asisst-orasi.inspection.gc.ca

- Canadian Food Inspection Agency -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 54:5d:ba:4d:77:3a:ca:54:2c:de:69:a8:20:5f:6b:a8 was issued on by Entrust, Inc..

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Canadian Food Inspection Agency

Organization: Canadian Food Inspection Agency
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 54:5d:ba:4d:77:3a:ca:54:2c:de:69:a8:20:5f:6b:a8
Serial Number (int): 112141813919431254439492869397424335784
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6e:f8:4e:d9:f1:47:8a:91:21:ae:11:b9:2b:1d:ae:d3:ee:7b:24:e8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 80:8e:5e:32:21:63:4f:0d:72:4c:eb:0c:a4:a9:97:2d:c5:e5:c4:a5
Fingerprint (sha256): 8e:36:5d:2c:fa:0c:ff:47:a7:89:94:d9:7e:f8:4b:8a:24:33:7a:e1:4b:02:47:20:a8:4d:16:17:14:56:d9:0a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate asisst-orasi.inspection.gc.ca

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asisst-orasi.inspection.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asisst-orasi.inspection.gc.ca
www.asisst-orasi.inspection.gc.ca
shipmenttracker-suividesexpeditions.inspection.gc.ca
www.shipmenttracker-suividesexpeditions.inspection.gc.ca
shipmenttracker-suividesexpeditions.inspection.canada.ca
www.shipmenttracker-suividesexpeditions.inspection.canada.ca
shipmenttracker-suividesenvois.inspection.gc.ca
www.shipmenttracker-suividesenvois.inspection.gc.ca
shipmenttracker-suividesenvois.inspection.canada.ca
www.shipmenttracker-suividesenvois.inspection.canada.ca
alpha-shipmenttracker-suividesenvois.inspection.canada.ca
www.alpha-shipmenttracker-suividesenvois.inspection.canada.ca

Other certificates including the domain name inspection.gc.ca

(limited to 100 certificates)
services.inspection.gc.ca
apps.cfia-acia.inspection.gc.ca
inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
cfonk1awvasd052.cfia-acia.inspection.gc.ca
cfonk1awvasp122.cfia-acia.inspection.gc.ca
services-pre.cfia-acia.inspection.gc.ca
splunk.cfia-acia.inspection.gc.ca
services1.inspection.gc.ca
CFONK1AWVWSP009.cfia-acia.inspection.gc.ca
CFONK1AWVAST008.CFIA-ACIA.inspection.gc.ca
services1.inspection.gc.ca
avs-svs.inspection.gc.ca
CFONK1AWVASD061.cfia-acia.inspection.gc.ca
NCOTTA330.cfia-acia.inspection.gc.ca
CFONK1AWVASP150.CFIA-ACIA.inspection.gc.ca
AGR.GC.CA
active.inspection.gc.ca
cfonk1awvasd050.cfia-acia.inspection.gc.ca
CFONK1AWVASD070.cfia-acia.inspection.gc.ca
services.inspection.gc.ca
CFONK1AWVASP165.cfia-acia.inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
shipmenttracker-suividesenvois.inspection.gc.ca
cfonk1awvasp136.cfia-acia.inspection.gc.ca
services-pre.cfia-acia.inspection.gc.ca
vpn.inspection.gc.ca
wwwqa.inspection.gc.ca
NCOTTA330.cfia-acia.inspection.gc.ca
inspection.gc.ca
inspection.gc.ca
cfonk1awvasd049.cfia-acia.inspection.gc.ca
inspection.gc.ca
aem-prod-disp.cloud-nuage.inspection.gc.ca
wwwqa.inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
CFONK1AWVASP168.cfia-acia.inspection.gc.ca
services.inspection.gc.ca
cfonk1awvasd051.cfia-acia.inspection.gc.ca
CFONK1AWVASD071.cfia-acia.inspection.gc.ca
splunk.cfia-acia.inspection.gc.ca
CFONK1AWVWSS001.cfia-acia.inspection.gc.ca
avs-svs.inspection.gc.ca
services.inspection.gc.ca
CFONK1AWVASP048.CFIA-ACIA.inspection.gc.ca
secure.inspection.gc.ca
cfonk1awvasd048.cfia-acia.inspection.gc.ca
arcgis.cfia-acia.inspection.gc.ca
avs-svs.inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
int-search-recherche.cfia-acia.inspection.gc.ca
cfonk1awvast006.cfia-acia.inspection.gc.ca
CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca
vpn-bcp.inspection.gc.ca
apps.cfia-acia.inspection.gc.ca
CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca
geo.inspection.gc.ca
cfonk1awvasp120.cfia-acia.inspection.gc.ca
active.inspection.gc.ca
CFONK1AWVASP148.CFIA-ACIA.inspection.gc.ca
sms-sigs.cfia-acia.inspection.gc.ca
BB10UDS.inspection.gc.ca
cfonk1awvasp138.cfia-acia.inspection.gc.ca
prod.inspection.canada.ca
cfonk1awvast005.cfia-acia.inspection.gc.ca
apps.cfia-acia.inspection.gc.ca
smartvue.cfia-acia.inspection.gc.ca
int-search-recherche.cfia-acia.inspection.gc.ca
int-search-recherche.cfia-acia.inspection.gc.ca
active.inspection.gc.ca
phpkb-dev.agr.gc.ca
sso-iu.inspection.gc.ca
active.inspection.gc.ca
inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
splunk.cfia-acia.inspection.gc.ca
dsdpportal.cfia-acia.inspection.gc.ca
cfsin-es-dev.cloud.inspection.gc.ca
CFONK1AWVASD062.cfia-acia.inspection.gc.ca
secure.inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
cfonk1awvasd048.cfia-acia.inspection.gc.ca
asisst-orasi.inspection.gc.ca
wwwqa.inspection.gc.ca
cfonk1awvasd051.cfia-acia.inspection.gc.ca
airs-sari.inspection.gc.ca
phpkb-dev.agr.gc.ca
asisst-orasi.inspection.gc.ca
airs-sari.inspection.gc.ca
apps.cfia-acia.inspection.gc.ca
CFONK1AWVWSP002.cfia-acia.inspection.gc.ca
CFONK1AWVAST010.cfia-acia.inspection.gc.ca
splunk.cfia-acia.inspection.gc.ca
CFONK1AWVWSP005.cfia-acia.inspection.gc.ca
services.inspection.gc.ca
cfsin-rcisa.inspection.gc.ca
cfonk1awvasp120.cfia-acia.inspection.gc.ca
CFONK1AWVASP169.cfia-acia.inspection.gc.ca
CFONK1AWVASP185.cfia-acia.inspection.gc.ca
CFONK1AWVASD063.cfia-acia.inspection.gc.ca

Certificate

The complete raw certificate details for asisst-orasi.inspection.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRn+PqGlwH1Xb7SQ2B7j
mOFYrblUrMIIBYUZnI1U3S6sE0olDgdVyxTuto0pTzbXO17f03oovP0Q1z5iH0er
V8xYV9qCSd/5A1b3NWxqovxV3aBbRzo3uCVOW1FRVhmuCTRCSdC6AqxTTHH/Wyus
JGQyyF3SO0WvmWk5Er5+VuzpmSap7PnMiCch2YsiZw3WcR8l+ynp4M72oUBiap8M
M1xzgsNjp3ZRIDxpqoeeHgCr7tvobWlTyGrI0FKYhZd6/lygLNOAY5z/b656y2fP
uTFvfoFTTpKNLZGEea+OdQ+9Ia3n6lVYVuZOLTxnxlhqOvzHuj2th1fhuR11rsEq
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 112141813919431254439492869397424335784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 19:51:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-06 19:51:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Food Inspection Agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asisst-orasi.inspection.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22356997675616461382627979494652223086689924050376306659845326355664462365333391350689345785096441194401152691369388162624368797028749602202873496261998973937775067456155021453143340929913924847134895534705744476953222685645594818800430876343126910931414682341736886267615987380416965486941898980900759147698719865115312992360966533231267840081627635510607592465603234751343415008473365720175806151080924518029351823692877169284606694988057954452823478884210036994201146795320710952349482167215460167375003416216506730451964996139314091845196058116180892901923537289001221894955969694019108058733361376000511454554751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ef84ed9f1478a9121ae11b92b1daed3ee7b24e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (636 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asisst-orasi.inspection.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asisst-orasi.inspection.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipmenttracker-suividesexpeditions.inspection.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipmenttracker-suividesexpeditions.inspection.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipmenttracker-suividesexpeditions.inspection.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipmenttracker-suividesexpeditions.inspection.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipmenttracker-suividesenvois.inspection.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipmenttracker-suividesenvois.inspection.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipmenttracker-suividesenvois.inspection.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shipmenttracker-suividesenvois.inspection.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha-shipmenttracker-suividesenvois.inspection.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpha-shipmenttracker-suividesenvois.inspection.canada.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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