100d9e9b8b27bbec5a8b1956d76aa6633cd7a7a364ee249cea42100d213c03033df02200b56632278b8d16d0da68fabdcc0c7ee6ed8136bada30aee37dc37fda3e261030077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000169a69fe48300000403004830460221009e5d00196cc75b91596421d78e394f4a585ea26c618009a91e11b23942f50165022100db23da67caa490da9f61c38cce28e5d74353c0e6ec5823e0359bcf0c08fa151d0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000169a69fe4990000040300473045022100eb6cdcf1b00df665d902fa8c8b66aba3124f51a69897886c3af2da2e3f6cd4f8022067e7e42c1e5cf0674fdc3c5e3f5b73d071e73d509007115134edef9eadd9e03e007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000169a69fe4a2000004030046304402201aaef2021db1301aa5a3f0717d17531e93386f13e9b703a6990ccf4dc99e15b302206b7285ab6e50dddb196b10c7f7c18cd82ab5fefa0ad744574e202f329c1b27b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ff44ec2c378e247a9c9279215c5e3a062321b3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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