aids.gc.ca

- Health Canada (Department of Health) -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ce:9a:a0:fc:82:d4:d2:d1:00:00:00:00:50:fc:0b:be was issued on by Entrust, Inc..

With 195 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Health Canada (Department of Health)

Organization: Health Canada (Department of Health)
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ce:9a:a0:fc:82:d4:d2:d1:00:00:00:00:50:fc:0b:be
Serial Number (int): 274623846039430910237722930337141230526
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 11:f4:06:bf:91:78:9a:c9:b9:94:7a:cb:bc:97:ab:f9:da:70:8b:56
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): de:b5:35:c3:6a:95:72:f0:1f:a1:85:6c:fe:f2:b3:5e:c3:09:78:e2
Fingerprint (sha256): 92:31:2e:79:e4:4d:0e:93:d0:be:5a:5d:bb:11:df:0c:85:b4:85:19:8e:bc:28:18:4e:df:b6:2f:02:37:48:12

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate aids.gc.ca

195

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aids.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aids.gc.ca
www.aids.gc.ca
aids-sida.gc.ca
alimentsnouveaux.gc.ca
www.alimentsnouveaux.gc.ca
beactive.gc.ca
www.beactive.gc.ca
camr-rcam.gc.ca
www.camr-rcam.gc.ca
camr.gc.ca
www.camr.gc.ca
catmat.gc.ca
www.catmat.gc.ca
ccmtmv.gc.ca
www.ccmtmv.gc.ca
ccni.gc.ca
www.ccni.gc.ca
ccrmd-hmirc.gc.ca
www.ccrmd-hmirc.gc.ca
ccrmd.gc.ca
www.ccrmd.gc.ca
child-day.gc.ca
www.child-day.gc.ca
childday.gc.ca
www.childday.gc.ca
chvi-icvv.gc.ca
www.chvi-icvv.gc.ca
canadianbiosafetystandards.collaboration.gc.ca
normescanadiennesbiosecurite.collaboration.gc.ca
www.canadianbiosafetystandards.collaboration.gc.ca
www.normescanadiennesbiosecurite.collaboration.gc.ca
communicationdesrisques.gc.ca
www.communicationdesrisques.gc.ca
conditionphysique.gc.ca
www.conditionphysique.gc.ca
diabete-diabetes.gc.ca
www.diabete-diabetes.gc.ca
diabete.gc.ca
www.diabete.gc.ca
diabetes-diabete.gc.ca
www.diabetes-diabete.gc.ca
diabetes.gc.ca
www.diabetes.gc.ca
eatwellbeactive.gc.ca
www.eatwellbeactive.gc.ca
fitness.gc.ca
www.fitness.gc.ca
gosmokefree.gc.ca
www.gosmokefree.gc.ca
grossesseensante.gc.ca
www.grossesseensante.gc.ca
bpcp.hc-sc.gc.ca
dpsn.hc-sc.gc.ca
nhpd.hc-sc.gc.ca
ocapi.hc-sc.gc.ca
vetdrugs-medsvet.hc-sc.gc.ca
www.bpcp.hc-sc.gc.ca
www.dpsn.hc-sc.gc.ca
www.nhpd.hc-sc.gc.ca
www.ocapi.hc-sc.gc.ca
www.vetdrugs-medsvet.hc-sc.gc.ca
healthsurv.gc.ca
www.healthsurv.gc.ca
healthypregnancy.gc.ca
www.healthypregnancy.gc.ca
hepatitec-hepc.gc.ca
www.hepatitec-hepc.gc.ca
hepatitec.gc.ca
www.hepatitec.gc.ca
hepc-hepatitec.gc.ca
www.hepc-hepatitec.gc.ca
hepc.gc.ca
www.hepc.gc.ca
hivvaccine.gc.ca
www.hivvaccine.gc.ca
hmirc-ccrmd.gc.ca
www.hmirc-ccrmd.gc.ca
hmirc.gc.ca
www.hmirc.gc.ca
icvv-chvi.gc.ca
www.icvv-chvi.gc.ca
journee-enfant.gc.ca
www.journee-enfant.gc.ca
journeeenfant.gc.ca
www.journeeenfant.gc.ca
lnm-nml.gc.ca
www.lnm-nml.gc.ca
mangezbiensoyezactif.gc.ca
www.mangezbiensoyezactif.gc.ca
medeffect-medeffet.gc.ca
www.medeffect-medeffet.gc.ca
medeffect.gc.ca
www.medeffect.gc.ca
medeffet.gc.ca
www.medeffet.gc.ca
naci.gc.ca
www.naci.gc.ca
nads-sna.gc.ca
www.nads-sna.gc.ca
nationalantidrugstrategy.gc.ca
www.nationalantidrugstrategy.gc.ca
ndss-snsd.gc.ca
www.ndss-snsd.gc.ca
ndss.gc.ca
www.ndss.gc.ca
niloccidental.gc.ca
www.niloccidental.gc.ca
nml-lnm.gc.ca
www.nml-lnm.gc.ca
notresantenotreavenir.gc.ca
www.notresantenotreavenir.gc.ca
novelfoods.gc.ca
www.novelfoods.gc.ca
ohof-nsna.gc.ca
www.ohof-nsna.gc.ca
ourhealthourfuture.gc.ca
www.ourhealthourfuture.gc.ca
pandemicplan.gc.ca
www.pandemicplan.gc.ca
infobase.phac-aspc.gc.ca
www.infobase.phac-aspc.gc.ca
planpandemie.gc.ca
www.planpandemie.gc.ca
pmra-arla.gc.ca
www.pmra-arla.gc.ca
publichealth.gc.ca
www.publichealth.gc.ca
rcam-camr.gc.ca
www.rcam-camr.gc.ca
rcam.gc.ca
www.rcam.gc.ca
riskcommunications.gc.ca
www.riskcommunications.gc.ca
santepublique.gc.ca
www.santepublique.gc.ca
santevoyage.gc.ca
www.santevoyage.gc.ca
sida-aids.gc.ca
www.sida-aids.gc.ca
sida.gc.ca
www.sida.gc.ca
simdut.gc.ca
www.simdut.gc.ca
sna-nads.gc.ca
www.sna-nads.gc.ca
snsd.gc.ca
www.snsd.gc.ca
soyezactif.gc.ca
www.soyezactif.gc.ca
strategienationaleantidrogue.gc.ca
www.strategienationaleantidrogue.gc.ca
surveilsante.gc.ca
www.surveilsante.gc.ca
travelhealth.gc.ca
www.travelhealth.gc.ca
vaccinvih.gc.ca
www.vaccinvih.gc.ca
virusduniloccidental.gc.ca
www.virusduniloccidental.gc.ca
virusniloccidental.gc.ca
www.virusniloccidental.gc.ca
viruswestnile.gc.ca
www.viruswestnile.gc.ca
vivezsansfumee.gc.ca
www.vivezsansfumee.gc.ca
westnile.gc.ca
www.westnile.gc.ca
westnilevirus.gc.ca
www.westnilevirus.gc.ca
whmis.gc.ca
www.whmis.gc.ca
publichealthagencyofcanada.ca
agencedelasantepubliqueducanada.ca
fightflu.ca
combattezlagrippe.ca
towardsahealthiercanada.ca
versuncanadaplussain.ca
healthycanadians.ca
canadiensensante.ca
gosmokefree.ca
vivezsansfumee.ca
infotobacco.com
infotabac.com
www.publichealthagencyofcanada.ca
www.agencedelasantepubliqueducanada.ca
www.fightflu.ca
www.combattezlagrippe.ca
www.towardsahealthiercanada.ca
www.versuncanadaplussain.ca
www.healthycanadians.ca
www.canadiensensante.ca
www.gosmokefree.ca
www.vivezsansfumee.ca
www.infotobacco.com
www.infotabac.com

Other certificates including the domain name aids.gc.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for aids.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIWIzCCFQugAwIBAgIRAM6aoPyC1NLRAAAAAFD8C74wDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkxMjE4MTg1OTAyWhcNMjIwMzE3MTkyOTAxWjB0MQswCQYDVQQGEwJDQTEQMA4G
A1UECBMHT250YXJpbzEPMA0GA1UEBxMGT3R0YXdhMS0wKwYDVQQKEyRIZWFsdGgg
Q2FuYWRhIChEZXBhcnRtZW50IG9mIEhlYWx0aCkxEzARBgNVBAMTCmFpZHMuZ2Mu
Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IPp+kiJLe+haKsBH
1APlwAEf6tR146e7DODPm4309PDq6Uvf0V3j2yAM/dNJNFUmu1nOx0CyDnpznF4z
XfK4x0PkktzGkcHX5qMKdPRTqYw6VGS5F+I51YMqDbK3GEA1HBocHbSVAf7hcs1F
Opod62M/EVkcDO8dzhkojti/kQqReITxKaCYrR9Q+fF13hyNoIa+b9lGlKHQGBUW
SPq744TUD5UAVAlVAnbiBegAtnlAw+kXkm+AlcvDglh+RYjUC1TJjIaXYs4OLihH
79D12MS+BCJ58bU4VzUIrbMVd1rK80TtrZWq0q0iAHIUFwmGfXytY/1Mhk4u5aVD
3UX5AgMBAAGjghJnMIISYzATBgorBgEEAdZ5AgQDAQH/BAIFADCCEOQGA1UdEQSC
ENswghDXggphaWRzLmdjLmNhgg53d3cuYWlkcy5nYy5jYYIPYWlkcy1zaWRhLmdj
LmNhghZhbGltZW50c25vdXZlYXV4LmdjLmNhghp3d3cuYWxpbWVudHNub3V2ZWF1
eC5nYy5jYYIOYmVhY3RpdmUuZ2MuY2GCEnd3dy5iZWFjdGl2ZS5nYy5jYYIPY2Ft
ci1yY2FtLmdjLmNhghN3d3cuY2Ftci1yY2FtLmdjLmNhggpjYW1yLmdjLmNhgg53
d3cuY2Ftci5nYy5jYYIMY2F0bWF0LmdjLmNhghB3d3cuY2F0bWF0LmdjLmNhggxj
Y210bXYuZ2MuY2GCEHd3dy5jY210bXYuZ2MuY2GCCmNjbmkuZ2MuY2GCDnd3dy5j
Y25pLmdjLmNhghFjY3JtZC1obWlyYy5nYy5jYYIVd3d3LmNjcm1kLWhtaXJjLmdj
LmNhggtjY3JtZC5nYy5jYYIPd3d3LmNjcm1kLmdjLmNhgg9jaGlsZC1kYXkuZ2Mu
Y2GCE3d3dy5jaGlsZC1kYXkuZ2MuY2GCDmNoaWxkZGF5LmdjLmNhghJ3d3cuY2hp
bGRkYXkuZ2MuY2GCD2NodmktaWN2di5nYy5jYYITd3d3LmNodmktaWN2di5nYy5j
YYIuY2FuYWRpYW5iaW9zYWZldHlzdGFuZGFyZHMuY29sbGFib3JhdGlvbi5nYy5j
YYIwbm9ybWVzY2FuYWRpZW5uZXNiaW9zZWN1cml0ZS5jb2xsYWJvcmF0aW9uLmdj
LmNhgjJ3d3cuY2FuYWRpYW5iaW9zYWZldHlzdGFuZGFyZHMuY29sbGFib3JhdGlv
bi5nYy5jYYI0d3d3Lm5vcm1lc2NhbmFkaWVubmVzYmlvc2VjdXJpdGUuY29sbGFi
b3JhdGlvbi5nYy5jYYIdY29tbXVuaWNhdGlvbmRlc3Jpc3F1ZXMuZ2MuY2GCIXd3
dy5jb21tdW5pY2F0aW9uZGVzcmlzcXVlcy5nYy5jYYIXY29uZGl0aW9ucGh5c2lx
dWUuZ2MuY2GCG3d3dy5jb25kaXRpb25waHlzaXF1ZS5nYy5jYYIWZGlhYmV0ZS1k
aWFiZXRlcy5nYy5jYYIad3d3LmRpYWJldGUtZGlhYmV0ZXMuZ2MuY2GCDWRpYWJl
dGUuZ2MuY2GCEXd3dy5kaWFiZXRlLmdjLmNhghZkaWFiZXRlcy1kaWFiZXRlLmdj
LmNhghp3d3cuZGlhYmV0ZXMtZGlhYmV0ZS5nYy5jYYIOZGlhYmV0ZXMuZ2MuY2GC
End3dy5kaWFiZXRlcy5nYy5jYYIVZWF0d2VsbGJlYWN0aXZlLmdjLmNhghl3d3cu
ZWF0d2VsbGJlYWN0aXZlLmdjLmNhgg1maXRuZXNzLmdjLmNhghF3d3cuZml0bmVz
cy5nYy5jYYIRZ29zbW9rZWZyZWUuZ2MuY2GCFXd3dy5nb3Ntb2tlZnJlZS5nYy5j
YYIWZ3Jvc3Nlc3NlZW5zYW50ZS5nYy5jYYIad3d3Lmdyb3NzZXNzZWVuc2FudGUu
Z2MuY2GCEGJwY3AuaGMtc2MuZ2MuY2GCEGRwc24uaGMtc2MuZ2MuY2GCEG5ocGQu
aGMtc2MuZ2MuY2GCEW9jYXBpLmhjLXNjLmdjLmNhghx2ZXRkcnVncy1tZWRzdmV0
LmhjLXNjLmdjLmNhghR3d3cuYnBjcC5oYy1zYy5nYy5jYYIUd3d3LmRwc24uaGMt
c2MuZ2MuY2GCFHd3dy5uaHBkLmhjLXNjLmdjLmNhghV3d3cub2NhcGkuaGMtc2Mu
Z2MuY2GCIHd3dy52ZXRkcnVncy1tZWRzdmV0LmhjLXNjLmdjLmNhghBoZWFsdGhz
dXJ2LmdjLmNhghR3d3cuaGVhbHRoc3Vydi5nYy5jYYIWaGVhbHRoeXByZWduYW5j
eS5nYy5jYYIad3d3LmhlYWx0aHlwcmVnbmFuY3kuZ2MuY2GCFGhlcGF0aXRlYy1o
ZXBjLmdjLmNhghh3d3cuaGVwYXRpdGVjLWhlcGMuZ2MuY2GCD2hlcGF0aXRlYy5n
Yy5jYYITd3d3LmhlcGF0aXRlYy5nYy5jYYIUaGVwYy1oZXBhdGl0ZWMuZ2MuY2GC
GHd3dy5oZXBjLWhlcGF0aXRlYy5nYy5jYYIKaGVwYy5nYy5jYYIOd3d3LmhlcGMu
Z2MuY2GCEGhpdnZhY2NpbmUuZ2MuY2GCFHd3dy5oaXZ2YWNjaW5lLmdjLmNhghFo
bWlyYy1jY3JtZC5nYy5jYYIVd3d3LmhtaXJjLWNjcm1kLmdjLmNhggtobWlyYy5n
Yy5jYYIPd3d3LmhtaXJjLmdjLmNhgg9pY3Z2LWNodmkuZ2MuY2GCE3d3dy5pY3Z2
LWNodmkuZ2MuY2GCFGpvdXJuZWUtZW5mYW50LmdjLmNhghh3d3cuam91cm5lZS1l
bmZhbnQuZ2MuY2GCE2pvdXJuZWVlbmZhbnQuZ2MuY2GCF3d3dy5qb3VybmVlZW5m
YW50LmdjLmNhgg1sbm0tbm1sLmdjLmNhghF3d3cubG5tLW5tbC5nYy5jYYIabWFu
Z2V6YmllbnNveWV6YWN0aWYuZ2MuY2GCHnd3dy5tYW5nZXpiaWVuc295ZXphY3Rp
Zi5nYy5jYYIYbWVkZWZmZWN0LW1lZGVmZmV0LmdjLmNhghx3d3cubWVkZWZmZWN0
LW1lZGVmZmV0LmdjLmNhgg9tZWRlZmZlY3QuZ2MuY2GCE3d3dy5tZWRlZmZlY3Qu
Z2MuY2GCDm1lZGVmZmV0LmdjLmNhghJ3d3cubWVkZWZmZXQuZ2MuY2GCCm5hY2ku
Z2MuY2GCDnd3dy5uYWNpLmdjLmNhgg5uYWRzLXNuYS5nYy5jYYISd3d3Lm5hZHMt
c25hLmdjLmNhgh5uYXRpb25hbGFudGlkcnVnc3RyYXRlZ3kuZ2MuY2GCInd3dy5u
YXRpb25hbGFudGlkcnVnc3RyYXRlZ3kuZ2MuY2GCD25kc3Mtc25zZC5nYy5jYYIT
d3d3Lm5kc3Mtc25zZC5nYy5jYYIKbmRzcy5nYy5jYYIOd3d3Lm5kc3MuZ2MuY2GC
E25pbG9jY2lkZW50YWwuZ2MuY2GCF3d3dy5uaWxvY2NpZGVudGFsLmdjLmNhgg1u
bWwtbG5tLmdjLmNhghF3d3cubm1sLWxubS5nYy5jYYIbbm90cmVzYW50ZW5vdHJl
YXZlbmlyLmdjLmNhgh93d3cubm90cmVzYW50ZW5vdHJlYXZlbmlyLmdjLmNhghBu
b3ZlbGZvb2RzLmdjLmNhghR3d3cubm92ZWxmb29kcy5nYy5jYYIPb2hvZi1uc25h
LmdjLmNhghN3d3cub2hvZi1uc25hLmdjLmNhghhvdXJoZWFsdGhvdXJmdXR1cmUu
Z2MuY2GCHHd3dy5vdXJoZWFsdGhvdXJmdXR1cmUuZ2MuY2GCEnBhbmRlbWljcGxh
bi5nYy5jYYIWd3d3LnBhbmRlbWljcGxhbi5nYy5jYYIYaW5mb2Jhc2UucGhhYy1h
c3BjLmdjLmNhghx3d3cuaW5mb2Jhc2UucGhhYy1hc3BjLmdjLmNhghJwbGFucGFu
ZGVtaWUuZ2MuY2GCFnd3dy5wbGFucGFuZGVtaWUuZ2MuY2GCD3BtcmEtYXJsYS5n
Yy5jYYITd3d3LnBtcmEtYXJsYS5nYy5jYYIScHVibGljaGVhbHRoLmdjLmNhghZ3
d3cucHVibGljaGVhbHRoLmdjLmNhgg9yY2FtLWNhbXIuZ2MuY2GCE3d3dy5yY2Ft
LWNhbXIuZ2MuY2GCCnJjYW0uZ2MuY2GCDnd3dy5yY2FtLmdjLmNhghhyaXNrY29t
bXVuaWNhdGlvbnMuZ2MuY2GCHHd3dy5yaXNrY29tbXVuaWNhdGlvbnMuZ2MuY2GC
E3NhbnRlcHVibGlxdWUuZ2MuY2GCF3d3dy5zYW50ZXB1YmxpcXVlLmdjLmNhghFz
YW50ZXZveWFnZS5nYy5jYYIVd3d3LnNhbnRldm95YWdlLmdjLmNhgg9zaWRhLWFp
ZHMuZ2MuY2GCE3d3dy5zaWRhLWFpZHMuZ2MuY2GCCnNpZGEuZ2MuY2GCDnd3dy5z
aWRhLmdjLmNhggxzaW1kdXQuZ2MuY2GCEHd3dy5zaW1kdXQuZ2MuY2GCDnNuYS1u
YWRzLmdjLmNhghJ3d3cuc25hLW5hZHMuZ2MuY2GCCnNuc2QuZ2MuY2GCDnd3dy5z
bnNkLmdjLmNhghBzb3llemFjdGlmLmdjLmNhghR3d3cuc295ZXphY3RpZi5nYy5j
YYIic3RyYXRlZ2llbmF0aW9uYWxlYW50aWRyb2d1ZS5nYy5jYYImd3d3LnN0cmF0
ZWdpZW5hdGlvbmFsZWFudGlkcm9ndWUuZ2MuY2GCEnN1cnZlaWxzYW50ZS5nYy5j
YYIWd3d3LnN1cnZlaWxzYW50ZS5nYy5jYYISdHJhdmVsaGVhbHRoLmdjLmNhghZ3
d3cudHJhdmVsaGVhbHRoLmdjLmNhgg92YWNjaW52aWguZ2MuY2GCE3d3dy52YWNj
aW52aWguZ2MuY2GCGnZpcnVzZHVuaWxvY2NpZGVudGFsLmdjLmNhgh53d3cudmly
dXNkdW5pbG9jY2lkZW50YWwuZ2MuY2GCGHZpcnVzbmlsb2NjaWRlbnRhbC5nYy5j
YYIcd3d3LnZpcnVzbmlsb2NjaWRlbnRhbC5nYy5jYYITdmlydXN3ZXN0bmlsZS5n
Yy5jYYIXd3d3LnZpcnVzd2VzdG5pbGUuZ2MuY2GCFHZpdmV6c2Fuc2Z1bWVlLmdj
LmNhghh3d3cudml2ZXpzYW5zZnVtZWUuZ2MuY2GCDndlc3RuaWxlLmdjLmNhghJ3
d3cud2VzdG5pbGUuZ2MuY2GCE3dlc3RuaWxldmlydXMuZ2MuY2GCF3d3dy53ZXN0
bmlsZXZpcnVzLmdjLmNhggt3aG1pcy5nYy5jYYIPd3d3LndobWlzLmdjLmNhgh1w
dWJsaWNoZWFsdGhhZ2VuY3lvZmNhbmFkYS5jYYIiYWdlbmNlZGVsYXNhbnRlcHVi
bGlxdWVkdWNhbmFkYS5jYYILZmlnaHRmbHUuY2GCFGNvbWJhdHRlemxhZ3JpcHBl
LmNhghp0b3dhcmRzYWhlYWx0aGllcmNhbmFkYS5jYYIXdmVyc3VuY2FuYWRhcGx1
c3NhaW4uY2GCE2hlYWx0aHljYW5hZGlhbnMuY2GCE2NhbmFkaWVuc2Vuc2FudGUu
Y2GCDmdvc21va2VmcmVlLmNhghF2aXZlenNhbnNmdW1lZS5jYYIPaW5mb3RvYmFj
Y28uY29tgg1pbmZvdGFiYWMuY29tgiF3d3cucHVibGljaGVhbHRoYWdlbmN5b2Zj
YW5hZGEuY2GCJnd3dy5hZ2VuY2VkZWxhc2FudGVwdWJsaXF1ZWR1Y2FuYWRhLmNh
gg93d3cuZmlnaHRmbHUuY2GCGHd3dy5jb21iYXR0ZXpsYWdyaXBwZS5jYYIed3d3
LnRvd2FyZHNhaGVhbHRoaWVyY2FuYWRhLmNhght3d3cudmVyc3VuY2FuYWRhcGx1
c3NhaW4uY2GCF3d3dy5oZWFsdGh5Y2FuYWRpYW5zLmNhghd3d3cuY2FuYWRpZW5z
ZW5zYW50ZS5jYYISd3d3Lmdvc21va2VmcmVlLmNhghV3d3cudml2ZXpzYW5zZnVt
ZWUuY2GCE3d3dy5pbmZvdG9iYWNjby5jb22CEXd3dy5pbmZvdGFiYWMuY29tMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYD
VR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNy
bDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDov
L3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAj
BggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKG
J2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSME
GDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUEfQGv5F4msm5lHrL
vJer+dpwi1YwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAM+KP9K/gcC66
PzIJvq16a2904N3IVnXqglRUvo/klBaUb3DPBE01T9aQDnTA5yJhZtGi/L/he5SB
eAWJPN46iFELkERcMLHk3nHdiYm/NclzT2/Tl/gSMbxeUfKf/s/b3DTspJTycAri
dh9vS5t316PPE7iO63JPa90C1jQDEbaq1f6C79AQoXI+5GMxjBXAtw4z/qq/EDgt
M5uDgOzJivJWdRx9Tq2tHsVpyRuYK8NKzGQ+1z4hZZXiiCxo+627DbssE5zIuUSa
2xbFMHNLXwsrQoiaclRCB4pHogMsjp6JXitYH2yTKaqrbAtPol01IEN0ikch3i85
MUgPtoOUnQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSD6fpIiS3voWirAR9QD
5cABH+rUdeOnuwzgz5uN9PTw6ulL39Fd49sgDP3TSTRVJrtZzsdAsg56c5xeM13y
uMdD5JLcxpHB1+ajCnT0U6mMOlRkuRfiOdWDKg2ytxhANRwaHB20lQH+4XLNRTqa
HetjPxFZHAzvHc4ZKI7Yv5EKkXiE8SmgmK0fUPnxdd4cjaCGvm/ZRpSh0BgVFkj6
u+OE1A+VAFQJVQJ24gXoALZ5QMPpF5JvgJXLw4JYfkWI1AtUyYyGl2LODi4oR+/Q
9djEvgQiefG1OFc1CK2zFXdayvNE7a2VqtKtIgByFBcJhn18rWP9TIZOLuWlQ91F
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274623846039430910237722930337141230526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 18:59:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-17 19:29:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Health Canada (Department of Health)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aids.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23875301939990853773155179731181723702073173503995899879821690605518276925582888657028356322575947799205666858561821595740670256422492766001527460098149467107722175869544495086480710159661614368835410537608387691571117482598005296225341502765287419564376980094891622905534043253950366597004247489665780615186275085485067393090871543876350357885516230655839569701926411406601702591979426008761244363940692216689696039296133160849719830486188785886023163271982282982093041435700835523332748155072943739299136258270100681524091848092950617939747817556526950131477934790213402882145632874162379707549616097382870630090233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4315 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aids.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aids.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aids-sida.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alimentsnouveaux.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alimentsnouveaux.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beactive.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beactive.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camr-rcam.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camr-rcam.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camr.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camr.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catmat.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catmat.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmtmv.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccmtmv.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccni.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccni.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrmd-hmirc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccrmd-hmirc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrmd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccrmd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'child-day.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.child-day.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childday.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.childday.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chvi-icvv.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chvi-icvv.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianbiosafetystandards.collaboration.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'normescanadiennesbiosecurite.collaboration.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadianbiosafetystandards.collaboration.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.normescanadiennesbiosecurite.collaboration.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communicationdesrisques.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communicationdesrisques.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conditionphysique.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conditionphysique.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabete-diabetes.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabete-diabetes.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabete.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabete.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetes-diabete.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabetes-diabete.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetes.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabetes.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatwellbeactive.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eatwellbeactive.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitness.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitness.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gosmokefree.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gosmokefree.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grossesseensante.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grossesseensante.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpcp.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpsn.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhpd.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocapi.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetdrugs-medsvet.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpcp.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpsn.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhpd.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocapi.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetdrugs-medsvet.hc-sc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsurv.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthsurv.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthypregnancy.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthypregnancy.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepatitec-hepc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepatitec-hepc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepatitec.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepatitec.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepc-hepatitec.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepc-hepatitec.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hepc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hivvaccine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hivvaccine.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmirc-ccrmd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hmirc-ccrmd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmirc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hmirc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icvv-chvi.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icvv-chvi.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journee-enfant.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journee-enfant.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journeeenfant.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeeenfant.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnm-nml.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnm-nml.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangezbiensoyezactif.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangezbiensoyezactif.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medeffect-medeffet.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medeffect-medeffet.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medeffect.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medeffect.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medeffet.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medeffet.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naci.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naci.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nads-sna.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nads-sna.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalantidrugstrategy.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalantidrugstrategy.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndss-snsd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndss-snsd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndss.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndss.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niloccidental.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niloccidental.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nml-lnm.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nml-lnm.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notresantenotreavenir.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notresantenotreavenir.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novelfoods.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novelfoods.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohof-nsna.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohof-nsna.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourhealthourfuture.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourhealthourfuture.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandemicplan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pandemicplan.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infobase.phac-aspc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infobase.phac-aspc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planpandemie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planpandemie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmra-arla.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pmra-arla.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publichealth.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publichealth.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcam-camr.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcam-camr.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcam.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcam.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskcommunications.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskcommunications.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santepublique.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santepublique.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santevoyage.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santevoyage.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sida-aids.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sida-aids.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sida.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sida.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simdut.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simdut.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sna-nads.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sna-nads.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snsd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snsd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soyezactif.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soyezactif.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategienationaleantidrogue.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strategienationaleantidrogue.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveilsante.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surveilsante.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelhealth.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelhealth.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccinvih.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaccinvih.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virusduniloccidental.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virusduniloccidental.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virusniloccidental.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virusniloccidental.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viruswestnile.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viruswestnile.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivezsansfumee.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivezsansfumee.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westnile.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westnile.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westnilevirus.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westnilevirus.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whmis.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whmis.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publichealthagencyofcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencedelasantepubliqueducanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightflu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'combattezlagrippe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towardsahealthiercanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versuncanadaplussain.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthycanadians.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadiensensante.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gosmokefree.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivezsansfumee.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infotobacco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infotabac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publichealthagencyofcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agencedelasantepubliqueducanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fightflu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.combattezlagrippe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.towardsahealthiercanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.versuncanadaplussain.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthycanadians.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadiensensante.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gosmokefree.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivezsansfumee.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infotobacco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infotabac.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11f406bf91789ac9b9947acbbc97abf9da708b56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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