rm1ac.international.gc.ca

- Global Affairs Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 21:3c:04:01:da:41:06:40:00:00:00:00:50:f5:1a:63 was issued on by Entrust, Inc..

With 143 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Global Affairs Canada

Organization: Global Affairs Canada
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 21:3c:04:01:da:41:06:40:00:00:00:00:50:f5:1a:63
Serial Number (int): 44176142948827232418602189966552668771
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 51:7d:7b:21:72:47:f5:12:6e:76:b5:a5:fb:87:79:d6:af:b2:48:86
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b3:f3:f8:8f:40:37:b2:01:f0:c7:23:22:80:7a:ee:72:4c:30:45:9a
Fingerprint (sha256): 48:a4:26:98:5d:5f:8f:38:4e:85:a5:f9:42:d5:e0:75:cd:63:3f:08:f0:21:10:cb:e1:b7:15:50:51:12:3b:7d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate rm1ac.international.gc.ca

143

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rm1ac.international.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rm1ac.international.gc.ca
afghanistan.gc.ca
www.afghanistan.gc.ca
afriquedusud.gc.ca
www.afriquedusud.gc.ca
alenaaujourdhui.ca
www.alenaaujourdhui.ca
alena-aujourdhui.org
www.alena-aujourdhui.org
alenaaupresent.ca
www.alenaaupresent.ca
algeria.gc.ca
www.algeria.gc.ca
algerie.gc.ca
www.algerie.gc.ca
allemagne.gc.ca
www.allemagne.gc.ca
arabiesaoudite.gc.ca
www.arabiesaoudite.gc.ca
argentina.gc.ca
www.argentina.gc.ca
argentine.gc.ca
www.argentine.gc.ca
atlanta.gc.ca
www.atlanta.gc.ca
australia.gc.ca
www.australia.gc.ca
australie.gc.ca
www.austria.gc.ca
austria.gc.ca
autriche.gc.ca
www.autriche.gc.ca
balticstates.gc.ca
www.balticstates.gc.ca
bangladesh.gc.ca
www.bangladesh.gc.ca
barbade.gc.ca
www.barbade.gc.ca
barbados.gc.ca
www.barbados.gc.ca
belgique.gc.ca
www.belgique.gc.ca
belgium.gc.ca
www.belgium.gc.ca
birmanie.gc.ca
www.birmanie.gc.ca
boisdoeuvre.gc.ca
www.boisdoeuvre.gc.ca
boston.gc.ca
www.boston.gc.ca
bourses.gc.ca
www.bourses.gc.ca
bourses-scholarships.gc.ca
www.bourses-scholarships.gc.ca
brasil.gc.ca
www.brasil.gc.ca
brazil.gc.ca
www.brazil.gc.ca
brunei.gc.ca
www.brunei.gc.ca
bsec.international.gc.ca
www.bsec.international.gc.ca
burma.gc.ca
www.burma.gc.ca
businesswomenintrade.gc.ca
www.businesswomenintrade.gc.ca
cambodge.gc.ca
www.cambodge.gc.ca
cambodia.gc.ca
www.cambodia.gc.ca
cameroon.gc.ca
www.cameroon.gc.ca
cameroun.gc.ca
www.cameroun.gc.ca
canadacourse.ca
www.canadacourse.ca
canadacourse.com
www.canadacourse.com
canada-eu.gc.ca
www.canada-eu.gc.ca
canadaexpo2020.ca
www.canadaexpo2020.ca
canadaexpo2020.com
www.canadaexpo2020.com
canada-ue.gc.ca
www.canada-ue.gc.ca
can-am.gc.ca
www.can-am.gc.ca
candoc.gc.ca
www.candoc.gc.ca
ccea-ccae.ca
www.ccea-ccae.ca
ccea-ccae.com
www.ccea-ccae.com
cfsi-icse.gc.ca
www.cfsi-icse.gc.ca
chicago.gc.ca
www.chicago.gc.ca
chile.gc.ca
www.chile.gc.ca
chili.gc.ca
www.chili.gc.ca
china.gc.ca
www.china.gc.ca
chine.gc.ca
www.chine.gc.ca
cisjordanieetgaza.gc.ca
www.cisjordanieetgaza.gc.ca
colombia.gc.ca
www.colombia.gc.ca
colombie.gc.ca
www.colombie.gc.ca
congo.gc.ca
www.congo.gc.ca
controlesalexportation.gc.ca
www.controlesalexportation.gc.ca
coree.gc.ca
www.coree.gc.ca
costarica.gc.ca
www.costarica.gc.ca
cotedivoire.gc.ca
www.cotedivoire.gc.ca
courscanada.ca
www.courscanada.ca
courscanada.com
www.courscanada.com
courscanadien.ca
www.courscanadien.ca
courscanadien.com
www.courscanadien.com
croatia.gc.ca
www.croatia.gc.ca
croatie.gc.ca
www.croatie.gc.ca
csr.gc.ca
www.csr.gc.ca
cuba.gc.ca
www.cuba.gc.ca
czechrepublic.gc.ca
www.czechrepublic.gc.ca
bresil.gc.ca
www.bresil.gc.ca
www.australie.gc.ca

Other certificates including the domain name international.gc.ca

(limited to 100 certificates)
mailgateway.dev.international.gc.ca
sdcvpn01h.international.gc.ca
dalasvpn01h.international.gc.ca
www.listserv.international.gc.ca
data.international.gc.ca
eam-systest.sp.international.gc.ca
develang.international.gc.ca
develang.international.gc.ca
data.international.gc.ca
dev-travel.international.gc.ca
rm3hq.international.gc.ca
rm3hq.international.gc.ca
SP.international.gc.ca
signetweb.international.gc.ca
MXICOVPN01H.international.gc.ca
pilotasa01.international.gc.ca
piprod2.international.gc.ca
sdcvpn01h.international.gc.ca
goa-oma.international.gc.ca
w01.international.gc.ca
sl.media.international.gc.ca
elang.international.gc.ca
www.international.gc.ca
w03.international.gc.ca
guestportal11.international.gc.ca
w05.international.gc.ca
iec-eic.international.gc.ca
rm2dg.international.gc.ca
travel-smart.international.gc.ca
signetweb.international.gc.ca
SEOULVPN01H.international.gc.ca
dev-goa-oma.international.gc.ca
AEMDispatcher.international.gc.ca
appdemo.international.gc.ca
sdcvpn01h.international.gc.ca
DELHIVPN01H.international.gc.ca
staffing-les.international.gc.ca
rm3hq.international.gc.ca
SPOREVPN01H.international.gc.ca
w06.international.gc.ca
as-dev.international.gc.ca
guestportal.international.gc.ca
FS-QA.international.gc.ca
w05.international.gc.ca
listservdev.international.gc.ca
eam-dev.sp.international.gc.ca
TOKYOVPN01H.international.gc.ca
SP-QA.international.gc.ca
eam.sp.international.gc.ca
collab.international.gc.ca
tcse-ts15.international.gc.ca
travel-smart.international.gc.ca
CRCASVPN01.international.gc.ca
wcdev.international.gc.ca
seoulvpn01h.international.gc.ca
dev-goa-oma.international.gc.ca
wc.international.gc.ca
rm1ac.international.gc.ca
GANZUVPN01H.international.gc.ca
wifi-pilot.international.gc.ca
eam-dev.sp.international.gc.ca
evoswa.international.gc.ca
pi.international.gc.ca
rm2dg.international.gc.ca
pi.international.gc.ca
bilat.international.gc.ca
*.international.gc.ca
*.dev.cloud-nuage.international.gc.ca
intl-ts16.international.gc.ca
appdemo.international.gc.ca
wc.international.gc.ca
w05.international.gc.ca
signetweb.international.gc.ca
CNGNYVPN01H.international.gc.ca
elang.international.gc.ca
wifiauth1.d.r.dfait-maeci.gc.ca
tradefacts-donneescommerciales.international.gc.ca
mailgateway.international.gc.ca
rm4rz.international.gc.ca
www.listserv.dfait-maeci.gc.ca
signetweb.international.gc.ca
rm2dg.international.gc.ca
elang.international.gc.ca
kompass-iec-eic.international.gc.ca
www1.international.gc.ca
*.dev.cloud-nuage.international.gc.ca
SPOREVPN01H.international.gc.ca
dv05.international.gc.ca
tcsf-ts16.international.gc.ca
FS-DEV.international.gc.ca
www1.international.gc.ca
mailgateway.dev.international.gc.ca
wc.international.gc.ca
lbpvpn01h.international.gc.ca
develang.international.gc.ca
rm1ac.international.gc.ca
mailgateway.dev.international.gc.ca
wc.international.gc.ca
HQL-PMKWC02.p.dfait-maeci.gc.ca
ExchangeServer-QA.d.r.dfait-maeci.gc.ca

Certificate

The complete raw certificate details for rm1ac.international.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LdwzzSAcPnSUEbkPCz+
5Z/eamnaxpPTWl9x3NJHVG7WrbGegxkjDWExLBORdFlw3jD1699TGk8RLRWjpD/4
J0NvBE/cEZje4tj0AKXEi/ByPMaod/RPqVGsAgRlmY0fxqJv3/bIyAhKrg0It0UG
odP1+3eqMbg05rllQz9JenXyId97R53x5ewECbiOeQHZ3NNXYs1TpVO3G9xRgdp0
SeoUoqXMp+h55QfYCatfuaTQTA2Ct9xJEQxQONjBMOD2kCKoI+G5I53oBz/B0GP0
+iJNY42A6J+GnkMlmJgO0bMXchQ7FE4wR+VufDjV8Jcb3Q9suBv5fHFmS3mz07Dg
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44176142948827232418602189966552668771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 16:44:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-07 17:14:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Affairs Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rm1ac.international.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29377744713823623318173176601059809288838276086960216136623230798612748026293867990497253880539302725935343478549187973178342864166149949958033529216872369716860395466875400094169830626220917231063033988432039603020295494610682891823249654181440975099678720990487649864718599920726916173128412118052222425253770979267631707499666190162567487528411736301569707777601271899877140095997288336202013721211876146193607914647180251974561344768594859657352266521067167512324317457668103720991504386821603803888102483515771532418748023974937626001730431148894174317309183182664871124611497253559755460209219805392162597691481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2723 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm1ac.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afghanistan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afghanistan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afriquedusud.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afriquedusud.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alenaaujourdhui.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alenaaujourdhui.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alena-aujourdhui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alena-aujourdhui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alenaaupresent.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alenaaupresent.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algeria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.algeria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algerie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.algerie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allemagne.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allemagne.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabiesaoudite.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arabiesaoudite.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentina.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.argentina.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argentine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.argentine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanta.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.austria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austria.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autriche.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autriche.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balticstates.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balticstates.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangladesh.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bangladesh.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbade.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbade.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbados.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbados.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgique.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belgique.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belgium.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belgium.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birmanie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birmanie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boisdoeuvre.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boisdoeuvre.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boston.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boston.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourses.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bourses.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourses-scholarships.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bourses-scholarships.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brasil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunei.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunei.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsec.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsec.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burma.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burma.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesswomenintrade.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesswomenintrade.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodge.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodge.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameroon.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cameroon.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameroun.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cameroun.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadacourse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadacourse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadacourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadacourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada-eu.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canada-eu.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaexpo2020.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadaexpo2020.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaexpo2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadaexpo2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada-ue.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canada-ue.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'can-am.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.can-am.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candoc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candoc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccea-ccae.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccea-ccae.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccea-ccae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccea-ccae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfsi-icse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfsi-icse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicago.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chile.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chile.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chili.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chili.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisjordanieetgaza.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisjordanieetgaza.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colombia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colombie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congo.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.congo.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlesalexportation.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.controlesalexportation.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coree.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coree.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costarica.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costarica.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotedivoire.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cotedivoire.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courscanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courscanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courscanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courscanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courscanadien.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courscanadien.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courscanadien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courscanadien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croatia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croatia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croatie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.croatie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csr.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuba.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuba.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechrepublic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.czechrepublic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bresil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bresil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australie.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							517d7b217247f5126e76b5a5fb8779d6afb24886
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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