webmail.bcsc.bc.ca

- British Columbia Securities Commission -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number f6:f2:d8:1a:8f:b5:7b:a3:00:00:00:00:50:dd:35:df was issued on by Entrust, Inc..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

British Columbia Securities Commission

Organization: British Columbia Securities Commission
State / Province: British Columbia
Locality: Vancouver
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f6:f2:d8:1a:8f:b5:7b:a3:00:00:00:00:50:dd:35:df
Serial Number (int): 328251005907737102987824536669696898527
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 82:9f:49:0c:bf:96:56:21:e9:5e:ce:5c:48:7c:d1:b6:56:df:5f:36
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 67:3a:81:e1:31:ec:98:ed:4d:d8:0d:ec:b0:ad:bc:99:97:1f:56:05
Fingerprint (sha256): 76:39:c3:47:8a:1f:cd:80:a4:73:a8:41:2a:15:81:82:2e:ba:7e:6e:9a:5e:e5:9f:2d:2c:da:27:91:97:70:ba

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate webmail.bcsc.bc.ca

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.bcsc.bc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.bcsc.bc.ca
www.webmail.bcsc.bc.ca
AutoDiscover.investright.org
AutoDiscover.exch.bcsc.bc.ca
AutoDiscover.bcsc.bc.ca
AutoDiscover.csa-acvm.ca
casexch2013.bcscnet.ca
pexch01i.bcscnet.ca
pexch03idr.bcscnet.ca
pexch02i.bcscnet.ca
casexch2013.bcsc.bc.ca
mail.bcsc.bc.ca
legacy.bcsc.bc.ca
pexch01i.bcsc.bc.ca
pexch02i.bcsc.bc.ca
webmail.bcscnet.ca
legacy.bcscnet.ca
mail.bcscnet.ca
pexch03idr.bcsc.bc.ca
investright.org
bcsc.bc.ca
csa-acvm.ca
exch.bcsc.bc.ca

Other certificates including the domain name bcsc.bc.ca

(limited to 100 certificates)
pcuimp02i.bcscnet.ca
si.qa.bcsc.bc.ca
www.bcsc.bc.ca
uat.bcsc.bc.ca
ereports.bcsc.bc.ca
qaewebservices.bcsc.bc.ca
qaeservices.bcsc.bc.ca
nqaereports.bcsc.bc.ca
qaereports.bcsc.bc.ca
nuateservices.bcsc.bc.ca
gateway.dev.bcsc.bc.ca
webmail.bcsc.bc.ca
dev.bcsc.bc.ca
webfile.bcsc.bc.ca
deveservices.bcsc.bc.ca
webmail.bcsc.bc.ca
eservices.bcsc.bc.ca
cd.uat.bcsc.bc.ca
uatewebservices.bcsc.bc.ca
ewebservices.bcsc.bc.ca
nqaewebservices.bcsc.bc.ca
prodsedarplus.bcsc.bc.ca
webvdidr.bcsc.bc.ca
ndev.bcsc.bc.ca
webmail.bcsc.bc.ca
*.bcsc.bc.ca
cd.qa.bcsc.bc.ca
ereports.bcsc.bc.ca
gateway.bcsc.bc.ca
deveservices.bcsc.bc.ca
qaeservices.bcsc.bc.ca
dev.bcsc.bc.ca
connect.bcsc.bc.ca
webmail.bcsc.bc.ca
webfile.bcsc.bc.ca
uatereports.bcsc.bc.ca
qaereports.bcsc.bc.ca
nqa.bcsc.bc.ca
eservices.bcsc.bc.ca
lucerne2008.bcsc.bc.ca
connect.bcsc.bc.ca
eservices.bcsc.bc.ca
dapp01e.bcsc.bc.ca
pcuimp02i.bcscnet.ca
webmail.bcsc.bc.ca
qaereports.bcsc.bc.ca
eservices.bcsc.bc.ca
devEservices.bcsc.bc.ca
qaewebservices.bcsc.bc.ca
devPlanning10.bcsc.bc.ca
ndevereports.bcsc.bc.ca
new.bcsc.bc.ca
ndeveservices.bcsc.bc.ca
devsedarplus.bcsc.bc.ca
nuat.bcsc.bc.ca
devereports.bcsc.bc.ca
www.bcsc.bc.ca
eservices.bcsc.bc.ca
qa.bcsc.bc.ca
awseg.bcsc.bc.ca
qaewebservices.bcsc.bc.ca
gateway.uat.bcsc.bc.ca
uatewebservices.bcsc.bc.ca
surveys.bcsc.bc.ca
eservices.bcsc.bc.ca
planning10.bcsc.bc.ca
*.bcsc.bc.ca
oliver2008.bcsc.bc.ca
qaeservices.bcsc.bc.ca
webmail.bcsc.bc.ca
nuatwebservices.bcsc.bc.ca
ProdTableau.bcsc.bc.ca
si.bcsc.bc.ca
devereports.bcsc.bc.ca
connect.bcsc.bc.ca
drp.bcsc.bc.ca
webmail.bcsc.bc.ca
cm.uat.bcsc.bc.ca
www.bcsc.bc.ca
devewebservices.bcsc.bc.ca
webfile.bcsc.bc.ca
ewebservices.bcsc.bc.ca
eservices.bcsc.bc.ca
bcsc.bc.ca
nqaeservices.bcsc.bc.ca
gateway.qa.bcsc.bc.ca
eservices.bcsc.bc.ca
ndevewebservices.bcsc.bc.ca
webfile.bcsc.bc.ca
eservices.bcsc.bc.ca
uateservices.bcsc.bc.ca
bcscadobesync.bcsc.bc.ca
cm.dev.bcsc.bc.ca
maintenance.bcsc.bc.ca
nuatereports.bcsc.bc.ca
nconnect.bcsc.bc.ca
ndrconnect.bcsc.bc.ca
*.bcsc.bc.ca
www.bcsc.bc.ca
qa.bcsc.bc.ca

Certificate

The complete raw certificate details for webmail.bcsc.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHZ5G52617qWuSIiPrLc
qj38qjTkaNKfMTWXTWmhupnyMEy8niBncUnP4CRAayyf1qt8VdyEi9tvTLVI1SRO
J1RzdgnJHMDTthIMwSxg44qeET7jClOb1272Uy4Ut2lNdwOIObZVjFNZI26fCfwT
LurgQGuoNOI23CeuLUAMc1AiDYheW5I0k4IkZ+Y5EuH2f3GWeram7T0Xqghr34S0
DT4RSuLqxC3PNgaKkJO/RihgUbPsuq6Z3RHTIoXhRTG0GuO4bNPuzZ2gUmcPvwnP
+oYOlNysHiWjqNIAubcL19X5X1bZEvGRp96TeUxO/TzrgYM5/5p23OPIfzAVVgfO
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328251005907737102987824536669696898527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-06 21:05:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 21:35:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia Securities Commission'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.bcsc.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19246643606814451107940988284305922722313800644182973519548285454915184102958366455657076118800703027418515200794417409259337811377276396596312407838219752723014590647348403533416373315990409597776248993766871425341054400113455803586295092643138769588566442028437782555848393838916071884947998132818833102899244896088788655393803236561075633438180377016174489920535883549486385794480986766424671132532056875651244605138572912779682033296982068544591784330395998575559331628712221944275075328873718224022265077617628619140529030284241624624904719857706710041303976055070484460134397518692073268684007526450673786277447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.investright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.exch.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.csa-acvm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casexch2013.bcscnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pexch01i.bcscnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pexch03idr.bcscnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pexch02i.bcscnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casexch2013.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pexch01i.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pexch02i.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bcscnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bcscnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bcscnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pexch03idr.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcsc.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa-acvm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exch.bcsc.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							829f490cbf965621e95ece5c487cd1b656df5f36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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