webmail.ia.ca
- Industrial Alliance Insurance and Financial Services -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 10:d7:e3:36:05:89:7d:f4:00:00:00:00:50:e5:16:96 was issued on by Entrust, Inc..
With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Industrial Alliance Insurance and Financial Services
Organization:
Industrial Alliance Insurance and Financial Services
State / Province:
Quebec
Locality: Quebec
Country: CA
Locality: Quebec
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 10:d7:e3:36:05:89:7d:f4:00:00:00:00:50:e5:16:96Serial Number (int): 22388600144158089289265277985381226134
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 0a:ce:65:6e:0f:24:91:c4:45:58:b5:74:95:86:13:ed:4d:a6:65:29
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): c1:34:d9:41:8f:ae:58:3d:eb:65:97:cc:ae:b8:47:fe:3c:9d:1e:4c
Fingerprint (sha256): 79:fd:29:17:88:be:91:ba:06:42:fd:58:9a:92:a5:b2:3d:e3:2f:82:af:44:5e:90:17:43:66:3f:a9:f0:11:70
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate webmail.ia.ca
28
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webmail.ia.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webmail.ia.ca
autodiscover.ia.ca
imap4.ia.iafg.net
sva0553.ia.iafg.net
libqca0.ia.iafg.net
libqca2.ia.iafg.net
libqca3.ia.iafg.net
libqca4.ia.iafg.net
mm.ia.iafg.net
autodiscover.ia.iafg.net
ews.ia.iafg.net
mm.inalco.com
mm.ia.ca
webmail.ia.iafg.net
webmail.iap.iafg.net
exchangeqc.ia.iafg.net
exchangevc.iap.iafg.net
LIAVC66.iap.iafg.net
mail-aut.ia.iafg.net
mail.ia.iafg.net
autodiscover.cabinetmra.com
autodiscover.iaexcellence.com
SVB0315.iafg.net
SVB0316.iafg.net
SVB0317.iafg.net
SVB0325.iafg.net
SVB0334.iafg.net
SVB0335.iafg.net
autodiscover.ia.ca
imap4.ia.iafg.net
sva0553.ia.iafg.net
libqca0.ia.iafg.net
libqca2.ia.iafg.net
libqca3.ia.iafg.net
libqca4.ia.iafg.net
mm.ia.iafg.net
autodiscover.ia.iafg.net
ews.ia.iafg.net
mm.inalco.com
mm.ia.ca
webmail.ia.iafg.net
webmail.iap.iafg.net
exchangeqc.ia.iafg.net
exchangevc.iap.iafg.net
LIAVC66.iap.iafg.net
mail-aut.ia.iafg.net
mail.ia.iafg.net
autodiscover.cabinetmra.com
autodiscover.iaexcellence.com
SVB0315.iafg.net
SVB0316.iafg.net
SVB0317.iafg.net
SVB0325.iafg.net
SVB0334.iafg.net
SVB0335.iafg.net
Other certificates including the domain name ia.ca
(limited to 100 certificates)
partners.ia.ca
sts.accp.ia.ca
auto.ia.ca
trk.mail-corpo.ia.ca
www.security.ia.ca
sva0735.ia.iafg.net
connect.ia.ca
admin.uat-flex.ia.ca
covid-conseiller.ia.ca
test222.ia.ca
content.accp.secureweb.ia.ca
auto.ia.ca
sts.accp.ia.ca
voyagedereve.ia.ca
ia.ca
portail-02.wifi.ia.ca
security.ia.ca
GTMSS.ia.ca
test222.ia.ca
trk.mail-corpo.ia.ca
Collectif-bo-integration-2022-accp.ia.ca
linstantia.ia.ca
extension.apps.astor.ai
admin.devtest-flex.ia.ca
www.regimeiaah.ia.ca
app.lab.secure.ia.ca
www.security.ia.ca
portail-accp-01.wifi.ia.ca
testev.ia.ca
promo.ia.ca
app.flex.ia.ca
signing.ia.ca
security.ia.ca
content.devtest-flex.ia.ca
test222.ia.ca
iacampus.ia.ca
test222.ia.ca
test2222.ia.ca
securite.ia.ca
*.portal.api.ia.ca
auto.ia.ca
Collectif-bo-integration-2022-prod.ia.ca
cee.ia.ca
evolife.accp.apis.ia.ca
authentification.asmb.secureweb.ia.ca
test222.ia.ca
fs52.ia.ca
security.ia.ca
test2222.ia.ca
test2222.ia.ca
elleven.minhacentralonline.com.br
ece.ia.ca
auto.ia.ca
securite.ia.ca
auto.ia.ca
mastrategie.ia.ca
webmail.intg.ia.ca
auto.ia.ca
evo.accp.ia.ca
www.regimeiaah.ia.ca
TestWild.ia.ca
app.devtest.ia.ca
adj.accp.ia.ca
login.accp.privatewealth.ia.ca
test222.ia.ca
dialog.ia.ca
innovation.ia.ca
devjira.ia.ca
*.asmb.secureweb.ia.ca
rri.ia.ca
auto.ia.ca
GTMSSACC.ia.ca
remote01.ia.ca
www.security.ia.ca
accp.api.ia.ca
apis.ia.ca
lean.ia.ca
login.service.partners.ia.ca
login.develop.benefits.ia.ca
covid-advisor.ia.ca
evo.dev.ia.ca
auto.ia.ca
dealers.ia.ca
www.securite.ia.ca
qc-remote.ia.ca
auto.ia.ca
*.ia.ca
rest.devtest-flex.ia.ca
expw-e.uc.iafg.net
test2222.ia.ca
auto.ia.ca
intranet.intg.ia.ca
mulesoft.dev.mtls.genericsalesforce.ia.ca
expw-e.uc.iafg.net
fs52.ia.ca
content.accp.ia.ca
proxy.intg.secureweb.ia.ca
accp.apis.ia.ca
iaconnectlab.ia.ca
content.accp.secureweb.ia.ca
sts.accp.ia.ca
auto.ia.ca
trk.mail-corpo.ia.ca
www.security.ia.ca
sva0735.ia.iafg.net
connect.ia.ca
admin.uat-flex.ia.ca
covid-conseiller.ia.ca
test222.ia.ca
content.accp.secureweb.ia.ca
auto.ia.ca
sts.accp.ia.ca
voyagedereve.ia.ca
ia.ca
portail-02.wifi.ia.ca
security.ia.ca
GTMSS.ia.ca
test222.ia.ca
trk.mail-corpo.ia.ca
Collectif-bo-integration-2022-accp.ia.ca
linstantia.ia.ca
extension.apps.astor.ai
admin.devtest-flex.ia.ca
www.regimeiaah.ia.ca
app.lab.secure.ia.ca
www.security.ia.ca
portail-accp-01.wifi.ia.ca
testev.ia.ca
promo.ia.ca
app.flex.ia.ca
signing.ia.ca
security.ia.ca
content.devtest-flex.ia.ca
test222.ia.ca
iacampus.ia.ca
test222.ia.ca
test2222.ia.ca
securite.ia.ca
*.portal.api.ia.ca
auto.ia.ca
Collectif-bo-integration-2022-prod.ia.ca
cee.ia.ca
evolife.accp.apis.ia.ca
authentification.asmb.secureweb.ia.ca
test222.ia.ca
fs52.ia.ca
security.ia.ca
test2222.ia.ca
test2222.ia.ca
elleven.minhacentralonline.com.br
ece.ia.ca
auto.ia.ca
securite.ia.ca
auto.ia.ca
mastrategie.ia.ca
webmail.intg.ia.ca
auto.ia.ca
evo.accp.ia.ca
www.regimeiaah.ia.ca
TestWild.ia.ca
app.devtest.ia.ca
adj.accp.ia.ca
login.accp.privatewealth.ia.ca
test222.ia.ca
dialog.ia.ca
innovation.ia.ca
devjira.ia.ca
*.asmb.secureweb.ia.ca
rri.ia.ca
auto.ia.ca
GTMSSACC.ia.ca
remote01.ia.ca
www.security.ia.ca
accp.api.ia.ca
apis.ia.ca
lean.ia.ca
login.service.partners.ia.ca
login.develop.benefits.ia.ca
covid-advisor.ia.ca
evo.dev.ia.ca
auto.ia.ca
dealers.ia.ca
www.securite.ia.ca
qc-remote.ia.ca
auto.ia.ca
*.ia.ca
rest.devtest-flex.ia.ca
expw-e.uc.iafg.net
test2222.ia.ca
auto.ia.ca
intranet.intg.ia.ca
mulesoft.dev.mtls.genericsalesforce.ia.ca
expw-e.uc.iafg.net
fs52.ia.ca
content.accp.ia.ca
proxy.intg.secureweb.ia.ca
accp.apis.ia.ca
iaconnectlab.ia.ca
content.accp.secureweb.ia.ca
Certificate
The complete raw certificate details for webmail.ia.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHkzCCBnugAwIBAgIQENfjNgWJffQAAAAAUOUWljANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x ODA3MTgxNzM0NDdaFw0yMDA3MTgxODA0NDZaMIGGMQswCQYDVQQGEwJDQTEPMA0G A1UECBMGUXVlYmVjMQ8wDQYDVQQHEwZRdWViZWMxPTA7BgNVBAoTNEluZHVzdHJp YWwgQWxsaWFuY2UgSW5zdXJhbmNlIGFuZCBGaW5hbmNpYWwgU2VydmljZXMxFjAU BgNVBAMTDXdlYm1haWwuaWEuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCmkIkruk2TIXWP31vUzRmtnYiGz+Uc097xnyvptN/ddXgXDQBBPQKbksQH hUF8Kf0l7e2q+Ypx0JsGyI2dvSbQSRUBkJdLtbKQvSp7oMDTWL3ZdTtHKietiGLn hVOoSLL+ScmLWCkyB8orHEURUmnT7lmIm1V2DAMWRzhjZoqVONxNTbLQRo6ePk1a EoGiLZ09jxPrX+h/xQzREXY6slpIKTHuLPH1G6KnAskzFTOIkTAxpPO4NF1vOzi4 sEtu4ockAVnwefH0EhBE/wJi4/Q150D2JXKeCa79wua1t6S48JwqErfLKc4nOuxU Y6F47zyv7Pz+rchNwtxRNjkKzbE7AgMBAAGjggPFMIIDwTATBgorBgEEAdZ5AgQD AQH/BAIFADCCAkIGA1UdEQSCAjkwggI1gg13ZWJtYWlsLmlhLmNhghJhdXRvZGlz Y292ZXIuaWEuY2GCEWltYXA0LmlhLmlhZmcubmV0ghNzdmEwNTUzLmlhLmlhZmcu bmV0ghNsaWJxY2EwLmlhLmlhZmcubmV0ghNsaWJxY2EyLmlhLmlhZmcubmV0ghNs aWJxY2EzLmlhLmlhZmcubmV0ghNsaWJxY2E0LmlhLmlhZmcubmV0gg5tbS5pYS5p YWZnLm5ldIIYYXV0b2Rpc2NvdmVyLmlhLmlhZmcubmV0gg9ld3MuaWEuaWFmZy5u ZXSCDW1tLmluYWxjby5jb22CCG1tLmlhLmNhghN3ZWJtYWlsLmlhLmlhZmcubmV0 ghR3ZWJtYWlsLmlhcC5pYWZnLm5ldIIWZXhjaGFuZ2VxYy5pYS5pYWZnLm5ldIIX ZXhjaGFuZ2V2Yy5pYXAuaWFmZy5uZXSCFExJQVZDNjYuaWFwLmlhZmcubmV0ghRt YWlsLWF1dC5pYS5pYWZnLm5ldIIQbWFpbC5pYS5pYWZnLm5ldIIbYXV0b2Rpc2Nv dmVyLmNhYmluZXRtcmEuY29tgh1hdXRvZGlzY292ZXIuaWFleGNlbGxlbmNlLmNv bYIQU1ZCMDMxNS5pYWZnLm5ldIIQU1ZCMDMxNi5pYWZnLm5ldIIQU1ZCMDMxNy5p YWZnLm5ldIIQU1ZCMDMyNS5pYWZnLm5ldIIQU1ZCMDMzNC5pYWZnLm5ldIIQU1ZC MDMzNS5pYWZnLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVz dC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBo BggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3Qu bmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFp bjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0O BBYEFArOZW4PJJHERVi1dJWGE+1NpmUpMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQEL BQADggEBAME2fcfrQ7WLciaZA8y9wLIauvCZ+xeictsRE36cYD/Us6EuPtgv73Y3 NpxKsXTqtCZbzaxfAXO+XMdonW9MkYcz4LwcroQ0YPSyu7EKir0E2plGqal9PCGM MrhIh8b8TkSWb8nkmOfpu9A1k2uAnrIJFZEMbPY+fPdJPncpvh6wDahcVuk8esn6 jloMqR8RYVNriLN2QIwxgTi5FMmc0MXhI2HjghIvhIcx+DCkYXd9lCZlhtYWlqSG d+Ef2ZfFeYyCNMLXOcszg5wlcC86RI9za72KKrgr3JUU6WgrXzM8aor7yyCLB1oS hJT2EUI5BQqR49BliRTnebHdvWKlgpU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppCJK7pNkyF1j99b1M0Z rZ2Ihs/lHNPe8Z8r6bTf3XV4Fw0AQT0Cm5LEB4VBfCn9Je3tqvmKcdCbBsiNnb0m 0EkVAZCXS7WykL0qe6DA01i92XU7RyonrYhi54VTqEiy/knJi1gpMgfKKxxFEVJp 0+5ZiJtVdgwDFkc4Y2aKlTjcTU2y0EaOnj5NWhKBoi2dPY8T61/of8UM0RF2OrJa SCkx7izx9RuipwLJMxUziJEwMaTzuDRdbzs4uLBLbuKHJAFZ8Hnx9BIQRP8CYuP0 NedA9iVyngmu/cLmtbekuPCcKhK3yynOJzrsVGOheO88r+z8/q3ITcLcUTY5Cs2x OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 22388600144158089289265277985381226134 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-18 17:34:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-18 18:04:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.ia.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21026831895316116533571070079487391132816783192372402632994313372884548561805330549542831470841154049885127471101686425900709989032901427721854566636668795926495769534058406629402311431024827846828281136028020095941942224577918407890636756571712855853892373409623771667089813811177801154630580137288878924479059409179246838833644199521843498308041722533726030540094649213732966796547694675998734870680652988636180705067627958760759115455697812404235100251549074608929794931508571732849696932708444903515341179956296716044898029983995774315669109053288388610681223262441215620391781066793050001326798360616606328795451 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (569 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ia.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ia.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap4.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sva0553.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libqca0.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libqca2.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libqca3.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libqca4.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ews.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.inalco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.ia.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.iap.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangeqc.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangevc.iap.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LIAVC66.iap.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-aut.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ia.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cabinetmra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iaexcellence.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SVB0315.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SVB0316.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SVB0317.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SVB0325.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SVB0334.iafg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SVB0335.iafg.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0ace656e0f2491c44558b574958613ed4da66529 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00c1367dc7eb43b58b72269903ccbdc0b21abaf099fb17a272db11137e9c603fd4b3a12e3ed82fef7637369c4ab174eab4265bcdac5f0173be5cc7689d6f4c918733e0bc1cae843460f4b2bbb10a8abd04da9946a9a97d3c218c32b84887c6fc4e44966fc9e498e7e9bbd035936b809eb20915910c6cf63e7cf7493e7729be1eb00da85c56e93c7ac9fa8e5a0ca91f1161536b88b376408c318138b914c99cd0c5e12361e382122f848731f830a461777d94266586d61696a48677e11fd997c5798c8234c2d739cb33839c25702f3a448f736bbd8a2ab82bdc9514e9682b5f333c6a8afbcb208b075a128494f6114239050a91e3d0658914e779b1ddbd62a58295