immunizationcard.manitoba.ca
- Department of Finance (Province of Manitoba) -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 48:90:90:ea:cb:b7:a6:c3:76:f8:15:27:6c:cb:84:5d was issued on by Entrust, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Department of Finance (Province of Manitoba)
Organization:
Department of Finance (Province of Manitoba)
State / Province:
Manitoba
Locality: Winnipeg
Country: CA
Locality: Winnipeg
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 48:90:90:ea:cb:b7:a6:c3:76:f8:15:27:6c:cb:84:5dSerial Number (int): 96455045713563390143224947079404815453
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: c1:ea:52:bd:e9:92:dd:60:d6:97:cc:a6:76:f8:26:e2:9b:f4:f3:79
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 99:7b:33:95:4e:de:52:6e:12:49:a6:3c:9d:e5:3c:9b:b4:49:5e:5d
Fingerprint (sha256): c1:ef:d3:26:37:0d:fb:ef:7b:5c:36:0b:45:59:c7:5c:9b:a1:1c:0c:15:7e:2b:2d:00:22:70:86:d3:c9:96:c2
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate immunizationcard.manitoba.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for immunizationcard.manitoba.ca
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
immunizationcard.manitoba.ca
Other certificates including the domain name manitoba.ca
(limited to 100 certificates)
manitoba.ca
uatimmunizationcard.manitoba.ca
uatimmunizationconsent.manitoba.ca
manitoba.ca
*.manitoba.ca
manitoba.ca
manitoba.ca
immunizationconsent.manitoba.ca
manitoba.ca
60b725f10c9c85.manitoba.ca
manitoba.ca
www.manitoba.ca
immunizationcard.manitoba.ca
*.gov.mb.ca
manitoba.ca
stimmunizationconsent.manitoba.ca
manitoba.ca
immunizationcard.manitoba.ca
manitoba.ca
manitoba.ca
manitoba.ca
*.manitoba.ca
manitoba.ca
immunizationcard.manitoba.ca
SSO.MANITOBA.CA
SSODR.MANITOBA.CA
manitoba.ca
manitoba.ca
*.gov.mb.ca
*.gov.mb.ca
devimmunizationconsent.manitoba.ca
www.manitoba.ca
*.manitoba.ca
uatimmunizationcard.manitoba.ca
uatimmunizationconsent.manitoba.ca
manitoba.ca
*.manitoba.ca
manitoba.ca
manitoba.ca
immunizationconsent.manitoba.ca
manitoba.ca
60b725f10c9c85.manitoba.ca
manitoba.ca
www.manitoba.ca
immunizationcard.manitoba.ca
*.gov.mb.ca
manitoba.ca
stimmunizationconsent.manitoba.ca
manitoba.ca
immunizationcard.manitoba.ca
manitoba.ca
manitoba.ca
manitoba.ca
*.manitoba.ca
manitoba.ca
immunizationcard.manitoba.ca
SSO.MANITOBA.CA
SSODR.MANITOBA.CA
manitoba.ca
manitoba.ca
*.gov.mb.ca
*.gov.mb.ca
devimmunizationconsent.manitoba.ca
www.manitoba.ca
*.manitoba.ca
Certificate
The complete raw certificate details for immunizationcard.manitoba.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHuTCCBqGgAwIBAgIQSJCQ6su3psN2+BUnbMuEXTANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDA1MjIxNjA1MjNaFw0yNTA2MjIxNjA1MjJaMIGRMQswCQYDVQQGEwJDQTERMA8G A1UECBMITWFuaXRvYmExETAPBgNVBAcTCFdpbm5pcGVnMTUwMwYDVQQKEyxEZXBh cnRtZW50IG9mIEZpbmFuY2UgKFByb3ZpbmNlIG9mIE1hbml0b2JhKTElMCMGA1UE AxMcaW1tdW5pemF0aW9uY2FyZC5tYW5pdG9iYS5jYTCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAMr8ueIQm7g3uONte88k8suRkrpDR5RdMjWWBZrMbpFl MFvkt4Br32IicalGCfo/bgBjyYVtTReNIZL4G9UlpOBgCQFkBNxwV8L5rD3gIz4T rtvvvGzZDHfjWvxJnDRB9CGAmgqfIPNBY91wnsOEl3FscI6NlOPRXC/GhacPoNsb ZQLqWs5FspkK2eM5dpV9De+CSCgh8Nbt3dsBWS9joIJOjPox86+Zg5CV0aRsDl6Y LP25VowHHuoYMzZ9W2uRNken6v6c1n2NS8/HJUZnsmMeNliUGqz70+jlo3S/Z1Xq EUQqHYFTMY3EQFcqVbBArcinkEZ94UQXgR80mh+hHIayw6b8npLi9+015W2LwuhG nt1Je0l1HqtRT9O3KITL+H/bk7JOBDbGA/G20BuXmxJHtAo6l1bbIw1AUHYWTHQe AA3f8LhFilzdMttQ1i8csNHf6GMrjJoxVOG3F06or0MiRMI5WmLbaM0SL35BQ6WE UNcQQYyewFJaelfyAd5FnCD2i3JcukQri3Yc9UVsMJ1cggYVFAjOsWbzfmZyGhPf uzaWBn2u7DPUePE/CraMUnDgLkIxVcuri7LBk64eoqa9R5nUW3tP8YJnH2mede/u +c64q7UK/YNbq97LTFzBsRQ3UXPA4onaIbXYsM/HFD4aE9DqA+Brb70MjmWeSoft AgMBAAGjggLgMIIC3DAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTB6lK96ZLdYNaX zKZ2+Cbim/TzeTAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzBoBggr BgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0 MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1 Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9s ZXZlbDFrLmNybDAnBgNVHREEIDAeghxpbW11bml6YXRpb25jYXJkLm1hbml0b2Jh LmNhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwEwYDVR0gBAwwCjAIBgZngQwBAgIwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB aAB3AA3h8jAr0w3BQGISCepVLvxHdHyx1+kw7w5CHrR+Tqo0AAABj6EM1aYAAAQD AEgwRgIhAJnXBZwdmoVtRnsWNAWMekZyT5B+XIGQqQt9rDRzw2JqAiEA6IcvDibO zURsmKopr17PFQWNoMbyh4Wvj9kVQwguPrgAdQDm0jFjQHeMwRBBBtdxuc7B0kD2 loSG+7qHMh39HjeOUAAAAY+hDNWtAAAEAwBGMEQCIH/JSqwEx4NTrod+hN/7R3Zs hgax8t1d80ZQPYmr+q0HAiBqNdvGwQWab7XdHOa33yejYIZFYiSdHg9G+o2HaLjQ 5gB2AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABj6EM1dAAAAQD AEcwRQIhAPFZWU4KSBSUch8vVfNY3fXwsNfocQwlMrD7UUQIptoMAiBi57deuxp+ SNZ0xOP/Sjw0GdkeImXZCdbR7qYiRpidLDANBgkqhkiG9w0BAQsFAAOCAQEAC5DY t7uSgefYJ+KnE96Xv6wJtB8RMjk/Kf2t6OZs/BNutvTBrIOM2VhMhP4aXCU2thpZ oAQXE+gJx4CZ0i0T4/pTopaw0wTuyWYT75FHtCdPi+q/ufAMA3QiOgOZb3psJRfG xEkzmqxIdZUMqcVbeGvUY7eS6a/CinT2MRvfz96waXDbc9F81VTmdvtvpC1Ku1xK d7ykba8dv5uHlJusj6adSZhAIaBU+66Ajst1fcdvo5CAhzctBBLzkfAOsodbA32h d0JQcc4GftZCHDdKL3GNjAiCcoDLWMfYxsrF1BJHMhPPpFM0LTwHlOJXkLWewwxC wJ4TqAAyYhzDX7vr8w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyvy54hCbuDe44217zyTy y5GSukNHlF0yNZYFmsxukWUwW+S3gGvfYiJxqUYJ+j9uAGPJhW1NF40hkvgb1SWk 4GAJAWQE3HBXwvmsPeAjPhOu2++8bNkMd+Na/EmcNEH0IYCaCp8g80Fj3XCew4SX cWxwjo2U49FcL8aFpw+g2xtlAupazkWymQrZ4zl2lX0N74JIKCHw1u3d2wFZL2Og gk6M+jHzr5mDkJXRpGwOXpgs/blWjAce6hgzNn1ba5E2R6fq/pzWfY1Lz8clRmey Yx42WJQarPvT6OWjdL9nVeoRRCodgVMxjcRAVypVsECtyKeQRn3hRBeBHzSaH6Ec hrLDpvyekuL37TXlbYvC6Eae3Ul7SXUeq1FP07cohMv4f9uTsk4ENsYD8bbQG5eb Eke0CjqXVtsjDUBQdhZMdB4ADd/wuEWKXN0y21DWLxyw0d/oYyuMmjFU4bcXTqiv QyJEwjlaYttozRIvfkFDpYRQ1xBBjJ7AUlp6V/IB3kWcIPaLcly6RCuLdhz1RWww nVyCBhUUCM6xZvN+ZnIaE9+7NpYGfa7sM9R48T8KtoxScOAuQjFVy6uLssGTrh6i pr1HmdRbe0/xgmcfaZ517+75zrirtQr9g1ur3stMXMGxFDdRc8Diidohtdiwz8cU PhoT0OoD4GtvvQyOZZ5Kh+0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 96455045713563390143224947079404815453 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 16:05:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-22 16:05:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manitoba' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winnipeg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Finance (Province of Manitoba)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'immunizationcard.manitoba.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828115572669987364256419782934822914108473178268938988279235804935801999238293622192440220710713899151136104207509179439140274807107848364717400908066338894387785368022316796776298467180168535232736315978687305841328639967826637073774288348535292065381568909488840435001281311570356173418989251560700891790930756420841946575322608764404257773553100682674346454268437959377951015794092772972690597320004614150376743818563365965473305358907667504296380333125669015933573478864634278156619702801768096923043015450106194402897018025896106401750304771841728774987575412042464818880552081100409535393345466435812759562350092612842387563495636216630275376114826946824984324505679869155943502147494535891673626434801539360343688245570661933877301091402652765750749950238242940568392413106793547851794382671459130708161438176877920291345122656694022728183468365875641016838077199669436393884389165298487076060876811289963015012512550537660128354642443862721163319827253220802270525366823450640142459089132263676723767607896646131369749796855730313754117695690497377671616706318560171818547158367448706351939237526791942714533247888679412956000401034680704897206013983707447368540322604952658706597832467536100002996941098307930375990597552109 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c1ea52bde992dd60d697cca676f826e29bf4f379 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunizationcard.manitoba.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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