rm4rz.international.gc.ca

- Global Affairs Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 34:47:18:55:8c:09:98:eb:00:00:00:00:50:f7:de:01 was issued on by Entrust, Inc..

With 124 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Global Affairs Canada

Organization: Global Affairs Canada
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:47:18:55:8c:09:98:eb:00:00:00:00:50:f7:de:01
Serial Number (int): 69489002413335403347237597352436424193
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 14:08:77:f9:a7:26:be:05:a4:d9:bf:5c:8c:7b:2a:6e:c6:92:05:ad
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 67:98:1f:c2:6b:31:38:69:43:49:c4:cf:17:e9:3b:f9:64:61:ba:6f
Fingerprint (sha256): 38:a2:41:e3:14:eb:c2:a5:ba:d3:ef:f1:94:4c:fd:fb:f0:48:c3:05:a2:39:e3:69:c9:10:4c:81:3a:f8:38:76

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate rm4rz.international.gc.ca

124

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rm4rz.international.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rm4rz.international.gc.ca
www.rm4rz.international.gc.ca
republiquedominicaine.gc.ca
www.republiquedominicaine.gc.ca
republiquetcheque.gc.ca
www.republiquetcheque.gc.ca
romania.gc.ca
www.romania.gc.ca
roumanie.gc.ca
www.roumanie.gc.ca
royaume-uni.gc.ca
www.royaume-uni.gc.ca
rse.gc.ca
www.rse.gc.ca
russia.gc.ca
www.russia.gc.ca
russie.gc.ca
www.russie.gc.ca
saintsiege.gc.ca
www.saintsiege.gc.ca
salvador.gc.ca
www.salvador.gc.ca
sanfrancisco.gc.ca
www.sanfrancisco.gc.ca
saudiarabia.gc.ca
www.saudiarabia.gc.ca
scholarships.gc.ca
www.scholarships.gc.ca
seattle.gc.ca
www.seattle.gc.ca
senegal.gc.ca
www.senegal.gc.ca
serbia.gc.ca
www.serbia.gc.ca
serbie.gc.ca
www.serbie.gc.ca
seso.international.gc.ca
www.seso.international.gc.ca
singapore.gc.ca
www.singapore.gc.ca
singapour.gc.ca
www.singapour.gc.ca
softwoodlumber.gc.ca
www.softwoodlumber.gc.ca
soudan.gc.ca
www.soudan.gc.ca
soudan-soudandusud.gc.ca
www.soudan-soudandusud.gc.ca
southafrica.gc.ca
www.southafrica.gc.ca
spain.gc.ca
www.spain.gc.ca
srilanka.gc.ca
www.srilanka.gc.ca
sudan.gc.ca
www.sudan.gc.ca
sudan-southsudan.gc.ca
www.sudan-southsudan.gc.ca
suede.gc.ca
www.suede.gc.ca
suisse.gc.ca
www.suisse.gc.ca
surveys-sondages.international.gc.ca
www.surveys-sondages.international.gc.ca
sweden.gc.ca
www.sweden.gc.ca
switzerland.gc.ca
www.switzerland.gc.ca
syria.gc.ca
www.syria.gc.ca
syrie.gc.ca
www.syrie.gc.ca
tanzania.gc.ca
www.tanzania.gc.ca
tanzanie.gc.ca
www.tanzanie.gc.ca
thailand.gc.ca
www.thailand.gc.ca
thailande.gc.ca
www.thailande.gc.ca
tradecommissioner.com
www.tradecommissioner.com
tradecommissioner.gc.ca
www.tradecommissioner.gc.ca
travel.gc.ca
www.travel.gc.ca
trinidadandtobago.gc.ca
www.trinidadandtobago.gc.ca
trinite-et-tobago.gc.ca
www.trinite-et-tobago.gc.ca
tunisia.gc.ca
www.tunisia.gc.ca
tunisie.gc.ca
www.tunisie.gc.ca
turkey.gc.ca
www.turkey.gc.ca
turquie.gc.ca
www.turquie.gc.ca
uae.gc.ca
www.uae.gc.ca
ukraine.gc.ca
www.ukraine.gc.ca
unitedkingdom.gc.ca
www.unitedkingdom.gc.ca
uruguay.gc.ca
www.uruguay.gc.ca
var.gc.ca
www.var.gc.ca
venezuela.gc.ca
www.venezuela.gc.ca
vietnam.gc.ca
www.vietnam.gc.ca
vivreapprendrereussir.gc.ca
www.vivreapprendrereussir.gc.ca
voyages.gc.ca
www.voyages.gc.ca
washington.gc.ca
www.washington.gc.ca
westbankandgaza.gc.ca
www.westbankandgaza.gc.ca
zimbabwe.gc.ca
www.zimbabwe.gc.ca
vivreapprendreetreussir.gc.ca
www.vivreapprendreetreussir.gc.ca

Other certificates including the domain name international.gc.ca

(limited to 100 certificates)
mailgateway.dev.international.gc.ca
sdcvpn01h.international.gc.ca
dalasvpn01h.international.gc.ca
www.listserv.international.gc.ca
data.international.gc.ca
eam-systest.sp.international.gc.ca
develang.international.gc.ca
develang.international.gc.ca
data.international.gc.ca
dev-travel.international.gc.ca
rm3hq.international.gc.ca
rm3hq.international.gc.ca
SP.international.gc.ca
signetweb.international.gc.ca
MXICOVPN01H.international.gc.ca
pilotasa01.international.gc.ca
piprod2.international.gc.ca
sdcvpn01h.international.gc.ca
goa-oma.international.gc.ca
w01.international.gc.ca
sl.media.international.gc.ca
elang.international.gc.ca
www.international.gc.ca
w03.international.gc.ca
guestportal11.international.gc.ca
w05.international.gc.ca
iec-eic.international.gc.ca
rm2dg.international.gc.ca
travel-smart.international.gc.ca
signetweb.international.gc.ca
SEOULVPN01H.international.gc.ca
dev-goa-oma.international.gc.ca
AEMDispatcher.international.gc.ca
appdemo.international.gc.ca
sdcvpn01h.international.gc.ca
DELHIVPN01H.international.gc.ca
staffing-les.international.gc.ca
rm3hq.international.gc.ca
SPOREVPN01H.international.gc.ca
w06.international.gc.ca
as-dev.international.gc.ca
guestportal.international.gc.ca
FS-QA.international.gc.ca
w05.international.gc.ca
listservdev.international.gc.ca
eam-dev.sp.international.gc.ca
TOKYOVPN01H.international.gc.ca
SP-QA.international.gc.ca
eam.sp.international.gc.ca
collab.international.gc.ca
tcse-ts15.international.gc.ca
travel-smart.international.gc.ca
CRCASVPN01.international.gc.ca
wcdev.international.gc.ca
seoulvpn01h.international.gc.ca
dev-goa-oma.international.gc.ca
wc.international.gc.ca
rm1ac.international.gc.ca
GANZUVPN01H.international.gc.ca
wifi-pilot.international.gc.ca
eam-dev.sp.international.gc.ca
evoswa.international.gc.ca
pi.international.gc.ca
rm2dg.international.gc.ca
pi.international.gc.ca
bilat.international.gc.ca
*.international.gc.ca
*.dev.cloud-nuage.international.gc.ca
intl-ts16.international.gc.ca
appdemo.international.gc.ca
wc.international.gc.ca
w05.international.gc.ca
signetweb.international.gc.ca
CNGNYVPN01H.international.gc.ca
elang.international.gc.ca
wifiauth1.d.r.dfait-maeci.gc.ca
tradefacts-donneescommerciales.international.gc.ca
mailgateway.international.gc.ca
rm4rz.international.gc.ca
www.listserv.dfait-maeci.gc.ca
signetweb.international.gc.ca
rm2dg.international.gc.ca
elang.international.gc.ca
kompass-iec-eic.international.gc.ca
www1.international.gc.ca
*.dev.cloud-nuage.international.gc.ca
SPOREVPN01H.international.gc.ca
dv05.international.gc.ca
tcsf-ts16.international.gc.ca
FS-DEV.international.gc.ca
www1.international.gc.ca
mailgateway.dev.international.gc.ca
wc.international.gc.ca
lbpvpn01h.international.gc.ca
develang.international.gc.ca
rm1ac.international.gc.ca
mailgateway.dev.international.gc.ca
wc.international.gc.ca
HQL-PMKWC02.p.dfait-maeci.gc.ca
ExchangeServer-QA.d.r.dfait-maeci.gc.ca

Certificate

The complete raw certificate details for rm4rz.international.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubSgtJe1CISF4Bk1QwEs
n8AhPAKhxpH3zo0ZhTalxCntOIRMH523mOaCmLSxOvjzdcmVVMOdEZEiJLCFEPO3
MFb3F2OXS/1vJGfug7/YbjKEf7IlNpzgMDaQomzEPQVqpY5Ajvf7W6wxPu/YTi9h
arTwgQAbidK1wRVqf0X2hCmX6yhJTroQSPZ9sUzEg0mKFAnBXpnAMBDYAuqjtnmN
jnO6xAaiBXDs45zE3ttY+oY7ZYYJqTpSwJDb+Z244vIcMQejgfYrQ/35rEiJFuFm
+fVOrk+OZFqwM7XxKKnJ7MxPNEJ9b/M4ywCzN8hQySBnXrhdhEKz51RFBmKz3z3M
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69489002413335403347237597352436424193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 17:50:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-27 18:20:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Affairs Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rm4rz.international.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23443157284735916050194906511554173575681215190418189770279122554632254967965258929209304711614192122394918877780504620901091117928257565024425671780642805021329689371385018991946889558124572895770330662613425382248192310274607963050726068430316508211043705737123460765485640205580735290018605376370554993544199032831901131528064619630256734756296325212080270910113658085532393031751027934230407446515654114311334478347567557394079375502708846692377922342950848400552955030388554405118718140580531926789526477775812701427272692675508919478151952532306710127689166300046921358195617418863740096616439033494712119839959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2502 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm4rz.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rm4rz.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republiquedominicaine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.republiquedominicaine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republiquetcheque.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.republiquetcheque.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romania.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romania.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roumanie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roumanie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaume-uni.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaume-uni.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintsiege.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintsiege.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salvador.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salvador.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfrancisco.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanfrancisco.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudiarabia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saudiarabia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarships.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scholarships.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattle.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattle.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senegal.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senegal.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serbia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serbia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serbie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serbie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seso.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seso.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singapore.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singapore.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singapour.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singapour.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softwoodlumber.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softwoodlumber.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soudan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soudan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soudan-soudandusud.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soudan-soudandusud.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southafrica.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southafrica.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spain.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spain.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srilanka.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srilanka.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sudan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudan-southsudan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sudan-southsudan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suede.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suede.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suisse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suisse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys-sondages.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surveys-sondages.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweden.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweden.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switzerland.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.switzerland.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syrie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syrie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanzania.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tanzania.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanzanie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tanzanie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailand.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thailand.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailande.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thailande.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradecommissioner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradecommissioner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradecommissioner.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradecommissioner.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinidadandtobago.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinidadandtobago.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinite-et-tobago.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trinite-et-tobago.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunisia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tunisia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunisie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tunisie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkey.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turkey.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turquie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turquie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uae.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uae.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukraine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukraine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedkingdom.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedkingdom.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uruguay.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uruguay.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'var.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.var.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venezuela.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venezuela.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnam.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnam.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivreapprendrereussir.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivreapprendrereussir.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyages.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voyages.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washington.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westbankandgaza.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westbankandgaza.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimbabwe.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zimbabwe.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivreapprendreetreussir.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivreapprendreetreussir.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							140877f9a726be05a4d9bf5c8c7b2a6ec69205ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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