science-libraries.canada.ca

- National Research Council Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 70:d5:f4:a1:4a:a4:87:84:7b:29:bf:cc:f8:ee:39:22 was issued on by Entrust, Inc..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

National Research Council Canada

Organization: National Research Council Canada
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:d5:f4:a1:4a:a4:87:84:7b:29:bf:cc:f8:ee:39:22
Serial Number (int): 149984456445556746378761756989243406626
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 11:e8:e8:9f:22:b9:4c:00:c0:7c:9c:d5:35:c5:54:ae:dd:26:6d:02
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): bf:f0:78:d9:30:fa:83:2b:04:fa:47:95:9b:5f:cc:15:ca:18:5a:0f
Fingerprint (sha256): 6d:a9:f7:8b:82:5a:38:b8:fb:09:94:87:10:6e:d5:06:fc:96:f5:b9:53:c8:0c:80:39:d8:8f:cc:f1:ba:22:97

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate science-libraries.canada.ca

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for science-libraries.canada.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

science-libraries.canada.ca
bibliotheques-scientifiques.canada.ca
fsl-bsf.scitech.gc.ca
bsf-fsl.scitech.gc.ca
scitech.gc.ca
fsl-bsf.nrc-cnrc.gc.ca
bsf-fsl.cnrc-nrc.gc.ca
nsl-bsn.nrc-cnrc.gc.ca
bsn-nsl.cnrc-nrc.gc.ca
nrc-publications.canada.ca
publications-cnrc.canada.ca
nparc.nrc-cnrc.gc.ca
nparc.cnrc-nrc.gc.ca
nrc-digital-repository.canada.ca
depot-numerique-cnrc.canada.ca
dr-dn.nrc-cnrc.gc.ca
dn-dr.cnrc-nrc.gc.ca
oai-pmh.nrc-cnrc.gc.ca
oai-pmh.cnrc-nrc.gc.ca
login-connexion.nrc-cnrc.gc.ca
connexion-login.cnrc-nrc.gc.ca
wae.nrc-cnrc.gc.ca
wae.cnrc-nrc.gc.ca

Other certificates including the domain name canada.ca

(limited to 100 certificates)
*.dev.tc.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
greenbuildingsfunding-financementbatimentsverts.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
administration-83-03.canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
bcd-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca

Certificate

The complete raw certificate details for science-libraries.canada.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKFTCCCP2gAwIBAgIQcNX0oUqkh4R7Kb/M+O45IjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MzAxMTcxMzE0MDJaFw0yNDAyMTcxMzEzNTlaMIGBMQswCQYDVQQGEwJDQTEQMA4G
A1UECBMHT250YXJpbzEPMA0GA1UEBxMGT3R0YXdhMSkwJwYDVQQKEyBOYXRpb25h
bCBSZXNlYXJjaCBDb3VuY2lsIENhbmFkYTEkMCIGA1UEAxMbc2NpZW5jZS1saWJy
YXJpZXMuY2FuYWRhLmNhMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
thFbsaJLNtO0cckBGzZcxZTz7EFJkpVvR06aiwlTUsh/RxGQiVNkf8O1jLFJ6B5i
LQek+Li/Mcx7xeRggt5+qtfHJa8yFUnqpZ2fQpr7mFhSWUdDDSpAWJASNdb8N9EA
DTKqGlK8iyFgzhYH04/FSMecl01zuuxG02oXVcOhxEzTdf3EG+c5rfJVlnMNtz7Q
to2e+xENfXZvKVsYYMTNdKOtGOLW45r+lr9Xtgy1n6tOG5eYyLOnWZyojkpwt244
q+g/gAr6so8wV0qcSYaGgZAKcZ/X84j+xU1v9GRZmUEbwxspw6TTL/ib5o69taWU
3ZumWac54qAGKLWTJcsK3popFOZagT+8EdZ8CfmVVCtjbgsIHkaFnE8cViM5877o
+gUcp+Nv7WaAGAz48SnWiVZU558ZXTyYuLii+GtV7O7f/UlYVoOilARQlVx3RxlV
z2qdWwsBfOTCtsTZXhb4lPo9J+5zV1IQ6tbFfbhWV6Cn+mbQPzBuM5pvA2EM9zMQ
sW8bra0ofIuh9j4U11KjMNBLlM3kcRO4G+PIYhAcsB0h4XE04FRW1EGQovBa6dam
k+GnyVN5VLhuNXWWfOuRbMxvmK3TLhUYmgbHNVCaDSyWpAhRJYXGX+gQK4YKqwoH
VHWJOw/DEImwYzSf+M/6ekfU3OLDiI6C+u5/NFcXhmsCAwEAAaOCBUwwggVIMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFBHo6J8iuUwAwHyc1TXFVK7dJm0CMB8GA1Ud
IwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MGgGCCsGAQUFBwEBBFwwWjAjBggr
BgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0
dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAzBgNVHR8ELDAq
MCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMIICWQYD
VR0RBIICUDCCAkyCG3NjaWVuY2UtbGlicmFyaWVzLmNhbmFkYS5jYYIlYmlibGlv
dGhlcXVlcy1zY2llbnRpZmlxdWVzLmNhbmFkYS5jYYIVZnNsLWJzZi5zY2l0ZWNo
LmdjLmNhghVic2YtZnNsLnNjaXRlY2guZ2MuY2GCDXNjaXRlY2guZ2MuY2GCFmZz
bC1ic2YubnJjLWNucmMuZ2MuY2GCFmJzZi1mc2wuY25yYy1ucmMuZ2MuY2GCFm5z
bC1ic24ubnJjLWNucmMuZ2MuY2GCFmJzbi1uc2wuY25yYy1ucmMuZ2MuY2GCGm5y
Yy1wdWJsaWNhdGlvbnMuY2FuYWRhLmNhghtwdWJsaWNhdGlvbnMtY25yYy5jYW5h
ZGEuY2GCFG5wYXJjLm5yYy1jbnJjLmdjLmNhghRucGFyYy5jbnJjLW5yYy5nYy5j
YYIgbnJjLWRpZ2l0YWwtcmVwb3NpdG9yeS5jYW5hZGEuY2GCHmRlcG90LW51bWVy
aXF1ZS1jbnJjLmNhbmFkYS5jYYIUZHItZG4ubnJjLWNucmMuZ2MuY2GCFGRuLWRy
LmNucmMtbnJjLmdjLmNhghZvYWktcG1oLm5yYy1jbnJjLmdjLmNhghZvYWktcG1o
LmNucmMtbnJjLmdjLmNhgh5sb2dpbi1jb25uZXhpb24ubnJjLWNucmMuZ2MuY2GC
HmNvbm5leGlvbi1sb2dpbi5jbnJjLW5yYy5nYy5jYYISd2FlLm5yYy1jbnJjLmdj
LmNhghJ3YWUuY25yYy1ucmMuZ2MuY2EwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBMBgNVHSAERTBDMDcGCmCGSAGG+mwKAQUw
KTAnBggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeB
DAECAjCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUAVYHUwhaQNgFK6gubVzxT
8MDkOHhwJQgXL6OqHQcT0wwAAAGFv92AdgAABAMARjBEAiBSuWBH2PSPrnnt9A7T
3AxXMKYJqC9rDzxat4LdNPjFBwIgTQpouYe27SvzKruhXUvvcVhEncVGiNc+eVha
v/106rkAdgBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAAAYW/3YCA
AAAEAwBHMEUCIQD79l93+0trFrpaPKvjlQchgpYFmQu7rnlp324H6cDPAQIgZgs7
EUvp88a+VevOFx4bvxhTvoGxAm3YgrDdqUhZSsEAdgB2/4g/Crb7lVHCYcz1h7o0
tKTNuyncaEIKn+ZnTFo6dAAAAYW/3YF2AAAEAwBHMEUCIQCjfYZjiKtOa3OJFTwa
Yr5fxyDqYWXfSNzCQ01tBCM5UQIgZ18YUHdXoTQgk6K/yUbUVPS5NuwdGEXmBfDR
gqkA8RowDQYJKoZIhvcNAQELBQADggEBAIzLBn6k4z8kWH8p6X2I+yD7nNUoP0Mt
fRfukvq/7yqpNXlNbvE4jMi+wWA8Bk+rC9bGaJ9jKX5Frrr7tsLTLXuk83Kedp07
L9t3Oe2wKd6/nk07IjwkFop2uwZtqbkUUXFXcSATaewaMhittdKOzkwv7S7+bG3r
geMiL+Ygh4rUZbZE64PwR5N9E9jbVdZfpWYUcLN2ORIcJxtdexadJH/o/Hjk0pFg
ncNnVyfTTWpaUQIPYwaqb1vJOb24grrDiP04uhAvgLLdP4gYK7QUszX8NLX9Y52r
z6N/lhtv6HEeTarUjEz6eNO6l+m4dUdZvqKeFHylBUqII3A/N8CVMRA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149984456445556746378761756989243406626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 13:14:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 13:13:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Research Council Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'science-libraries.canada.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742771842227021489119662060031284998478825273158478139406049904533514203430501049289977747792106381602666499499962633782485691725352217672954371564147516256449783145444992326339785598747391121264047394863580814885878545692124681665626694503417886664306955625835874482129887498181498557952249334282424501913889120855471134080415269186502146652111602562879196616760118351453921151837176822854831479159513265109200001329558267064214731581527405578066542891354093259904021427328341899814825201117813863960523835890400881277355613976223452119758622317886132912593074194356169651491419729182373901312695078746543044731299647859890692494913053689910491765416968877676792858811905207893686000053771861409274584286165610165710236398369455992999044261299017349393695319275562241069662804401480675583458716506856389615721780600868628561321937654188595143290602974809775716667764275118335330158781840794919349764800814875944271776506877756349137160537131793836052064156125473287678073340621022339413383276133728189203227351559426679244032208171653424936545987852496597177902457545897369680006370573759126388344564181087162490329844889813889945866242432776166492337072036742539282967527859622639850455689024723081468977303292547061319049558853227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11e8e89f22b94c00c07c9cd535c554aedd266d02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science-libraries.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotheques-scientifiques.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsl-bsf.scitech.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsf-fsl.scitech.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scitech.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsl-bsf.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsf-fsl.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsl-bsn.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsn-nsl.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrc-publications.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications-cnrc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nparc.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nparc.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrc-digital-repository.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depot-numerique-cnrc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-dn.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dn-dr.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oai-pmh.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oai-pmh.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-connexion.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexion-login.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wae.nrc-cnrc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wae.cnrc-nrc.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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