Industrial Alliance Insurance and Financial Services Inc.

- Industrial Alliance Insurance and Financial Services Inc. -

Issued by Entrust Verified Mark CA - VMC2

About this certificate

This digital certificate with serial number 48:3f:99:51:21:7b:b9:27:fd:ce:47:e8:d2:f2:7b:0d was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

Industrial Alliance Insurance and Financial Services Inc.

Company registration number: 1168366202
Organization: Industrial Alliance Insurance and Financial Services Inc.
Address: 1080 Grande Allee O
State / Province: Quebec
Locality: Québec
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 48:3f:99:51:21:7b:b9:27:fd:ce:47:e8:d2:f2:7b:0d
Serial Number (int): 96034640035114736926085709232971348749
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f6:ba:7a:2b:2c:b0:11:c1:b7:58:ee:bd:49:23:47:d5:81:a4:a0:bb
AuthorityKeyId: ef:bc:3c:b4:af:3a:d0:45:5e:76:54:df:c7:64:78:e9:2d:1d:74:3f

Fingerprint (sha1): 73:06:a7:c8:6b:8f:68:04:45:05:57:5b:e6:b0:17:2f:31:7e:8a:b1
Fingerprint (sha256): 81:2e:15:d0:91:cf:cb:3d:37:b0:f1:b7:b5:76:99:69:39:8d:a2:cb:8f:89:f4:88:03:42:25:07:01:74:93:0a

Issuing Certificate URL: http://aia.entrust.net/vmc2-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/vmc2.crl

Check the revocation status for certificate Industrial Alliance Insurance and Financial Services Inc.

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Industrial Alliance Insurance and Financial Services Inc.

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature

Extended Key Usages

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ia.ca

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for Industrial Alliance Insurance and Financial Services Inc. in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKnjCCCIagAwIBAgIQSD+ZUSF7uSf9zkfo0vJ7DTANBgkqhkiG9w0BAQ0FADBP
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UEAxMf
RW50cnVzdCBWZXJpZmllZCBNYXJrIENBIC0gVk1DMjAeFw0yNDAzMjUxNDU3Mjla
Fw0yNTAzMjAxNDU3MjhaMIIBvzELMAkGA1UEBhMCQ0ExDzANBgNVBAgTBlF1ZWJl
YzEQMA4GA1UEBwwHUXXDqWJlYzEcMBoGA1UECRMTMTA4MCBHcmFuZGUgQWxsZWUg
TzETMBEGCysGAQQBgjc8AgEDEwJDQTEXMBUGCysGAQQBgjc8AgECEwZRdWViZWMx
QjBABgNVBAoTOUluZHVzdHJpYWwgQWxsaWFuY2UgSW5zdXJhbmNlIGFuZCBGaW5h
bmNpYWwgU2VydmljZXMgSW5jLjEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRp
b24xEzARBgNVBAUTCjExNjgzNjYyMDIxHzAdBgorBgEEAYOeXwENEw9SZWdpc3Rl
cmVkIE1hcmsxGTAXBgorBgEEAYOeXwEEEwlUTUE5NDY0NzExEjAQBgorBgEEAYOe
XwEDEwJDQTE1MDMGCisGAQQBg55fAQITJUNhbmFkaWFuIEludGVsbGVjdHVhbCBQ
cm9wZXJ0eSBPZmZpY2UxQjBABgNVBAMTOUluZHVzdHJpYWwgQWxsaWFuY2UgSW5z
dXJhbmNlIGFuZCBGaW5hbmNpYWwgU2VydmljZXMgSW5jLjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALFXt/qr5DeWXadiZzq6faBchTTmwp+tyfMdx564
avKizx4YMpoXw+55iMuYTFXyfVdLXiyuSf17ZaDMQv/9TkVaDmbWgt7ovXDi3joT
NPrQelpOYMeUjwOxM+a/8zHc08vd/AdhScB//0JnKcSHH9nNkHxEi2JOat8KsS7M
ZQz7NzJzjhvvX+xHcIuNX3EKlr4Y6nBxgcohnRtvfLmv1VaOgHivjQZx5fBlKMNz
QoYTJFyjKyAFtj192dv4I1rMjQIu8hV/WHGYY/o5gxIC8vSYuA+MkGUlWNDSDjUJ
4JLobtdOAAdwR1jw7hORAvIEv2ZkouW93JWb/o1ENTC/p1kCAwEAAaOCBQIwggT+
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPa6eisssBHBt1juvUkjR9WBpKC7MB8G
A1UdIwQYMBaAFO+8PLSvOtBFXnZU38dkeOktHXQ/MGYGCCsGAQUFBwEBBFowWDAj
BggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMQYIKwYBBQUHMAKG
JWh0dHA6Ly9haWEuZW50cnVzdC5uZXQvdm1jMi1jaGFpbi5jZXIwMAYDVR0fBCkw
JzAloCOgIYYfaHR0cDovL2NybC5lbnRydXN0Lm5ldC92bWMyLmNybDCCAvwGCCsG
AQUFBwEMBIIC7jCCAuqiggLmoIIC4jCCAt4wggLaMIIC1hYNaW1hZ2Uvc3ZnK3ht
bDAzMDEwDQYJYIZIAWUDBAIBBQAEIDyxpyiZAnfD9qdoiFkLwdaLWqr08aGzgKy7
6JSWOa0iMIICjhaCAopkYXRhOmltYWdlL3N2Zyt4bWw7YmFzZTY0LEg0c0lBQUFB
QUFBQS80VlNYVytiTUJSOTdxVDloenZ2YVJLK21NOUFCS25TYlcwanRWS2xTbjJu
NElJbHowVGdoS1MvdnRkSjJLYTlESUY5T0J5ZmMyeFJYQjkrYWRqTFlWUzlLVm1B
Z29FMGRkOG8wNVpzWjk5NHhxNVhuejhWWHppSE8ybmtVTmwrV01LNjZWOGxiTFRl
amZaRVFaaWhRT0hCODhzZC9EeHMrOEhDazk2MWZHTUFUK1RMT1dRSktRb0JOenVs
R3hEZkFEaDMvdU8rL2J0R3lPQzFHdVhUMEw4cExVdG1sVG55N2NpQTZwcXhaSjIx
MjZYdlQ5T0VVNFQ5MFBxaEVNSW5Gd1o3SmFlYi9sQXlBUUtTbUc1R0NRQ0ZWVmJM
MWNZMHJyU3FOS3kxVnBXcGFTTm0zQTBuVkprR2JwVWg3QVRQY3RpcldvNGtxTEh3
endiVWRwQzFCVXJnQVlNalRRSVhES2lwTHRuWDI5UEZZRktON1VxV3BBdzZxZHJP
RWs2Y3puY09MUTFYNS9HcTJQYjYyUFptZGhBaStyRk9HR3g3WlN4dE5zZUZGd3BN
SUVneHVhRElpeU5jMEZsZUFNRFoyTGxWdHZ2WHFpblpZNDY1RjhRWTE0S0h0Q3pB
ak1jWWVQUzRlWFNZT08vQ2pmenlNb3UrQjQ0SU1xcHdja3FwMVd6NS90L3dXSkRV
TmUxU3pEWFBNT1ZSZ05GOUZEMEV5WjhQTVpYS01Pb29LMy80dmVZZEhpTkJMY0lj
RTVLa1BOTWhobDUyNzlnNXUvRGRhYzRqL1FtckQ0WWU4bDNkQWdBQTAQBgNVHREE
CTAHggVpYS5jYTAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAx8w
UAYDVR0gBEkwRzA3BgpghkgBhvpsCgELMCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8v
d3d3LmVudHJ1c3QubmV0L3JwYTAMBgorBgEEAYOeXwEBMIGKBgorBgEEAdZ5AgQC
BHwEegB4AHYAVVlTrjCWAIBs0utSCKbJnpMYKKwQVrRCHFU2FUxfdawAAAGOdh3R
YgAABAMARzBFAiEA9xpeCO6fDzhryuT8KKtl5o0M0f66Bhuueg9MI2kGkMQCIDBe
WHFszBr4TnSuQAcTbZ0AQlBKjjKH/Syyb+PAKhS+MA0GCSqGSIb3DQEBDQUAA4IC
AQA8kFxe3IbVMDS6jPs0ekOHeCVcyTP7mm/CS9cS8p/sOXF33UDS5R5AkVjDHbT7
ir8Bvkk8eKVSbfIe18af6WhkQd9ybCuBW9VSy9Skb75c6b7ekJUki7pKBapCpOq+
Gb9pvTLs5KhLxO9Pgtbt0A/UtvbeHF8DUbncFPNJW1CdfrwXeENpQxMOGxLJUT4j
1OY3WJ4zCAA7gk0+hU3Jg3TrMY0QbWtb4BrW0BxHzvvcD0TjyO7+VgeSNXBHyRr0
ToELLUetJAsPiAPLoM5y8WoNt1ML8OJs8nhTY2LXP9bblw2OO/Sg1IWvueNiVJxG
HBi0KoRRbHqLkSbgFH4cN1qUTRVIkcKBOvxY8YYIQjYGLJkpO1UkNkNxNvBBCbmg
peArS7dmL3cv+ajDoDw21jdoBqatS6zOvYRmMsKu5EvGa+Hn4XCuBRUPGLTKmhc5
0KoygceuPXZx81Ivx1iyBxpKLu7qzClQ9KFPgOF4acEjy/JvSJ26SzMsJ3bDnUhz
ebFhWVCvd4q68wVpeL4UqEPtBOzmFOfrrKR4qOw6ZXFoZYPvTTrQneFsGemozhPm
xv9Y2z8WA5s1VUS9qG+AidKrNyN6GWHpxOHjLUUgf7VY7sJwYrPaZ82F7u2CJmvw
yncup0cbUL1DiTzi5Bz8qgZJwZb0iUNWx3+OJxy3m9Pviw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVe3+qvkN5Zdp2JnOrp9
oFyFNObCn63J8x3Hnrhq8qLPHhgymhfD7nmIy5hMVfJ9V0teLK5J/XtloMxC//1O
RVoOZtaC3ui9cOLeOhM0+tB6Wk5gx5SPA7Ez5r/zMdzTy938B2FJwH//QmcpxIcf
2c2QfESLYk5q3wqxLsxlDPs3MnOOG+9f7Edwi41fcQqWvhjqcHGByiGdG298ua/V
Vo6AeK+NBnHl8GUow3NChhMkXKMrIAW2PX3Z2/gjWsyNAi7yFX9YcZhj+jmDEgLy
9Ji4D4yQZSVY0NIONQngkuhu104AB3BHWPDuE5EC8gS/ZmSi5b3clZv+jUQ1ML+n
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96034640035114736926085709232971348749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Verified Mark CA - VMC2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 14:57:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-20 14:57:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Québec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1080 Grande Allee O'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1168366202'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TMA946471'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Intellectual Property Office'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Industrial Alliance Insurance and Financial Services Inc.'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22387435666686351993699721713312693824124516503838053130788704106924825750423983826952304653218798558380509341153000890662153199231089566262906359012595878975521906652414961373360844326417081716044803110256471911820806507655888605818137136272577744315895006780792765171770206727800981541949077130191390736544513949423358690526529029407362124464678410594618099708195207788706120853199467117120310532952672343617335512649900126148403861452243923761587667516575577543858653563676478749520950226171148242384527372428268833669451028134273705265211240988372923985652015109196904235800528438043671485029440756265780319856473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6ba7a2b2cb011c1b758eebd492347d581a4a0bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName efbc3cb4af3ad0455e7654dfc76478e92d1d743f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/vmc2-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/vmc2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.2.1 (sha-256)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
															3cb1a728990277c3f6a76888590bc1d68b5aaaf4f1a1b380acbbe8949639ad22
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (9 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ia.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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