ircc-oem-npe.apps.ci.gc.ca
- Dept of Citizenship and Immigration Canada -
Issued by Entrust Certification Authority - L1M
About this certificate
This digital certificate with serial number bb:b6:fd:00:93:63:e6:f1:00:00:00:00:54:cc:f4:7f was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Dept of Citizenship and Immigration Canada
Company registration number:
1994-06-23
Organization: Dept of Citizenship and Immigration Canada
Organization: Dept of Citizenship and Immigration Canada
State / Province:
Ontario
Locality: Ottawa
Country: CA
Locality: Ottawa
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): bb:b6:fd:00:93:63:e6:f1:00:00:00:00:54:cc:f4:7fSerial Number (int): 249515764735277401423857684433580389503
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: df:83:ab:54:b8:12:dc:cd:38:66:57:51:3a:ec:f6:cd:d4:42:40:d5
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a
Fingerprint (sha1): 7b:fc:80:5a:7e:b1:01:01:66:59:21:10:6f:ad:5b:c9:71:61:ad:9d
Fingerprint (sha256): 33:ee:8d:6f:80:18:e8:ce:1c:40:5e:69:9b:00:ba:fb:9b:ff:25:0d:0c:68:8f:8a:57:d8:97:9f:69:e7:fb:b6
Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1m.crl
Check the revocation status for certificate ircc-oem-npe.apps.ci.gc.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ircc-oem-npe.apps.ci.gc.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ircc-oem-npe.apps.ci.gc.ca
Other certificates including the domain name ci.gc.ca
(limited to 100 certificates)
gcms-smf.apps.ci.gc.ca
cic.gc.ca
NJES1S6308.apps.ci.gc.ca
gcs-ssc-i.apps.ci.gc.ca
extern.cic.gc.ca
*.apps.ci.gc.ca
gcms-prd-a-eai.apps.ci.gc.ca
onlineservices-training.ci.gc.ca
alm-int-tfs.apps.ci.gc.ca
gcs-ssc-isys.apps.ci.gc.ca
gcdocs2.ci.gc.ca
gcms-smgc.apps.ci.gc.ca
cicoemprd.apps.ci.gc.ca
ldaps-edc.apps.ci.gc.ca
irccsbxoms1.apps.ci.gc.ca
*.ci.gc.ca
irccsbxoms1.apps.ci.gc.ca
gcs-ssc-itrn.apps.ci.gc.ca
gcs-ssc-dev.apps.ci.gc.ca
service-stg.ci.gc.ca
ircc-oem.apps.ci.gc.ca
psoft89-gchrms.ci.gc.ca
onlineservices-development2.ci.gc.ca
ccps-stcc-trn.cic.gc.ca
gcms-smf-edc-prd.apps.ci.gc.ca
gcmsmgtaom1.apps.ci.gc.ca
ircc-cognos.ci.gc.ca
extern.cic.gc.ca
cicedw.ci.gc.ca
gcms-smf.apps.ci.gc.ca
eservices1.ci.gc.ca
extern.cic.gc.ca
NSEP1S5119.ci.gc.ca
gcdocs2-svc.ci.gc.ca
ircc-oem-npe.apps.ci.gc.ca
NJES1S6309.apps.ci.gc.ca
tempo-ste.apps.ci.gc.ca
tempo-pef.cic.gc.ca
eservices1.ci.gc.ca
*.ci.gc.ca
gcms-staging.apps.ci.gc.ca
ircc-cognossnd.ci.gc.ca
ircc-cognosint.ci.gc.ca
pss-fg-dev.apps.ci.gc.ca
onlineservices-dev.ci.gc.ca
ircc-oem-npe.apps.ci.gc.ca
gcmsmgtoms1.apps.ci.gc.ca
cicedwdev.ci.gc.ca
gcmssystestmel.apps.ci.gc.ca
psoft-hrms-gc89test-v854.ci.gc.ca
extern.cic.gc.ca
eservices3.ci.gc.ca
gcmssa.apps.ci.gc.ca
extern.cic.gc.ca
gcdocsmobile.apps.ci.gc.ca
pss-ds-dev.apps.ci.gc.ca
ircc-cognostrg.ci.gc.ca
tempo-trn.cic.gc.ca
ircc-cognosdev.ci.gc.ca
ircc-oem.apps.ci.gc.ca
tempo-pte.cic.gc.ca
cicedwsnd.ci.gc.ca
eservices2.ci.gc.ca
tempo-ste.cic.gc.ca
gcs-ssc-itrn.apps.ci.gc.ca
onlineservices-development2.ci.gc.ca
adssdev1.ci.gc.ca
tempo-stg.apps.ci.gc.ca
NJES1S1106.CI.GC.CA
gcmstgmel.apps.ci.gc.ca
gcdocs2.ci.gc.ca
*.ci.gc.ca
ircc-oem.apps.ci.gc.ca
cicoemnpe.apps.ci.gc.ca
gcs-ssc-sys.apps.ci.gc.ca
gcms-staging.apps.ci.gc.ca
mailrelay.ci.gc.ca
gcs-ssc-dev.apps.ci.gc.ca
extern.cic.gc.ca
gcmsprdmel.apps.ci.gc.ca
onlineservices-dev.ci.gc.ca
*.apps.ci.gc.ca
cic.gc.ca
gcmsprdmel.apps.ci.gc.ca
eservices5.ci.gc.ca
ccps-stcc-int.cic.gc.ca
extern.cic.gc.ca
iprms.ci.gc.ca
ccps-stcc.cic.gc.ca
gcms-pdf.apps.ci.gc.ca
gcs-ssc-stg.apps.ci.gc.ca
NJES1S1106.CI.GC.CA
extern.cic.gc.ca
gcs-ssc-isys.apps.ci.gc.ca
gcs-ssc-stg.apps.ci.gc.ca
psoft-hrms-gc89test.ci.gc.ca
gcs-ssc-isys.apps.ci.gc.ca
ccps-stcc-dev.cic.gc.ca
gcms-smgc.apps.ci.gc.ca
ircc-oem-sbx.apps.ci.gc.ca
cic.gc.ca
NJES1S6308.apps.ci.gc.ca
gcs-ssc-i.apps.ci.gc.ca
extern.cic.gc.ca
*.apps.ci.gc.ca
gcms-prd-a-eai.apps.ci.gc.ca
onlineservices-training.ci.gc.ca
alm-int-tfs.apps.ci.gc.ca
gcs-ssc-isys.apps.ci.gc.ca
gcdocs2.ci.gc.ca
gcms-smgc.apps.ci.gc.ca
cicoemprd.apps.ci.gc.ca
ldaps-edc.apps.ci.gc.ca
irccsbxoms1.apps.ci.gc.ca
*.ci.gc.ca
irccsbxoms1.apps.ci.gc.ca
gcs-ssc-itrn.apps.ci.gc.ca
gcs-ssc-dev.apps.ci.gc.ca
service-stg.ci.gc.ca
ircc-oem.apps.ci.gc.ca
psoft89-gchrms.ci.gc.ca
onlineservices-development2.ci.gc.ca
ccps-stcc-trn.cic.gc.ca
gcms-smf-edc-prd.apps.ci.gc.ca
gcmsmgtaom1.apps.ci.gc.ca
ircc-cognos.ci.gc.ca
extern.cic.gc.ca
cicedw.ci.gc.ca
gcms-smf.apps.ci.gc.ca
eservices1.ci.gc.ca
extern.cic.gc.ca
NSEP1S5119.ci.gc.ca
gcdocs2-svc.ci.gc.ca
ircc-oem-npe.apps.ci.gc.ca
NJES1S6309.apps.ci.gc.ca
tempo-ste.apps.ci.gc.ca
tempo-pef.cic.gc.ca
eservices1.ci.gc.ca
*.ci.gc.ca
gcms-staging.apps.ci.gc.ca
ircc-cognossnd.ci.gc.ca
ircc-cognosint.ci.gc.ca
pss-fg-dev.apps.ci.gc.ca
onlineservices-dev.ci.gc.ca
ircc-oem-npe.apps.ci.gc.ca
gcmsmgtoms1.apps.ci.gc.ca
cicedwdev.ci.gc.ca
gcmssystestmel.apps.ci.gc.ca
psoft-hrms-gc89test-v854.ci.gc.ca
extern.cic.gc.ca
eservices3.ci.gc.ca
gcmssa.apps.ci.gc.ca
extern.cic.gc.ca
gcdocsmobile.apps.ci.gc.ca
pss-ds-dev.apps.ci.gc.ca
ircc-cognostrg.ci.gc.ca
tempo-trn.cic.gc.ca
ircc-cognosdev.ci.gc.ca
ircc-oem.apps.ci.gc.ca
tempo-pte.cic.gc.ca
cicedwsnd.ci.gc.ca
eservices2.ci.gc.ca
tempo-ste.cic.gc.ca
gcs-ssc-itrn.apps.ci.gc.ca
onlineservices-development2.ci.gc.ca
adssdev1.ci.gc.ca
tempo-stg.apps.ci.gc.ca
NJES1S1106.CI.GC.CA
gcmstgmel.apps.ci.gc.ca
gcdocs2.ci.gc.ca
*.ci.gc.ca
ircc-oem.apps.ci.gc.ca
cicoemnpe.apps.ci.gc.ca
gcs-ssc-sys.apps.ci.gc.ca
gcms-staging.apps.ci.gc.ca
mailrelay.ci.gc.ca
gcs-ssc-dev.apps.ci.gc.ca
extern.cic.gc.ca
gcmsprdmel.apps.ci.gc.ca
onlineservices-dev.ci.gc.ca
*.apps.ci.gc.ca
cic.gc.ca
gcmsprdmel.apps.ci.gc.ca
eservices5.ci.gc.ca
ccps-stcc-int.cic.gc.ca
extern.cic.gc.ca
iprms.ci.gc.ca
ccps-stcc.cic.gc.ca
gcms-pdf.apps.ci.gc.ca
gcs-ssc-stg.apps.ci.gc.ca
NJES1S1106.CI.GC.CA
extern.cic.gc.ca
gcs-ssc-isys.apps.ci.gc.ca
gcs-ssc-stg.apps.ci.gc.ca
psoft-hrms-gc89test.ci.gc.ca
gcs-ssc-isys.apps.ci.gc.ca
ccps-stcc-dev.cic.gc.ca
gcms-smgc.apps.ci.gc.ca
ircc-oem-sbx.apps.ci.gc.ca
Certificate
The complete raw certificate details for ircc-oem-npe.apps.ci.gc.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIRALu2/QCTY+bxAAAAAFTM9H8wDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxNCBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMU0wHhcN MTYwOTMwMTc1MjU2WhcNMTgwOTE5MTgyMjU0WjCB0DELMAkGA1UEBhMCQ0ExEDAO BgNVBAgTB09udGFyaW8xDzANBgNVBAcTBk90dGF3YTETMBEGCysGAQQBgjc8AgED EwJDQTEzMDEGA1UEChMqRGVwdCBvZiBDaXRpemVuc2hpcCBhbmQgSW1taWdyYXRp b24gQ2FuYWRhMRowGAYDVQQPExFHb3Zlcm5tZW50IEVudGl0eTETMBEGA1UEBRMK MTk5NC0wNi0yMzEjMCEGA1UEAxMaaXJjYy1vZW0tbnBlLmFwcHMuY2kuZ2MuY2Ew ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yIdm1y1bMcM+KxBKM5jA nXIkV5ZcWjqdURIORZvlCQyDBMaYfKC66m3vzDGjzAiYuq2BqLQdq/PX/8Vfd7Z3 q1WX2afVUIpPEEkgo0x6iAepO/HnYasW6zFkHyu47zYRlzr1FhfnYPj8Jk9x94l3 62uVXyfsXGv2cF06GDLDCoIMsNfabNTuOsFvxv3jDtHmmGeLVujHRcFh5xaOWwjp TcDLMPecVlZRk4hatyY2nTaJBlWn2Dfl97FSMJxYLFzBwwfA9OXUhImoYqjm8lp8 c6LTr8k0cHL/jTMnj7xmiCS6f6KVdQdgxp6BcI6iofRZZXYLrOiq5EFqVFxZBfiX AgMBAAGjggGlMIIBoTATBgorBgEEAdZ5AgQDAQH/BAIFADAlBgNVHREEHjAcghpp cmNjLW9lbS1ucGUuYXBwcy5jaS5nYy5jYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEF BQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6 Ly9haWEuZW50cnVzdC5uZXQvbDFtLWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCig JqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMW0uY3JsMEoGA1UdIARD MEEwNgYKYIZIAYb6bAoBAjAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1 c3QubmV0L3JwYTAHBgVngQwBATAfBgNVHSMEGDAWgBTD99C1KjCtrw2RIXA5VN28 iXDHOjAdBgNVHQ4EFgQU34OrVLgS3M04ZldROuz2zdRCQNUwCQYDVR0TBAIwADAN BgkqhkiG9w0BAQsFAAOCAQEAbj398j9w0kQQ/6AGHXBx8KhfiABJlp6eMBT2XP9D vTpM9QPl9Ydaeli5/K0OfhQhguq+eDgOG6Gw25Pr65vtp8SvqviVkab9nrVIKuK8 eQMV/KvmqQdUwUrbGoo8kX86aGWT/k0UF57AoNIDEMT/yiaY1TDl+GgMfn6zGbdj hxiNqeDVZApOF3IXUBXtyVzHQW7ByeOYzqMzJhhX+MYJo0wTsjtpYOQS8Wkzr+OR Iwpx5ieZzste6sq9mkuNQU+/ohZD2JfIi/ky7HD/hJr8Hr+rxlAcInSfORsCJYXS 8KYT0/uESAjA2aS/4J1vv7TRMz8UlDFOjdMyY7T58FGH9g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMiHZtctWzHDPisQSjOY wJ1yJFeWXFo6nVESDkWb5QkMgwTGmHyguupt78wxo8wImLqtgai0Havz1//FX3e2 d6tVl9mn1VCKTxBJIKNMeogHqTvx52GrFusxZB8ruO82EZc69RYX52D4/CZPcfeJ d+trlV8n7Fxr9nBdOhgywwqCDLDX2mzU7jrBb8b94w7R5phni1box0XBYecWjlsI 6U3AyzD3nFZWUZOIWrcmNp02iQZVp9g35fexUjCcWCxcwcMHwPTl1ISJqGKo5vJa fHOi06/JNHBy/40zJ4+8Zogkun+ilXUHYMaegXCOoqH0WWV2C6zoquRBalRcWQX4 lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 249515764735277401423857684433580389503 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-30 17:52:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 18:22:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dept of Citizenship and Immigration Canada' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1994-06-23' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ircc-oem-npe.apps.ci.gc.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23831685826081040649389810111943248171913058772228159070466016778737149208043930524790582401275187362079657530153100868099556454038610671154009165201436705353352187387227781378401047667802291422372581783157156976137733953632357659806275194756767801372933665313706300231673508666622352711379843225213129353740435670661043807169675191451764427083493081726804300762686982175460682723342031093262667783524745510990986522085440438978926404257282618976591085336074414324520049767725849639006608051687652188742919821241323904782105506289302010287935954371462104865725070642938728679198503410099852192714723183580113807997079 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ircc-oem-npe.apps.ci.gc.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) df83ab54b812dccd386657513aecf6cdd44240d5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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