srv404s.services.gc.ca

- Department of Employment and Social Development -

Issued by Entrust Certification Authority - L1F

About this certificate

This digital certificate with serial number 28:27:91:88:d0:b6:5b:71:7f:76:80:62:9e:3d:91:2d was issued on by Entrust, Inc..

With 121 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Department of Employment and Social Development

Organization: Department of Employment and Social Development
State / Province: Quebec
Locality: Gatineau
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2016 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:27:91:88:d0:b6:5b:71:7f:76:80:62:9e:3d:91:2d
Serial Number (int): 53374571197895462996852684764030538029
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 76:05:e8:ff:18:a4:b4:d3:1e:25:ca:a4:4d:da:79:9c:50:6a:4e:6d
AuthorityKeyId: 2e:62:f0:14:ee:87:cd:b3:35:03:3d:ef:e4:b9:9e:fd:3b:b8:a3:c9

Fingerprint (sha1): 1b:09:db:41:4e:5c:35:b9:12:e0:ad:f7:f3:0a:d9:e7:c5:08:8e:69
Fingerprint (sha256): a1:63:63:c3:8f:88:55:0d:93:5f:ed:43:aa:2f:66:4a:22:a1:44:f7:ab:a1:65:90:fe:38:3c:d4:99:99:f0:9d

Issuing Certificate URL: http://aia.entrust.net/l1f-ec1.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1f.crl

Check the revocation status for certificate srv404s.services.gc.ca

121

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for srv404s.services.gc.ca

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

srv404s.services.gc.ca
www.srv404s.services.gc.ca
act.gc.ca
www.act.gc.ca
ae.gc.ca
www.ae.gc.ca
bdppa.gc.ca
www.bdppa.gc.ca
benefitsfinder.ca
www.benefitsfinder.ca
benefitsfinder.gc.ca
www.benefitsfinder.gc.ca
bja-ou.gc.ca
www.bja-ou.gc.ca
canadabenefits.gc.ca
www.canadabenefits.gc.ca
canadabenefits-prestationsducanada.gc.ca
www.canadabenefits-prestationsducanada.gc.ca
canadaservice.ca
www.canadaservice.ca
canlearnpro.ca
www.canlearnpro.ca
canlearnpro.com
www.canlearnpro.com
canlearnpro-cibletudespro.ca
www.canlearnpro-cibletudespro.ca
chercheurdeprestations.gc.ca
www.chercheurdeprestations.gc.ca
cibletudespro.ca
www.cibletudespro.ca
cibletudespro-canlearnpro.ca
www.cibletudespro-canlearnpro.ca
conseildesaines.ca
www.conseildesaines.ca
conseildesaines.gc.ca
www.conseildesaines.gc.ca
conseildesaines-seniorscouncil.gc.ca
www.conseildesaines-seniorscouncil.gc.ca
consultation.gc.ca
www.consultation.gc.ca
disabilitysavings.ca
www.disabilitysavings.ca
emploisetc.ca
www.emploisetc.ca
emploisetc.gc.ca
www.emploisetc.gc.ca
employeurs.guichetemplois.gc.ca
www.employeurs.guichetemplois.gc.ca
fmcs.ca
www.fmcs.ca
francophonie.gc.ca
www.francophonie.gc.ca
guichetemplois.gc.ca
www.guichetemplois.gc.ca
homelessness.gc.ca
www.homelessness.gc.ca
jeunesse.ca
www.jeunesse.ca
jeunesse.gc.ca
www.jeunesse.gc.ca
jeunesse-youth.gc.ca
www.jeunesse-youth.gc.ca
jobbank.gc.ca
www.jobbank.gc.ca
jobfutures.ca
www.jobfutures.ca
jobsetc.ca
www.jobsetc.ca
jobsetc.gc.ca
www.jobsetc.gc.ca
labourmarketinformation.ca
www.labourmarketinformation.ca
labour-travail.gc.ca
www.labour-travail.gc.ca
ohstc.gc.ca
www.ohstc.gc.ca
ohstc-tsstc.gc.ca
www.ohstc-tsstc.gc.ca
ou-bja.gc.ca
www.ou-bja.gc.ca
ph-endirect.gc.ca
www.ph-endirect.gc.ca
ph-endirect-pwd-online.gc.ca
www.ph-endirect-pwd-online.gc.ca
prestationsducanada.gc.ca
www.prestationsducanada.gc.ca
prestationsducanada-canadabenefits.gc.ca
www.prestationsducanada-canadabenefits.gc.ca
psj-yip.gc.ca
www.psj-yip.gc.ca
publicentre.edsc.gc.ca
www.publicentre.edsc.gc.ca
publicentre.esdc.gc.ca
www.publicentre.esdc.gc.ca
pwd-online.gc.ca
www.pwd-online.gc.ca
pwd-online-ph-endirect.gc.ca
www.pwd-online-ph-endirect.gc.ca
sans-abri.gc.ca
www.sans-abri.gc.ca
servicecanada.ca
www.servicecanada.ca
service-canada.gc.ca
www.service-canada.gc.ca
servicescanada.ca
www.servicescanada.ca
services-canada.ca
www.services-canada.ca
servicescanada.info
www.servicescanada.info
servicecanada.gc.ca
srv404.services.gc.ca
srv601.hrdc-drhc.gc.ca
srv650.hrdc-drhc.gc.ca
nac-asc.gc.ca
asc-nac.gc.ca
servicecanada.com
www.servicecanada.com
www.psj.gc.ca
www.yesidcs.gc.ca
www.travailaucanada.gc.ca

Other certificates including the domain name services.gc.ca

(limited to 100 certificates)
srv137.services.gc.ca
srv115.services.gc.ca
srv129.services.gc.ca
srv132.services.gc.ca
ECDSA-srv253.services.gc.ca
srv100.services.gc.ca
srv404s.services.gc.ca
srv130.services.gc.ca
srv253.services.gc.ca
creative.services.gc.ca
srv252.services.gc.ca
srv130.services.gc.ca
srv115.services.gc.ca
srv253.services.gc.ca
srv270.hrdc-drhc.gc.ca
srv146.services.gc.ca
srv265.hrdc-drhc.gc.ca
mah-lb.services.gc.ca
cc.services.gc.ca
srv145.services.gc.ca
srv137.services.gc.ca
srv129.services.gc.ca
srv136.services.gc.ca
srv129.services.gc.ca
srv111.services.gc.ca
srv146.services.gc.ca
srv137.services.gc.ca
srv156.services.gc.ca
srv100.services.gc.ca
srv145.services.gc.ca
creative.services.gc.ca
srv253.services.gc.ca
*.hrdc-drhc.net
srv137.services.gc.ca
srv404s.services.gc.ca
srv270.hrdc-drhc.gc.ca
srv404s.services.gc.ca
srv404s.services.gc.ca
docupl-encaps.services.gc.ca
srv251.services.gc.ca
srv136.services.gc.ca
srv137.services.gc.ca
srv265.hrdc-drhc.gc.ca
srv253.services.gc.ca
srv115.services.gc.ca
templates.services.gc.ca
srv115.services.gc.ca
srv111.services.gc.ca
srv100.services.gc.ca
srv388.services.gc.ca
srv253.services.gc.ca
srv404s.services.gc.ca
benefitsfinder.services.gc.ca
srv146.services.gc.ca
srv114.services.gc.ca
srv263.services.gc.ca
srv253.services.gc.ca
srv404s.services.gc.ca
srv253.services.gc.ca
srv217.services.gc.ca
srv115.services.gc.ca
srv145.services.gc.ca
srv404s.services.gc.ca
srv138.services.gc.ca
srv115.services.gc.ca
srv133.services.gc.ca
creative.services.gc.ca
srv145.services.gc.ca
srv404s.services.gc.ca
srv132.services.gc.ca
srv133.services.gc.ca
srv129.services.gc.ca
srv136.services.gc.ca
srv122.services.gc.ca
srv135.services.gc.ca
srv404s.services.gc.ca
srv144.services.gc.ca
docupl-encaps.services.gc.ca
srv745.services.gc.ca
ssl-templates.services.gc.ca
srv130.services.gc.ca
srv129.services.gc.ca
srv136.services.gc.ca
noc.esdc.gc.ca
srv132.services.gc.ca
srv253.services.gc.ca
*.dev.services.gc.ca
srv251.services.gc.ca
srv132.services.gc.ca
srv132.services.gc.ca
srv136.services.gc.ca
creative.services.gc.ca
srv212.services.gc.ca
srv130.services.gc.ca
srv404s.services.gc.ca
srv602.services.gc.ca
srv130.services.gc.ca
srv144.services.gc.ca
srv156.services.gc.ca
srv111.services.gc.ca

Certificate

The complete raw certificate details for srv404s.services.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQEzCCD5qgAwIBAgIQKCeRiNC2W3F/doBinj2RLTAKBggqhkjOPQQDAzCBujEL
MAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1Nl
ZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDE2
IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UE
AxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxRjAeFw0yMzAx
MTYxNTQyMjJaFw0yNDAyMTYxNTQyMjJaMIGMMQswCQYDVQQGEwJDQTEPMA0GA1UE
CBMGUXVlYmVjMREwDwYDVQQHEwhHYXRpbmVhdTE4MDYGA1UEChMvRGVwYXJ0bWVu
dCBvZiBFbXBsb3ltZW50IGFuZCBTb2NpYWwgRGV2ZWxvcG1lbnQxHzAdBgNVBAMT
FnNydjQwNHMuc2VydmljZXMuZ2MuY2EwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNC
AATyXQJnp0DZqenoQpCHJp14OpyHi94rWKIiWOxvvfVMYXAwWE6B7YH8Gu8B5bR/
jTVsioDdkZTDQHuiS2o6B9XMo4INrDCCDagwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUdgXo/xiktNMeJcqkTdp5nFBqTm0wHwYDVR0jBBgwFoAULmLwFO6HzbM1Az3v
5Lme/Tu4o8kwYwYIKwYBBQUHAQEEVzBVMCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz
cC5lbnRydXN0Lm5ldDAuBggrBgEFBQcwAoYiaHR0cDovL2FpYS5lbnRydXN0Lm5l
dC9sMWYtZWMxLmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1
c3QubmV0L2xldmVsMWYuY3JsMIIKvgYDVR0RBIIKtTCCCrGCFnNydjQwNHMuc2Vy
dmljZXMuZ2MuY2GCGnd3dy5zcnY0MDRzLnNlcnZpY2VzLmdjLmNhgglhY3QuZ2Mu
Y2GCDXd3dy5hY3QuZ2MuY2GCCGFlLmdjLmNhggx3d3cuYWUuZ2MuY2GCC2JkcHBh
LmdjLmNhgg93d3cuYmRwcGEuZ2MuY2GCEWJlbmVmaXRzZmluZGVyLmNhghV3d3cu
YmVuZWZpdHNmaW5kZXIuY2GCFGJlbmVmaXRzZmluZGVyLmdjLmNhghh3d3cuYmVu
ZWZpdHNmaW5kZXIuZ2MuY2GCDGJqYS1vdS5nYy5jYYIQd3d3LmJqYS1vdS5nYy5j
YYIUY2FuYWRhYmVuZWZpdHMuZ2MuY2GCGHd3dy5jYW5hZGFiZW5lZml0cy5nYy5j
YYIoY2FuYWRhYmVuZWZpdHMtcHJlc3RhdGlvbnNkdWNhbmFkYS5nYy5jYYIsd3d3
LmNhbmFkYWJlbmVmaXRzLXByZXN0YXRpb25zZHVjYW5hZGEuZ2MuY2GCEGNhbmFk
YXNlcnZpY2UuY2GCFHd3dy5jYW5hZGFzZXJ2aWNlLmNhgg5jYW5sZWFybnByby5j
YYISd3d3LmNhbmxlYXJucHJvLmNhgg9jYW5sZWFybnByby5jb22CE3d3dy5jYW5s
ZWFybnByby5jb22CHGNhbmxlYXJucHJvLWNpYmxldHVkZXNwcm8uY2GCIHd3dy5j
YW5sZWFybnByby1jaWJsZXR1ZGVzcHJvLmNhghxjaGVyY2hldXJkZXByZXN0YXRp
b25zLmdjLmNhgiB3d3cuY2hlcmNoZXVyZGVwcmVzdGF0aW9ucy5nYy5jYYIQY2li
bGV0dWRlc3Byby5jYYIUd3d3LmNpYmxldHVkZXNwcm8uY2GCHGNpYmxldHVkZXNw
cm8tY2FubGVhcm5wcm8uY2GCIHd3dy5jaWJsZXR1ZGVzcHJvLWNhbmxlYXJucHJv
LmNhghJjb25zZWlsZGVzYWluZXMuY2GCFnd3dy5jb25zZWlsZGVzYWluZXMuY2GC
FWNvbnNlaWxkZXNhaW5lcy5nYy5jYYIZd3d3LmNvbnNlaWxkZXNhaW5lcy5nYy5j
YYIkY29uc2VpbGRlc2FpbmVzLXNlbmlvcnNjb3VuY2lsLmdjLmNhgih3d3cuY29u
c2VpbGRlc2FpbmVzLXNlbmlvcnNjb3VuY2lsLmdjLmNhghJjb25zdWx0YXRpb24u
Z2MuY2GCFnd3dy5jb25zdWx0YXRpb24uZ2MuY2GCFGRpc2FiaWxpdHlzYXZpbmdz
LmNhghh3d3cuZGlzYWJpbGl0eXNhdmluZ3MuY2GCDWVtcGxvaXNldGMuY2GCEXd3
dy5lbXBsb2lzZXRjLmNhghBlbXBsb2lzZXRjLmdjLmNhghR3d3cuZW1wbG9pc2V0
Yy5nYy5jYYIfZW1wbG95ZXVycy5ndWljaGV0ZW1wbG9pcy5nYy5jYYIjd3d3LmVt
cGxveWV1cnMuZ3VpY2hldGVtcGxvaXMuZ2MuY2GCB2ZtY3MuY2GCC3d3dy5mbWNz
LmNhghJmcmFuY29waG9uaWUuZ2MuY2GCFnd3dy5mcmFuY29waG9uaWUuZ2MuY2GC
FGd1aWNoZXRlbXBsb2lzLmdjLmNhghh3d3cuZ3VpY2hldGVtcGxvaXMuZ2MuY2GC
EmhvbWVsZXNzbmVzcy5nYy5jYYIWd3d3LmhvbWVsZXNzbmVzcy5nYy5jYYILamV1
bmVzc2UuY2GCD3d3dy5qZXVuZXNzZS5jYYIOamV1bmVzc2UuZ2MuY2GCEnd3dy5q
ZXVuZXNzZS5nYy5jYYIUamV1bmVzc2UteW91dGguZ2MuY2GCGHd3dy5qZXVuZXNz
ZS15b3V0aC5nYy5jYYINam9iYmFuay5nYy5jYYIRd3d3LmpvYmJhbmsuZ2MuY2GC
DWpvYmZ1dHVyZXMuY2GCEXd3dy5qb2JmdXR1cmVzLmNhggpqb2JzZXRjLmNhgg53
d3cuam9ic2V0Yy5jYYINam9ic2V0Yy5nYy5jYYIRd3d3LmpvYnNldGMuZ2MuY2GC
GmxhYm91cm1hcmtldGluZm9ybWF0aW9uLmNhgh53d3cubGFib3VybWFya2V0aW5m
b3JtYXRpb24uY2GCFGxhYm91ci10cmF2YWlsLmdjLmNhghh3d3cubGFib3VyLXRy
YXZhaWwuZ2MuY2GCC29oc3RjLmdjLmNhgg93d3cub2hzdGMuZ2MuY2GCEW9oc3Rj
LXRzc3RjLmdjLmNhghV3d3cub2hzdGMtdHNzdGMuZ2MuY2GCDG91LWJqYS5nYy5j
YYIQd3d3Lm91LWJqYS5nYy5jYYIRcGgtZW5kaXJlY3QuZ2MuY2GCFXd3dy5waC1l
bmRpcmVjdC5nYy5jYYIccGgtZW5kaXJlY3QtcHdkLW9ubGluZS5nYy5jYYIgd3d3
LnBoLWVuZGlyZWN0LXB3ZC1vbmxpbmUuZ2MuY2GCGXByZXN0YXRpb25zZHVjYW5h
ZGEuZ2MuY2GCHXd3dy5wcmVzdGF0aW9uc2R1Y2FuYWRhLmdjLmNhgihwcmVzdGF0
aW9uc2R1Y2FuYWRhLWNhbmFkYWJlbmVmaXRzLmdjLmNhgix3d3cucHJlc3RhdGlv
bnNkdWNhbmFkYS1jYW5hZGFiZW5lZml0cy5nYy5jYYINcHNqLXlpcC5nYy5jYYIR
d3d3LnBzai15aXAuZ2MuY2GCFnB1YmxpY2VudHJlLmVkc2MuZ2MuY2GCGnd3dy5w
dWJsaWNlbnRyZS5lZHNjLmdjLmNhghZwdWJsaWNlbnRyZS5lc2RjLmdjLmNhghp3
d3cucHVibGljZW50cmUuZXNkYy5nYy5jYYIQcHdkLW9ubGluZS5nYy5jYYIUd3d3
LnB3ZC1vbmxpbmUuZ2MuY2GCHHB3ZC1vbmxpbmUtcGgtZW5kaXJlY3QuZ2MuY2GC
IHd3dy5wd2Qtb25saW5lLXBoLWVuZGlyZWN0LmdjLmNhgg9zYW5zLWFicmkuZ2Mu
Y2GCE3d3dy5zYW5zLWFicmkuZ2MuY2GCEHNlcnZpY2VjYW5hZGEuY2GCFHd3dy5z
ZXJ2aWNlY2FuYWRhLmNhghRzZXJ2aWNlLWNhbmFkYS5nYy5jYYIYd3d3LnNlcnZp
Y2UtY2FuYWRhLmdjLmNhghFzZXJ2aWNlc2NhbmFkYS5jYYIVd3d3LnNlcnZpY2Vz
Y2FuYWRhLmNhghJzZXJ2aWNlcy1jYW5hZGEuY2GCFnd3dy5zZXJ2aWNlcy1jYW5h
ZGEuY2GCE3NlcnZpY2VzY2FuYWRhLmluZm+CF3d3dy5zZXJ2aWNlc2NhbmFkYS5p
bmZvghNzZXJ2aWNlY2FuYWRhLmdjLmNhghVzcnY0MDQuc2VydmljZXMuZ2MuY2GC
FnNydjYwMS5ocmRjLWRyaGMuZ2MuY2GCFnNydjY1MC5ocmRjLWRyaGMuZ2MuY2GC
DW5hYy1hc2MuZ2MuY2GCDWFzYy1uYWMuZ2MuY2GCEXNlcnZpY2VjYW5hZGEuY29t
ghV3d3cuc2VydmljZWNhbmFkYS5jb22CDXd3dy5wc2ouZ2MuY2GCEXd3dy55ZXNp
ZGNzLmdjLmNhghl3d3cudHJhdmFpbGF1Y2FuYWRhLmdjLmNhMA4GA1UdDwEB/wQE
AwIHgDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTAYDVR0gBEUwQzA3
BgpghkgBhvpsCgEFMCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3LmVudHJ1c3Qu
bmV0L3JwYTAIBgZngQwBAgIwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AHPZ
nokbTJZ4oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABhbs+8z4AAAQDAEYwRAIg
XVSfW1H+ZDtzf4KmT0CKPSU7O0WSjxrSKbeHpFZP8MICIAlhZ1tT2FT7nzRChEc9
D3k6AXKV01GOxXj3Er4bcY7xAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6Oq
HQcT0wwAAAGFuz7zQgAABAMARzBFAiEA37UNcu03uB/82FRx1hwCJAyvRgP8u0LV
jDe2eWHjL/ECIHbnOtFvJaP1KP53z3hIcG33CwV26X83jW9duTWvAStzAHYA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGFuz7zpQAABAMARzBFAiBP
06mddeeQSZhq6FwfRZgUtR0B26GFnhkm12TntG7QVwIhAJoLhUWceiMrOzf/T4K+
Zrand1TJ4/Hc9UUmTwcPm1U0MAoGCCqGSM49BAMDA2cAMGQCMB5msALsLFl8OqBf
JfCyzdz3i47fjgAAeEryiBbNX41Feyj67uGCq7yxcmNTy+TaogIwBtUGT/F5tmV1
skiQOSk5UnvrT5rbgyfLV8HhAYOk0nyN/6HFJHIjX4EmnExDlnVd
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE8l0CZ6dA2anp6EKQhyadeDqch4ve
K1iiIljsb731TGFwMFhOge2B/BrvAeW0f401bIqA3ZGUw0B7oktqOgfVzA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53374571197895462996852684764030538029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2016 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1F'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 15:42:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 15:42:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gatineau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Employment and Social Development'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'srv404s.services.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004f25d0267a740d9a9e9e8429087269d783a9c878bde2b58a22258ec6fbdf54c617030584e81ed81fc1aef01e5b47f8d356c8a80dd9194c3407ba24b6a3a07d5cc
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7605e8ff18a4b4d31e25caa44dda799c506a4e6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2e62f014ee87cdb335033defe4b99efd3bb8a3c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1f-ec1.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1f.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2741 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv404s.services.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srv404s.services.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.act.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ae.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdppa.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bdppa.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsfinder.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefitsfinder.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsfinder.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefitsfinder.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bja-ou.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bja-ou.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadabenefits.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadabenefits.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadabenefits-prestationsducanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadabenefits-prestationsducanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadaservice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadaservice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canlearnpro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canlearnpro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canlearnpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canlearnpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canlearnpro-cibletudespro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canlearnpro-cibletudespro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chercheurdeprestations.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chercheurdeprestations.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibletudespro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cibletudespro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibletudespro-canlearnpro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cibletudespro-canlearnpro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conseildesaines.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conseildesaines.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conseildesaines.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conseildesaines.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conseildesaines-seniorscouncil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conseildesaines-seniorscouncil.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultation.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consultation.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disabilitysavings.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.disabilitysavings.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emploisetc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emploisetc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emploisetc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emploisetc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeurs.guichetemplois.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employeurs.guichetemplois.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmcs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francophonie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francophonie.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guichetemplois.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guichetemplois.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homelessness.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homelessness.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeunesse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeunesse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeunesse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeunesse.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeunesse-youth.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeunesse-youth.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobbank.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobbank.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobfutures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobfutures.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsetc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobsetc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsetc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobsetc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labourmarketinformation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labourmarketinformation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labour-travail.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labour-travail.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohstc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohstc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohstc-tsstc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohstc-tsstc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ou-bja.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ou-bja.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ph-endirect.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ph-endirect.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ph-endirect-pwd-online.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ph-endirect-pwd-online.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestationsducanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestationsducanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestationsducanada-canadabenefits.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestationsducanada-canadabenefits.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psj-yip.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psj-yip.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicentre.edsc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicentre.edsc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicentre.esdc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publicentre.esdc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwd-online.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pwd-online.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwd-online-ph-endirect.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pwd-online-ph-endirect.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sans-abri.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sans-abri.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-canada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.service-canada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicescanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicescanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.services-canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicescanada.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicescanada.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicecanada.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv404.services.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv601.hrdc-drhc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv650.hrdc-drhc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nac-asc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asc-nac.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicecanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicecanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psj.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yesidcs.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travailaucanada.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (816 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4679161115367409864688838796097561626380466805185553928852733686412327599235532739721816330691205986126198628211362
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1051560674836040012725137083396957488609943091215169158621901722922643840570773210015868703377226281007684884264285