eservices.bcsc.bc.ca

- British Columbia Securities Commission -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:22:ff:a8 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

British Columbia Securities Commission

Organization: British Columbia Securities Commission
State / Province: British Columbia
Locality: Vancouver
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:22:ff:a8
Serial Number (int): 1277362088
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 9a:08:d9:84:32:e4:87:bb:d0:02:c6:7d:f8:e1:b5:b0:cf:11:b7:49
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): cb:7f:5b:cd:01:67:3c:2d:22:4f:19:bb:c7:7e:b5:5f:9c:12:52:f1
Fingerprint (sha256): 69:64:a6:2a:47:7e:9b:3e:e0:b0:0d:31:65:5f:57:02:f1:81:53:27:89:67:cd:e2:22:51:00:9a:3a:07:12:40

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate eservices.bcsc.bc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eservices.bcsc.bc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eservices.bcsc.bc.ca

Other certificates including the domain name bcsc.bc.ca

(limited to 100 certificates)
pcuimp02i.bcscnet.ca
si.qa.bcsc.bc.ca
www.bcsc.bc.ca
uat.bcsc.bc.ca
ereports.bcsc.bc.ca
qaewebservices.bcsc.bc.ca
qaeservices.bcsc.bc.ca
nqaereports.bcsc.bc.ca
qasedarplus.bcsc.bc.ca
qaereports.bcsc.bc.ca
nuateservices.bcsc.bc.ca
gateway.dev.bcsc.bc.ca
webmail.bcsc.bc.ca
dev.bcsc.bc.ca
webfile.bcsc.bc.ca
deveservices.bcsc.bc.ca
webmail.bcsc.bc.ca
eservices.bcsc.bc.ca
cd.uat.bcsc.bc.ca
uatewebservices.bcsc.bc.ca
ewebservices.bcsc.bc.ca
nqaewebservices.bcsc.bc.ca
prodsedarplus.bcsc.bc.ca
webvdidr.bcsc.bc.ca
ndev.bcsc.bc.ca
webmail.bcsc.bc.ca
*.bcsc.bc.ca
cd.qa.bcsc.bc.ca
ereports.bcsc.bc.ca
uatereports.bcsc.bc.ca
gateway.bcsc.bc.ca
deveservices.bcsc.bc.ca
qaeservices.bcsc.bc.ca
dev.bcsc.bc.ca
connect.bcsc.bc.ca
webmail.bcsc.bc.ca
webfile.bcsc.bc.ca
uatereports.bcsc.bc.ca
qaereports.bcsc.bc.ca
nqa.bcsc.bc.ca
eservices.bcsc.bc.ca
lucerne2008.bcsc.bc.ca
connect.bcsc.bc.ca
eservices.bcsc.bc.ca
dapp01e.bcsc.bc.ca
pcuimp02i.bcscnet.ca
webmail.bcsc.bc.ca
qaereports.bcsc.bc.ca
eservices.bcsc.bc.ca
devEservices.bcsc.bc.ca
qaewebservices.bcsc.bc.ca
devPlanning10.bcsc.bc.ca
ndevereports.bcsc.bc.ca
new.bcsc.bc.ca
ndeveservices.bcsc.bc.ca
devsedarplus.bcsc.bc.ca
nuat.bcsc.bc.ca
devereports.bcsc.bc.ca
www.bcsc.bc.ca
eservices.bcsc.bc.ca
qa.bcsc.bc.ca
awseg.bcsc.bc.ca
qaewebservices.bcsc.bc.ca
gateway.uat.bcsc.bc.ca
uatewebservices.bcsc.bc.ca
surveys.bcsc.bc.ca
eservices.bcsc.bc.ca
planning10.bcsc.bc.ca
*.bcsc.bc.ca
oliver2008.bcsc.bc.ca
qaeservices.bcsc.bc.ca
webmail.bcsc.bc.ca
nuatwebservices.bcsc.bc.ca
ProdTableau.bcsc.bc.ca
si.bcsc.bc.ca
devereports.bcsc.bc.ca
connect.bcsc.bc.ca
drp.bcsc.bc.ca
webmail.bcsc.bc.ca
cm.uat.bcsc.bc.ca
www.bcsc.bc.ca
devewebservices.bcsc.bc.ca
webfile.bcsc.bc.ca
ewebservices.bcsc.bc.ca
eservices.bcsc.bc.ca
bcsc.bc.ca
nqaeservices.bcsc.bc.ca
gateway.qa.bcsc.bc.ca
eservices.bcsc.bc.ca
ndevewebservices.bcsc.bc.ca
webfile.bcsc.bc.ca
eservices.bcsc.bc.ca
uateservices.bcsc.bc.ca
bcscadobesync.bcsc.bc.ca
cm.dev.bcsc.bc.ca
maintenance.bcsc.bc.ca
nuatereports.bcsc.bc.ca
nconnect.bcsc.bc.ca
ndrconnect.bcsc.bc.ca
*.bcsc.bc.ca

Certificate

The complete raw certificate details for eservices.bcsc.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIETCL/qDANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xNDA1MDgyMjAxMzlaFw0xNTA1MDEx
MTQxNTVaMIGMMQswCQYDVQQGEwJDQTEZMBcGA1UECBMQQnJpdGlzaCBDb2x1bWJp
YTESMBAGA1UEBxMJVmFuY291dmVyMS8wLQYDVQQKEyZCcml0aXNoIENvbHVtYmlh
IFNlY3VyaXRpZXMgQ29tbWlzc2lvbjEdMBsGA1UEAxMUZXNlcnZpY2VzLmJjc2Mu
YmMuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBIwB2CQtVf9+
UbRvoYxKGHsFDutkXHOxjHJ08kZ/W0MaPKEsEu8ydi2ZDk72/wxbNlcDnoREEJZN
jdMHJgfSj2Byr/ibHjHGvxIvT7GsabxO2BiMmxuvq/iuKTxYv5A22uN3IWQtMwZP
TJniU+39HVkN+MH6FpVlX9Xr7yTYt7KWIBcizKvsE9Wat1nqzCXoe9r643VeQNNT
HmJiZm7mHfTyHt1G/hCeTCU1Ey94K6uhz11ONaZMZmPoPtpiCAvizyRQyI+bjLB+
dxrss9mM/BuRBhlygQj1ZoBFIBh0jvzKZpUR8Bl9Eiz4d8IsfGc76KNnnUTngHtB
rKPF530FAgMBAAGjggGDMIIBfzALBgNVHQ8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50
cnVzdC5uZXQvbGV2ZWwxYy5jcmwwZAYIKwYBBQUHAQEEWDBWMCMGCCsGAQUFBzAB
hhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAvBggrBgEFBQcwAoYjaHR0cDovL2Fp
YS5lbnRydXN0Lm5ldC8yMDQ4LWwxYy5jZXIwSgYDVR0gBEMwQTA1BgkqhkiG9n0H
SwIwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYG
Z4EMAQICMB8GA1UdEQQYMBaCFGVzZXJ2aWNlcy5iY3NjLmJjLmNhMB8GA1UdIwQY
MBaAFB7xq4kG+EkPATN37hR67hl8kyhNMB0GA1UdDgQWBBSaCNmEMuSHu9ACxn34
4bWwzxG3STAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBBQUAA4IBAQAvnyBUXiqeqwwM
3WWav1ReW4K2i0qpCTq+NnHTXTPcE/zSxLEAt9kOqhNnL0EWSKJROkzyMhi18IJS
UCGyssaj+mN7dCbV9pGnA/oV1UCcPMbWcSkrhXoKApDcUF+g0d8O05lnz2p8U9nx
hsnCatINlS+3q721Vj+la1apnUPdR8MFv9nJUC1SUxyRwzLW0UsbpUXXw+MJ/KYY
uxaZlfKBtnxYkKr2K9TBQBKgn7zuRKVdcDUnSjVLqfpEBOqrhYV7/zvHlvuDmE/y
u3vwoqKswEar7d3Xohji/nNKr2y5J3C4FmEEyNt0Bvjcb/zpOuDJfdYRz4H6RgSj
zJI0+Tqb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQSMAdgkLVX/flG0b6GM
Shh7BQ7rZFxzsYxydPJGf1tDGjyhLBLvMnYtmQ5O9v8MWzZXA56ERBCWTY3TByYH
0o9gcq/4mx4xxr8SL0+xrGm8TtgYjJsbr6v4rik8WL+QNtrjdyFkLTMGT0yZ4lPt
/R1ZDfjB+haVZV/V6+8k2LeyliAXIsyr7BPVmrdZ6swl6Hva+uN1XkDTUx5iYmZu
5h308h7dRv4QnkwlNRMveCuroc9dTjWmTGZj6D7aYggL4s8kUMiPm4ywfnca7LPZ
jPwbkQYZcoEI9WaARSAYdI78ymaVEfAZfRIs+HfCLHxnO+ijZ51E54B7Qayjxed9
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277362088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-08 22:01:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-01 11:41:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia Securities Commission'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eservices.bcsc.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22346422140498109076632721717541364996338949919213822468481064216037330974573818624589056878268982880341363287768731365320730878581503931609913373000890382578510294823471554679492674173168059323540123491354697540858058368712005451279502413157546973676726035289796709975885995854905968742133299691686383928477082556667088269409857844474237168028811428510260009465400679828910690961122198012470939016704387145287634871895495755327333210789263977313307757977455100685445900435263474955040132841307824799248767034723143933728862556037065158470928869064098898295555720667489554879547239798173591889366429308038039632051461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a08d98432e487bbd002c67df8e1b5b0cf11b749
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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