ns2dclapp.intranet.mbgov.ca
- Department of Finance (Province of Manitoba) -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 51:79:fb:da:d1:50:f9:4b:96:7d:64:25:04:f9:68:db was issued on by Entrust, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Department of Finance (Province of Manitoba)
Organization:
Department of Finance (Province of Manitoba)
State / Province:
Manitoba
Locality: Winnipeg
Country: CA
Locality: Winnipeg
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 51:79:fb:da:d1:50:f9:4b:96:7d:64:25:04:f9:68:dbSerial Number (int): 108300843799791102908996831446465865947
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: d4:23:5c:a2:31:75:b5:42:2f:86:3a:6a:1a:e6:c4:40:e8:72:6d:fe
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): dd:85:37:09:d7:ab:0d:d0:b1:bb:a1:c9:e3:00:68:56:72:6a:38:9d
Fingerprint (sha256): 90:bf:93:0d:c6:c4:70:6f:f1:90:fd:00:a9:41:b5:bf:b3:3b:80:37:c4:65:17:44:22:d1:ed:74:49:ad:72:bc
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate ns2dclapp.intranet.mbgov.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ns2dclapp.intranet.mbgov.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ns2dclapp.intranet.mbgov.ca
Other certificates including the domain name mbgov.ca
(limited to 100 certificates)
mbpdbs0729u.shared.mbgov.ca
webmail.me.mbgov.ca
m3p.intranet.mbgov.ca
MBPAPP1015U.SHARED.MBGOV.CA
wpg212db20-orap.shared.mbgov.ca
app0671d.me.mbgov.ca
MBPAPP1015U.SHARED.MBGOV.CA
app0765u.me.mbgov.ca
guest.me.mbgov.ca
app0753x.me.mbgov.ca
employeeselfservice.me.mbgov.ca
app0625u.me.mbgov.ca
uat.app22.intranet.mbgov.ca
uatweb11.intranet.mbgov.ca
res331vad01.shared.mbgov.ca
web30.intranet.mbgov.ca
webmail.me.mbgov.ca
gomc-1167800.me.mbgov.ca
SSPR.ME.MBGOV.CA
intranet.mbgov.ca
train.m3p.intranet.mbgov.ca
uatweb30.intranet.mbgov.ca
mb1etachyon.me.mbgov.ca
CAMSDMBAD102.ME.MBGOV.CA
mbnw.intranet.mbgov.ca
employeeselfservice.me.mbgov.ca
employeeselfservice.me.mbgov.ca
intranet.mbgov.ca
LYNCPOOL01.ME.MBGOV.CA
clp331xen01.shared.mbgov.ca
employeeselfservice.me.mbgov.ca
CAWNDMBAD107.SHARED.MBGOV.CA
employeeselfservice.me.mbgov.ca
opsfms.intranet.mbgov.ca
intranet.mbgov.ca
webmail.me.mbgov.ca
opsfms.intranet.mbgov.ca
webmail.me.mbgov.ca
app0625u.me.mbgov.ca
app0844p.me.mbgov.ca
web11.intranet.mbgov.ca
LDAP.SHARED.MBGOV.CA
CAWNDMBAD103.SHARED.MBGOV.CA
CAWNDMBAD108.ME.MBGOV.CA
ns2dclapp.intranet.mbgov.ca
uatreporting1.intranet.mbgov.ca
LDAP.SHARED.MBGOV.CA
app0765u.me.mbgov.ca
CAWNDMBAD107.SHARED.MBGOV.CA
uatweb9.intranet.mbgov.ca
mbpdbs0728p.shared.mbgov.ca
LYNCPOOL01.ME.MBGOV.CA
CAMSDMBAD102.ME.MBGOV.CA
CAMSDMBAD103.SHARED.MBGOV.CA
*.secure-wi-fi.me.mbgov.ca
clp331dc01.shared.mbgov.ca
ns2dclapp.intranet.mbgov.ca
app0625u.me.mbgov.ca
ns2ds4app.intranet.mbgov.ca
ns2dclapp.intranet.mbgov.ca
CAWNDMBAD106.ME.MBGOV.CA
MBPDSAPP54V.ME.MBGOV.CA
web11.intranet.mbgov.ca
app0753x.me.mbgov.ca
app0625u.me.mbgov.ca
saps4.intranet.mbgov.ca
uat2.m3p.intranet.mbgov.ca
app0752d.me.mbgov.ca
ns2dclapp.intranet.mbgov.ca
CAWNDMBAD106.ME.MBGOV.CA
CAMSDMBAD103.SHARED.MBGOV.CA
LDAP.ME.MBGOV.CA
MBPDSAPP54V.ME.MBGOV.CA
uat.m3p.intranet.mbgov.ca
LDAP.ME.MBGOV.CA
app0640p.shared.mbgov.ca
uatweb30.intranet.mbgov.ca
CAWNDMBAD108.ME.MBGOV.CA
web11.intranet.mbgov.ca
webmail.me.mbgov.ca
wpg212db20-orap.shared.mbgov.ca
mb1etachyon.me.mbgov.ca
*.mbnw.intranet.mbgov.ca
EDGEPOOL01.ME.MBGOV.CA
intranet.mbgov.ca
CAWNDMBAD102.ME.MBGOV.CA
web30.intranet.mbgov.ca
CAWNDMBAD103.SHARED.MBGOV.CA
LYNCPOOL01.ME.MBGOV.CA
web9.intranet.mbgov.ca
CAWNDMBAD102.ME.MBGOV.CA
webmail.me.mbgov.ca
m3p.intranet.mbgov.ca
MBPAPP1015U.SHARED.MBGOV.CA
wpg212db20-orap.shared.mbgov.ca
app0671d.me.mbgov.ca
MBPAPP1015U.SHARED.MBGOV.CA
app0765u.me.mbgov.ca
guest.me.mbgov.ca
app0753x.me.mbgov.ca
employeeselfservice.me.mbgov.ca
app0625u.me.mbgov.ca
uat.app22.intranet.mbgov.ca
uatweb11.intranet.mbgov.ca
res331vad01.shared.mbgov.ca
web30.intranet.mbgov.ca
webmail.me.mbgov.ca
gomc-1167800.me.mbgov.ca
SSPR.ME.MBGOV.CA
intranet.mbgov.ca
train.m3p.intranet.mbgov.ca
uatweb30.intranet.mbgov.ca
mb1etachyon.me.mbgov.ca
CAMSDMBAD102.ME.MBGOV.CA
mbnw.intranet.mbgov.ca
employeeselfservice.me.mbgov.ca
employeeselfservice.me.mbgov.ca
intranet.mbgov.ca
LYNCPOOL01.ME.MBGOV.CA
clp331xen01.shared.mbgov.ca
employeeselfservice.me.mbgov.ca
CAWNDMBAD107.SHARED.MBGOV.CA
employeeselfservice.me.mbgov.ca
opsfms.intranet.mbgov.ca
intranet.mbgov.ca
webmail.me.mbgov.ca
opsfms.intranet.mbgov.ca
webmail.me.mbgov.ca
app0625u.me.mbgov.ca
app0844p.me.mbgov.ca
web11.intranet.mbgov.ca
LDAP.SHARED.MBGOV.CA
CAWNDMBAD103.SHARED.MBGOV.CA
CAWNDMBAD108.ME.MBGOV.CA
ns2dclapp.intranet.mbgov.ca
uatreporting1.intranet.mbgov.ca
LDAP.SHARED.MBGOV.CA
app0765u.me.mbgov.ca
CAWNDMBAD107.SHARED.MBGOV.CA
uatweb9.intranet.mbgov.ca
mbpdbs0728p.shared.mbgov.ca
LYNCPOOL01.ME.MBGOV.CA
CAMSDMBAD102.ME.MBGOV.CA
CAMSDMBAD103.SHARED.MBGOV.CA
*.secure-wi-fi.me.mbgov.ca
clp331dc01.shared.mbgov.ca
ns2dclapp.intranet.mbgov.ca
app0625u.me.mbgov.ca
ns2ds4app.intranet.mbgov.ca
ns2dclapp.intranet.mbgov.ca
CAWNDMBAD106.ME.MBGOV.CA
MBPDSAPP54V.ME.MBGOV.CA
web11.intranet.mbgov.ca
app0753x.me.mbgov.ca
app0625u.me.mbgov.ca
saps4.intranet.mbgov.ca
uat2.m3p.intranet.mbgov.ca
app0752d.me.mbgov.ca
ns2dclapp.intranet.mbgov.ca
CAWNDMBAD106.ME.MBGOV.CA
CAMSDMBAD103.SHARED.MBGOV.CA
LDAP.ME.MBGOV.CA
MBPDSAPP54V.ME.MBGOV.CA
uat.m3p.intranet.mbgov.ca
LDAP.ME.MBGOV.CA
app0640p.shared.mbgov.ca
uatweb30.intranet.mbgov.ca
CAWNDMBAD108.ME.MBGOV.CA
web11.intranet.mbgov.ca
webmail.me.mbgov.ca
wpg212db20-orap.shared.mbgov.ca
mb1etachyon.me.mbgov.ca
*.mbnw.intranet.mbgov.ca
EDGEPOOL01.ME.MBGOV.CA
intranet.mbgov.ca
CAWNDMBAD102.ME.MBGOV.CA
web30.intranet.mbgov.ca
CAWNDMBAD103.SHARED.MBGOV.CA
LYNCPOOL01.ME.MBGOV.CA
web9.intranet.mbgov.ca
CAWNDMBAD102.ME.MBGOV.CA
Certificate
The complete raw certificate details for ns2dclapp.intranet.mbgov.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIQUXn72tFQ+UuWfWQlBPlo2zANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDAyMTQxNjEzMzdaFw0yNTAzMTQxNjEzMzZaMIGQMQswCQYDVQQGEwJDQTERMA8G A1UECBMITWFuaXRvYmExETAPBgNVBAcTCFdpbm5pcGVnMTUwMwYDVQQKEyxEZXBh cnRtZW50IG9mIEZpbmFuY2UgKFByb3ZpbmNlIG9mIE1hbml0b2JhKTEkMCIGA1UE AxMbbnMyZGNsYXBwLmludHJhbmV0Lm1iZ292LmNhMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAjtGY3UvU8W36P0RbgdfzYWh0/IYc1ybLSaU9PA0a9rBp QDc7gR/Kc8KgczfZ1XXM+V55aXpYBcN+qMV2KZDklrrKT4faK28BfqkK9Lwqvh0m WXKkzCrj3yH2hy5epneVneOnjSE36CWzi8OS+hHW0+U7XlWn+BDts3FIfD2QE2z8 fbJ5kaVrvyb3Q1c7r5D2QTcLWjjuE3eq8rMEZ6p4K1KuoVjGeBAQCiI2/LK+a0Y5 ekhQfiQ/mIWOJ4U3ZtTCuLgnk2DkCp2Uf7TPYTlRBWDQGhNQHB1xHYopi21s7vH/ vXebandMxvXHZUdYWxUiHv0/zlRkHk7dPuAs+B3Rt5RSZJTHj4GoNsC8TWwpKeHY 9sd6s7KuUrZMs7NlmQTL1cOb7MPfLs58TSySFCWAW/MQW3/we/Wco7KKKNvn8vyl LvJ8A+kq9FKg8d7BVAeRqiD4Rz3p2N9/osHVcaLp0roFVI1Y2sEERpRzeZrdo7Ag 0J1rlRHbkjIngCiBKO1AR5Br73CrbaMxE2E7pcwkYy82goktUhuEatJKEvD2wam8 A7UPcaA/A6QmhnCCeO8sMiCY0PVz7/BVAkhHFp+mU9ZhgPuhEHa34husrialB8GS i0LUdHWcoiNIzYxQaluYgVUmRPrp+wXtNMuJwsI+k4jgOSm5s60L7f+6OhJP9J0C AwEAAaOCAXIwggFuMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNQjXKIxdbVCL4Y6 ahrmxEDocm3+MB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MGgGCCsG AQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQw MwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2 LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xl dmVsMWsuY3JsMCYGA1UdEQQfMB2CG25zMmRjbGFwcC5pbnRyYW5ldC5tYmdvdi5j YTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MBMGA1UdIAQMMAowCAYGZ4EMAQICMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAk2j1bR2FnaTIGkidbzdhycQe3vwDMqeQNUJw7gA9CsC1C CKPcZuZIIvW3NS3yPBEp3+cV3Hz66gzZ2M8N0+Swn1bgWiMQ7QyJC6POW4wYqiYl CyI/TAE9bj3ovCcYV2y1UPbtpES0rufp321b/16qsYGbxoIskZXBiu0ar8UizlU/ fcP0rxn5eA1wGVggcvNVaRydz9grKbEH25XvzJAfwBTx3W4EDyMMTGz8LmCkJR/H h/wgVGoJpLBy+BAvFWTkbRNAonEO2KP8PVEpeHQG0wUVfEkCt66RV6ucTJNUwG29 mSnJ0zBdkgF23+tBzo/dJXDTv93VcGnEQ7FJ2VR/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjtGY3UvU8W36P0Rbgdfz YWh0/IYc1ybLSaU9PA0a9rBpQDc7gR/Kc8KgczfZ1XXM+V55aXpYBcN+qMV2KZDk lrrKT4faK28BfqkK9Lwqvh0mWXKkzCrj3yH2hy5epneVneOnjSE36CWzi8OS+hHW 0+U7XlWn+BDts3FIfD2QE2z8fbJ5kaVrvyb3Q1c7r5D2QTcLWjjuE3eq8rMEZ6p4 K1KuoVjGeBAQCiI2/LK+a0Y5ekhQfiQ/mIWOJ4U3ZtTCuLgnk2DkCp2Uf7TPYTlR BWDQGhNQHB1xHYopi21s7vH/vXebandMxvXHZUdYWxUiHv0/zlRkHk7dPuAs+B3R t5RSZJTHj4GoNsC8TWwpKeHY9sd6s7KuUrZMs7NlmQTL1cOb7MPfLs58TSySFCWA W/MQW3/we/Wco7KKKNvn8vylLvJ8A+kq9FKg8d7BVAeRqiD4Rz3p2N9/osHVcaLp 0roFVI1Y2sEERpRzeZrdo7Ag0J1rlRHbkjIngCiBKO1AR5Br73CrbaMxE2E7pcwk Yy82goktUhuEatJKEvD2wam8A7UPcaA/A6QmhnCCeO8sMiCY0PVz7/BVAkhHFp+m U9ZhgPuhEHa34husrialB8GSi0LUdHWcoiNIzYxQaluYgVUmRPrp+wXtNMuJwsI+ k4jgOSm5s60L7f+6OhJP9J0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 108300843799791102908996831446465865947 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 16:13:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 16:13:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manitoba' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winnipeg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Finance (Province of Manitoba)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ns2dclapp.intranet.mbgov.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 582649620450521866378574237598262891526322642342185444502813657717838653369291302797700193646724846361780882294850864790604730524945878672054816287009408250196691691961014671249390261477692205650096221297862680283392947293308651502279893751614196452545275854240345414610544836173235398153719359203576315037141709238291972729855034585433782722113412468789463092496330592146836530231345909210657813672084174242678084326497183860373074384737598899250103849072966323275855785679316306748769720692377725691019151923092726429242644555219085286227552547093905969400268795450119888753148399334399721302374569897712081046336906185882015816840907430480852686318642748205018796451690853960611157050204487985848069993932914919068135671946693319067123502111243106827733566542789527478265465335529509610363474680912169314136774311031257144837430093306527786061677631254880600733295175783747537828703872257967813937066919992578375242661246592748946256694124915603617275634081935422135778746529161515205084351443532393566842082970351234428858384846246070487114673123658634858810698871806149941331036588508088454392341688236822373746772735533142243771883737243869394931422414881187361523622777375401598321940114452575286475612404265851198461235426461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d4235ca23175b5422f863a6a1ae6c440e8726dfe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns2dclapp.intranet.mbgov.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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