lap-dmz-p01.hc-sc.gc.ca

- Health Canada (Department of Health) -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number a6:aa:fd:e7:6d:6b:cb:66:38:95:09:e3:cf:be:33 was issued on by Entrust, Inc..

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Health Canada (Department of Health)

Organization: Health Canada (Department of Health)
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a6:aa:fd:e7:6d:6b:cb:66:38:95:09:e3:cf:be:33
Serial Number (int): 865389404497837507522765120806567475
Serial Number lenght: 120 bits, 15 octets

SubjectKeyId: 38:cd:96:33:3e:cf:e9:da:9f:60:9f:b9:fd:25:60:b3:3e:58:cc:83
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 02:e9:cb:ae:21:f8:02:34:64:43:82:44:86:06:99:ad:75:10:7e:67
Fingerprint (sha256): 5e:e9:5f:43:b1:92:3c:53:57:f0:93:9a:b6:8f:f9:c9:fe:e8:09:62:42:7b:5c:51:c6:79:aa:2b:6e:d9:6f:7d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate lap-dmz-p01.hc-sc.gc.ca

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lap-dmz-p01.hc-sc.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lap-dmz-p01.hc-sc.gc.ca
www.lap-dmz-p01.hc-sc.gc.ca
chemicalsubstanceschimiques.gc.ca
www.chemicalsubstanceschimiques.gc.ca
chemicalsubstances.gc.ca
www.chemicalsubstances.gc.ca
cost-illness.canada.ca
cout-maladie.canada.ca
ebic-femc.phac-aspc.gc.ca
www.ebic-femc.phac-aspc.gc.ca
substanceschimiques.gc.ca
www.substanceschimiques.gc.ca

Other certificates including the domain name hc-sc.gc.ca

(limited to 100 certificates)
training.mtrs-sctrm.hc-sc.gc.ca
HCQCK1AWVDCT001.tqa.hc-sc.gc.ca
ers-ser.hc-sc.gc.ca
HCQCK1AwvAST063.hc-sc.gc.ca
*.uat.hc-sc.gc.ca
ers-auth-ser-lb.hc-sc.gc.ca
h2o.hc-sc.gc.ca
biosecurity-portal.hc-sc.gc.ca
cgnw-01.hc-sc.gc.ca
sdx-edp.hc-sc.gc.ca
wasext-prd-1.hc-sc.gc.ca
eprs-serp.hc-sc.gc.ca
hc4ecc6.hc-sc.gc.ca
hconk2ewvasp001.hc-sc.gc.ca
mtrs-sctrm.hc-sc.gc.ca
PTH-PROXY.hc-sc.gc.ca
HCONK1VWVDCP002.ad.hc-sc.gc.ca
istopxrm.hc-sc.gc.ca
utils-test.hc-sc.gc.ca
gateway-passerelle.preprod.hc-sc.gc.ca
nihb-atl-fax.hc-sc.gc.ca
int-services1.hc-sc.gc.ca
Inotes.hc-sc.gc.ca
SAD-TEM-DV1.hc-sc.gc.ca
HCONK1AwvAST058.hc-sc.gc.ca
int-services3.dev.hc-sc.gc.ca
eprs-serp.hc-sc.gc.ca
sad-pt2-devap1.hc-sc.gc.ca
cloud-vpn.hc-sc.gc.ca
www.mtrs-sctrm.hc-sc.gc.ca
international-health-commitments.canada.ca
training.mtrs-sctrm.hc-sc.gc.ca
sap-cms.hc-sc.gc.ca
HCQCK1AWVDCT002.tqa.hc-sc.gc.ca
training.mtrs-sctrm.hc-sc.gc.ca
dev.mg-dsol.mapgears.com
cgnw-01.hc-sc.gc.ca
int-services1.preprod.hc-sc.gc.ca
sgpp-dt.hc-sc.gc.ca
ocs-bsc.hc-sc.gc.ca
int-services1.uat.hc-sc.gc.ca
sdx-edp.hc-sc.gc.ca
ctls-sscdl.hc-sc.gc.ca
PTH-PROXY-TRAIN.hc-sc.gc.ca
webprod4.hc-sc.gc.ca
*.hc-sc.gc.ca
aero-oitc.phac-aspc.gc.ca
app80.hc-sc.gc.ca
ers-auth-ser.hc-sc.gc.ca
keycloak.hc-sc.gc.ca
lap-dmz-p01.hc-sc.gc.ca
lap-dmz-p01.hc-sc.gc.ca
www.reclassification.hc-sc.gc.ca
sad-pth-qaap1.hc-sc.gc.ca
*.preprod.hc-sc.gc.ca
sad-pth-catap1.hc-sc.gc.ca
gateway-passerelle.uat.hc-sc.gc.ca
nnhpd-pla-dlmm-dpsnso.hc-sc.gc.ca
biosecurity-portal.hc-sc.gc.ca
pub-tom-mono.hc-sc.gc.ca
ocs-bsc.hc-sc.gc.ca
mobile.hc-sc.gc.ca
aids.gc.ca
h2o.hc-sc.gc.ca
www.CNF-CFG-classification-FCEN-GAC.hc-sc.gc.ca
dstsia-sspdai.hc-sc.gc.ca
CTXADC-HC-MCDC.HC-SC.GC.CA
collaboration.hc-sc.gc.ca
SAD-TEM-DV1.tqa.hc-sc.gc.ca
sgpp-dt.hc-sc.gc.ca
inotes.hc-sc.gc.ca
trn-csims-sgici.hc-sc.gc.ca
hc5ecc6.hc-sc.gc.ca
dev.mg-dsol.mapgears.com
fnihis-sispni.hc-sc.gc.ca
biosecurity-portal.hc-sc.gc.ca
uvupdatertest.hc-sc.gc.ca
ers-test-ser.hc-sc.gc.ca
www.CNF-CFG-classification-FCEN-GAC.hc-sc.gc.ca
sec2.hc-sc.gc.ca
HCONK1VWVDCP005.ad.hc-sc.gc.ca
tem01.hc-sc.gc.ca
dev.mg-dsol.mapgears.com
utils-test.hc-sc.gc.ca
lap-dmz-p01.hc-sc.gc.ca
WAS7-SEXT-IHS.hc-sc.gc.ca
pr-rdb.hc-sc.gc.ca
www.reclassification.hc-sc.gc.ca
mfcsg01.hc-sc.gc.ca
ers-auth-ser-lb.hc-sc.gc.ca
sinpappsas-02.hc-sc.gc.ca
nihb-mb-faxfinder.hc-sc.gc.ca
www.gcdisclosure-divulgationsc.hc-sc.gc.ca
cvp-pcv.hc-sc.gc.ca
int-services2.dev.hc-sc.gc.ca
DSTSIA-SSPDAI.hc-sc.gc.ca
www.fptgn-gnfpt.hc-sc.gc.ca
github.hc-sc.gc.ca
portaildgpsa.hc-sc.gc.ca
weboffice.hc-sc.gc.ca

Certificate

The complete raw certificate details for lap-dmz-p01.hc-sc.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIJzCCBw+gAwIBAgIQAKaq/edta8tmOJUJ48++MzANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MTEwMTMxNzQ4MzdaFw0yMjExMTIxNzQ4MzdaMIGBMQswCQYDVQQGEwJDQTEQMA4G
A1UECBMHT250YXJpbzEPMA0GA1UEBxMGT3R0YXdhMS0wKwYDVQQKEyRIZWFsdGgg
Q2FuYWRhIChEZXBhcnRtZW50IG9mIEhlYWx0aCkxIDAeBgNVBAMTF2xhcC1kbXot
cDAxLmhjLXNjLmdjLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
vVqJZIgyl6k6pQj/yR9R8DPDJnJdjMhMALdxiUObuT3LNVNI2FEQJAtwzDjG9b0L
Puj/KTVZm7jUj5GVkyqgf4gIsG50s0Cy1lGnwhKBojK+gZ2kEEX7F4o/dYMUgjkK
7PtOfSqxnx5AXoAn5TzYkgTaET7+uwlhQqAsLMtJWS3LFWLDsNf8b1GEOr/ZHClG
hDFtCIRu7opWNiQSXeGJ4LXuwmxnXtCqTdcpbPmJk5+ah6L5/WB/GbKj6kdAwnd1
3ETWGMte6n3aFndEKlcFFhmA8A5D4HDox8f2QjeWtzvaTyMiQl0ckd/MF8ZoqW/U
DFoM5EybAa2P9xZYHS6iHwIDAQABo4IEXjCCBFowDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUOM2WMz7P6dqfYJ+5/SVgsz5YzIMwHwYDVR0jBBgwFoAUgqJwdN28Uz/P
e9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8v
b2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0
Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9j
cmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwggFpBgNVHREEggFgMIIBXIIXbGFw
LWRtei1wMDEuaGMtc2MuZ2MuY2GCG3d3dy5sYXAtZG16LXAwMS5oYy1zYy5nYy5j
YYIhY2hlbWljYWxzdWJzdGFuY2VzY2hpbWlxdWVzLmdjLmNhgiV3d3cuY2hlbWlj
YWxzdWJzdGFuY2VzY2hpbWlxdWVzLmdjLmNhghhjaGVtaWNhbHN1YnN0YW5jZXMu
Z2MuY2GCHHd3dy5jaGVtaWNhbHN1YnN0YW5jZXMuZ2MuY2GCFmNvc3QtaWxsbmVz
cy5jYW5hZGEuY2GCFmNvdXQtbWFsYWRpZS5jYW5hZGEuY2GCGWViaWMtZmVtYy5w
aGFjLWFzcGMuZ2MuY2GCHXd3dy5lYmljLWZlbWMucGhhYy1hc3BjLmdjLmNhghlz
dWJzdGFuY2VzY2hpbWlxdWVzLmdjLmNhgh13d3cuc3Vic3RhbmNlc2NoaW1pcXVl
cy5nYy5jYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMEwGA1UdIARFMEMwNwYKYIZIAYb6bAoBBTApMCcGCCsGAQUFBwIBFhto
dHRwczovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMIIBfwYKKwYBBAHW
eQIEAgSCAW8EggFrAWkAdwBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ
3QAAAXx6xTruAAAEAwBIMEYCIQCdKiP7/tBw/0qCeTI/OWWeipETL/mYqqsC3Os8
tK8IbQIhAL0l4zezzCNVZlSJsnN7apdiuzrZrjkf5TbcvXCcQveoAHYA36Veq2iC
Tx9sre64X04+WurNohKkal6OOxLAIERcKnMAAAF8esU6zQAABAMARzBFAiBQ/nhm
FknEmi8A/MzBwqzzhirfg6LnJtf00qfMbf3ViQIhAJXKmZRxtrcHLz58O6EM1rvp
Mr12qd8Mux1Vf6ljSsi/AHYARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+
bUcAAAF8esU8SAAABAMARzBFAiAul7z3dKfna1W6lrPD/ZgueQWJC9gILme5XO9m
GDYhRwIhAN8JO5z/TCqr2AsVTm4XMdirMeiQZKccfbZHHnJN+0DOMA0GCSqGSIb3
DQEBCwUAA4IBAQCYoPxqXrVGhGnMqXZ3SHQ7/hRHEnuFiOYzf4OfsHgC3CvNyvb8
s4aJEQL865nzqtO1sVseNSzILhN/G/M7flWxE5MKyRlE9xquJBNSFTwfIvdJvEAn
FQGF3s4qQXPIV6qeyNpX361wKw1YPiifHZj+EvpNgZ6kohJ/cjAhBIwgB1aG8k1a
20n22+t1swzAGdXRcYtD73cvL2nKOnP3lbqxM3nDo1uEmjluklkHJwWfzeIywBtD
un7MG20b/5SiqRprmrSx8HpXUqgoAsb9tcw5E4oZEPj/vu6yEHb9MzwQBNp4n1wL
qm6dqzl9bAosGnW2/GIB5A7tmtMAjnx2JLo1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVqJZIgyl6k6pQj/yR9R
8DPDJnJdjMhMALdxiUObuT3LNVNI2FEQJAtwzDjG9b0LPuj/KTVZm7jUj5GVkyqg
f4gIsG50s0Cy1lGnwhKBojK+gZ2kEEX7F4o/dYMUgjkK7PtOfSqxnx5AXoAn5TzY
kgTaET7+uwlhQqAsLMtJWS3LFWLDsNf8b1GEOr/ZHClGhDFtCIRu7opWNiQSXeGJ
4LXuwmxnXtCqTdcpbPmJk5+ah6L5/WB/GbKj6kdAwnd13ETWGMte6n3aFndEKlcF
FhmA8A5D4HDox8f2QjeWtzvaTyMiQl0ckd/MF8ZoqW/UDFoM5EybAa2P9xZYHS6i
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 865389404497837507522765120806567475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 17:48:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-12 17:48:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Health Canada (Department of Health)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lap-dmz-p01.hc-sc.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23903684944499173143405405982778864174155913067122095061566061942757047899487450874794354145116381914472475792063330479160769479939566197046125064444301977871457085192655230491083670090700116538939344192718350790285167310634021383053542177927455036453540572922572435843946322914380423012240150223290381924273105688956465783243871035551933865756325103704958908854909763446147634109938819766252177513292778194668137200940903155871724932070880929970356889031209859788118440801722060234159074779735677053029665740149833055087684243321302225872257110396457983102368689061392084368945476681915263829759911133842652514918943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38cd96333ecfe9da9f609fb9fd2560b33e58cc83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (352 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lap-dmz-p01.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lap-dmz-p01.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemicalsubstanceschimiques.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemicalsubstanceschimiques.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemicalsubstances.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemicalsubstances.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cost-illness.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cout-maladie.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebic-femc.phac-aspc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebic-femc.phac-aspc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substanceschimiques.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.substanceschimiques.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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