rm2dg.international.gc.ca

- Global Affairs Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b3:1f:b8:2a:69:19:2e:cf:00:00:00:00:50:f3:9b:07 was issued on by Entrust, Inc..

With 106 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Global Affairs Canada

Organization: Global Affairs Canada
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b3:1f:b8:2a:69:19:2e:cf:00:00:00:00:50:f3:9b:07
Serial Number (int): 238096507771590788636791927607854865159
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 20:aa:c2:e3:6a:de:21:31:ba:15:d7:af:dc:3d:14:e1:b4:d0:17:96
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d5:79:e8:7d:7a:1e:c3:02:ba:36:92:85:82:49:cb:71:48:16:b6:c8
Fingerprint (sha256): 8a:d5:dc:27:29:57:9d:d3:88:26:88:20:13:f3:ae:ef:70:02:7f:e8:74:b4:1e:a7:49:4d:65:32:fe:6d:99:c6

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate rm2dg.international.gc.ca

106

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rm2dg.international.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rm2dg.international.gc.ca
RMtest.international.gc.ca
dallas.gc.ca
www.dallas.gc.ca
danemark.gc.ca
www.danemark.gc.ca
delegecomercial.gc.ca
www.delegecomercial.gc.ca
delegecomerciale.gc.ca
www.delegecomerciale.gc.ca
delegecommercial.gc.ca
www.delegecommercial.gc.ca
delegecommerciale.gc.ca
www.delegecommerciale.gc.ca
delegescommerciaux.gc.ca
www.delegescommerciaux.gc.ca
deleguecomercial.gc.ca
www.deleguecomercial.gc.ca
deleguecomerciale.gc.ca
www.deleguecomerciale.gc.ca
deleguecommerciale.gc.ca
www.deleguecommercial.gc.ca
www.deleguecommerciale.gc.ca
deleguescomerciaux.gc.ca
www.deleguescomerciaux.gc.ca
deleguescommerciaux.gc.ca
www.deleguescommerciaux.gc.ca
denmark.gc.ca
www.denmark.gc.ca
denver.gc.ca
www.denver.gc.ca
detroit.gc.ca
www.detroit.gc.ca
www.dfait.gc.ca
www.dfait-maeci.gc.ca
doccan.gc.ca
www.doccan.gc.ca
dominicanrepublic.gc.ca
www.dominicanrepublic.gc.ca
eau.gc.ca
www.eau.gc.ca
ecuador.gc.ca
www.ecuador.gc.ca
edu-canada.ca
www.edu-canada.ca
educanada.gc.ca
edu-canada.gc.ca
www.educanada.gc.ca
www.edu-canada.gc.ca
educanada-pro.gc.ca
edu-canadapro.gc.ca
www.educanada-pro.gc.ca
www.edu-canadapro.gc.ca
educationaucanada.gc.ca
www.educationaucanada.gc.ca
educationau-incanada.gc.ca
www.educationau-incanada.gc.ca
educationin-aucanada.gc.ca
www.educationin-aucanada.gc.ca
educationincanada.gc.ca
www.educationincanada.gc.ca
egypt.gc.ca
www.egypt.gc.ca
egypte.gc.ca
www.egypte.gc.ca
elsalvador.gc.ca
www.elsalvador.gc.ca
equateur.gc.ca
www.equateur.gc.ca
espagne.gc.ca
www.espagne.gc.ca
estonia.gc.ca
www.estonia.gc.ca
estonie.gc.ca
www.estonie.gc.ca
ethiopia.gc.ca
www.ethiopia.gc.ca
ethiopie.gc.ca
www.ethiopie.gc.ca
exportcontrols.gc.ca
www.exportcontrols.gc.ca
fac.gc.ca
www.fac.gc.ca
fac-aec.gc.ca
www.fac-aec.gc.ca
femmesdaffairesencommerce.gc.ca
www.femmesdaffairesencommerce.gc.ca
finland.gc.ca
www.finland.gc.ca
finlande.gc.ca
www.finlande.gc.ca
france.gc.ca
www.france.gc.ca
g7.gc.ca
germany.gc.ca
www.germany.gc.ca
ghana.gc.ca
www.ghana.gc.ca
grece.gc.ca
www.grece.gc.ca
greece.gc.ca
www.greece.gc.ca
guatemala.gc.ca
www.guatemala.gc.ca
guyana.gc.ca
www.guyana.gc.ca

Other certificates including the domain name international.gc.ca

(limited to 100 certificates)
mailgateway.dev.international.gc.ca
sdcvpn01h.international.gc.ca
dalasvpn01h.international.gc.ca
www.listserv.international.gc.ca
data.international.gc.ca
eam-systest.sp.international.gc.ca
develang.international.gc.ca
develang.international.gc.ca
data.international.gc.ca
dev-travel.international.gc.ca
rm3hq.international.gc.ca
rm3hq.international.gc.ca
SP.international.gc.ca
signetweb.international.gc.ca
MXICOVPN01H.international.gc.ca
pilotasa01.international.gc.ca
piprod2.international.gc.ca
sdcvpn01h.international.gc.ca
goa-oma.international.gc.ca
w01.international.gc.ca
sl.media.international.gc.ca
elang.international.gc.ca
www.international.gc.ca
w03.international.gc.ca
guestportal11.international.gc.ca
w05.international.gc.ca
iec-eic.international.gc.ca
rm2dg.international.gc.ca
travel-smart.international.gc.ca
signetweb.international.gc.ca
SEOULVPN01H.international.gc.ca
dev-goa-oma.international.gc.ca
AEMDispatcher.international.gc.ca
appdemo.international.gc.ca
sdcvpn01h.international.gc.ca
DELHIVPN01H.international.gc.ca
staffing-les.international.gc.ca
rm3hq.international.gc.ca
SPOREVPN01H.international.gc.ca
w06.international.gc.ca
as-dev.international.gc.ca
guestportal.international.gc.ca
FS-QA.international.gc.ca
w05.international.gc.ca
listservdev.international.gc.ca
eam-dev.sp.international.gc.ca
TOKYOVPN01H.international.gc.ca
SP-QA.international.gc.ca
eam.sp.international.gc.ca
collab.international.gc.ca
tcse-ts15.international.gc.ca
travel-smart.international.gc.ca
CRCASVPN01.international.gc.ca
wcdev.international.gc.ca
seoulvpn01h.international.gc.ca
dev-goa-oma.international.gc.ca
wc.international.gc.ca
rm1ac.international.gc.ca
GANZUVPN01H.international.gc.ca
wifi-pilot.international.gc.ca
eam-dev.sp.international.gc.ca
evoswa.international.gc.ca
pi.international.gc.ca
rm2dg.international.gc.ca
pi.international.gc.ca
bilat.international.gc.ca
*.international.gc.ca
*.dev.cloud-nuage.international.gc.ca
intl-ts16.international.gc.ca
aemdispatcher.dev.international.gc.ca
appdemo.international.gc.ca
wc.international.gc.ca
w05.international.gc.ca
signetweb.international.gc.ca
CNGNYVPN01H.international.gc.ca
elang.international.gc.ca
wifiauth1.d.r.dfait-maeci.gc.ca
tradefacts-donneescommerciales.international.gc.ca
mailgateway.international.gc.ca
rm4rz.international.gc.ca
www.listserv.dfait-maeci.gc.ca
signetweb.international.gc.ca
rm2dg.international.gc.ca
elang.international.gc.ca
kompass-iec-eic.international.gc.ca
www1.international.gc.ca
*.dev.cloud-nuage.international.gc.ca
SPOREVPN01H.international.gc.ca
dv05.international.gc.ca
tcsf-ts16.international.gc.ca
FS-DEV.international.gc.ca
www1.international.gc.ca
mailgateway.dev.international.gc.ca
wc.international.gc.ca
lbpvpn01h.international.gc.ca
develang.international.gc.ca
rm1ac.international.gc.ca
mailgateway.dev.international.gc.ca
wc.international.gc.ca
HQL-PMKWC02.p.dfait-maeci.gc.ca

Certificate

The complete raw certificate details for rm2dg.international.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8FA0QVBWtBCGxfOYZXx
+VsU6aAmNTQ/oV96ILhDOjggAO6wNB7KWMC8UbHIZ5XBURXdyBiVmJj3Jjg+FJ9F
8dwukDW1/N+KO8sDEAZF73fUv4iXFlH/M0UUjrp7YcYA/22qySEy1TlIzj0/VFFy
HJRnPR4yHIlWXGDDXfgxcMtC1ICH8hz3W9GHt1Vla3kGUZhtKcyfHYaAbNDGliGh
dLgYGDSPgBcMz6WvOL49c0kUEh4QM0AG4f06xJ6NdXvGSJ77Sj2fbSK+QTXIHAIQ
ussSkoIuWB9M7bxuGZvAghPmDO94V8y2n/Wjs4PY8skFAGELuKN2+9BpK4taRU0W
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 238096507771590788636791927607854865159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 14:12:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-06 14:42:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Affairs Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rm2dg.international.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23196906508238572063086818597532565503614394769916627573497494296701127800770785916277088269804748001955961049320092643931144538419781889704341147811300876561785198622607938848614208362555104908333255315826063445376647920421058900273956924575933114603144364799986543160717399610089304193227683428964575346603247295252384892411347792033562019466135953146979985829978053164759834135418223814666161234390110693041624427980791399218449716294985653164065583578650244499147018739758498260527936022909144362911872800417174067066700947349754787445957040276505075630081543459076035349177321298759649230772846328257363332372173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rm2dg.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RMtest.international.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallas.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallas.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danemark.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danemark.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegecomercial.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delegecomercial.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegecomerciale.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delegecomerciale.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegecommercial.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delegecommercial.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegecommerciale.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delegecommerciale.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegescommerciaux.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delegescommerciaux.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleguecomercial.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deleguecomercial.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleguecomerciale.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deleguecomerciale.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleguecommerciale.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deleguecommercial.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deleguecommerciale.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleguescomerciaux.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deleguescomerciaux.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deleguescommerciaux.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deleguescommerciaux.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denmark.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denmark.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.denver.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detroit.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detroit.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfait.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfait-maeci.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doccan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doccan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominicanrepublic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominicanrepublic.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eau.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eau.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecuador.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecuador.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu-canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edu-canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu-canada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edu-canada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educanada-pro.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu-canadapro.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educanada-pro.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edu-canadapro.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationaucanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educationaucanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationau-incanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educationau-incanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationin-aucanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educationin-aucanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationincanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educationincanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egypt.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egypt.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egypte.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egypte.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsalvador.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsalvador.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equateur.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equateur.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espagne.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espagne.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estonia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estonia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estonie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.estonie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethiopia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethiopia.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethiopie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethiopie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exportcontrols.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exportcontrols.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fac.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fac.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fac-aec.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fac-aec.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femmesdaffairesencommerce.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.femmesdaffairesencommerce.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finland.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finland.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finlande.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finlande.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'germany.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.germany.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghana.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghana.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grece.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grece.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greece.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greece.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guatemala.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guatemala.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guyana.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guyana.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20aac2e36ade2131ba15d7afdc3d14e1b4d01796
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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