catalogue-drm.servicecanada.gc.ca

- Department of Employment and Social Development Canada (ESDC) -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 85:31:3f:7f:90:34:f1:bd:00:00:00:00:50:e6:4e:ff was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Department of Employment and Social Development Canada (ESDC)

Organization: Department of Employment and Social Development Canada (ESDC)
State / Province: Quebec
Locality: Gatineau
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 85:31:3f:7f:90:34:f1:bd:00:00:00:00:50:e6:4e:ff
Serial Number (int): 177043033883873534150462568524742545151
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 70:db:c4:00:ea:9a:69:e7:43:b8:ad:4b:72:5a:ea:57:9e:d8:6b:02
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 15:aa:00:91:2f:95:22:fe:c8:04:72:65:d9:5d:ab:e6:ba:e7:8d:3a
Fingerprint (sha256): f2:df:61:ff:68:d8:9e:df:52:74:6a:04:45:c1:a6:b4:20:b1:d2:14:ea:47:d5:d2:55:18:6d:5f:41:44:8a:0a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate catalogue-drm.servicecanada.gc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for catalogue-drm.servicecanada.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catalogue-drm.servicecanada.gc.ca

Other certificates including the domain name servicecanada.gc.ca

(limited to 100 certificates)
srv404s.services.gc.ca
video2.servicecanada.gc.ca
catalogue.servicecanada.gc.ca
college.servicecanada.gc.ca
*.hrdc-drhc.net
srv404s.services.gc.ca
video2.servicecanada.gc.ca
catalogue.servicecanada.gc.ca
catalogue.servicecanada.gc.ca
srv404s.services.gc.ca
catalogue-drm.servicecanada.gc.ca
multi-benefits.servicecanada.gc.ca
video1.servicecanada.gc.ca
catalogue.servicecanada.gc.ca
video2.servicecanada.gc.ca
catalogue.servicecanada.gc.ca
video2.servicecanada.gc.ca
catalogue.servicecanada.gc.ca
video1.servicecanada.gc.ca
video2.servicecanada.gc.ca
video1.servicecanada.gc.ca
catalogue.servicecanada.gc.ca
catalogue.servicecanada.gc.ca
disclosure.servicecanada.gc.ca
catalogue-drm.servicecanada.gc.ca
catalogue-drm.servicecanada.gc.ca
catalogue-drm.servicecanada.gc.ca
*.hrdc-drhc.net
srv404s.services.gc.ca
video1.servicecanada.gc.ca
college.servicecanada.gc.ca
video2.servicecanada.gc.ca
catalogue.servicecanada.gc.ca
*.HRDC-DRHC.NET
catalogue.servicecanada.gc.ca
srv404s.services.gc.ca
*.hrdc-drhc.net
video2.servicecanada.gc.ca
catalogue-drm.servicecanada.gc.ca
video2.servicecanada.gc.ca
video2.servicecanada.gc.ca
multi-benefits.servicecanada.gc.ca

Certificate

The complete raw certificate details for catalogue-drm.servicecanada.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwoFzzNFVem3TcZrmLSX
1cu+4oXpof0oXU1IwVYWiqEvxix8vfM1JVy1evacuBbNxeltbeuPt2vbJKJOPEjz
VfaOISqw72AE0oq1TEhcpzW90zM57TUug8AJs4VIuc3s/zMckY624Bn2JdrQcSHU
/CxkmMsJ+aA6AgiSnK4qgf7XlayK+sQirU2DkpRxOwfW03jxvSjUyXcMUp8+lFri
b+eZHgdEL/e0RcA5wn685K4l6gW1m4LuA8KEL48El5sDJ7rCtXv/CIPdKrm7FXMK
NoLxQH6Omr5o49w881VdP2BEfnuTS2G/1pJaZ9B7q0Qi/UKRKt+8aVl7fO82NKLU
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 177043033883873534150462568524742545151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-17 11:14:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-16 11:44:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gatineau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Employment and Social Development Canada (ESDC)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'catalogue-drm.servicecanada.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25126365062307288169761037026137898208928422497694498630502214133607848236993241441300644395359904114888280265661469905708259553032894893615038862966208792354265693156409224401870898299581698402964348832783956070816461450697013057099078390631968439282902132241947003228535858650770310044920606408628162218796909171953396510521319590012748748522177931144992194160096922559137120429921996504850832069168400019575859836838878405521493190319699167024301107268509427833467126395594126448273077478132987807524793136018706970262107602799868953167863506315561097848633155234291736653193892443099232232903035883689594763531481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogue-drm.servicecanada.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							01e20076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016547b372510000040300473045022052b5984c6238eb7b1bff98a5371e07cd671d6f0923b8e49c451069c8dabdbf970221008dd0d4c190ff592030d026eab946b14b3679f9765e99660901bab7eed68c7949007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000016547b3726f0000040300473045022100a0a6f1b7d87269b89cae76d4166de268f341acc1be34607d00f1c4c099454218022012fb5817eed06723005ff1dd4400153733aa41df175679a06862bc60e3ece017007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016547b372840000040300483046022100dcb933bb2b6d51c7501e4da3e587814401fae3bd811d2ab821b8192535637c87022100d77d295d8d0a70f66222ead8cf05ef6276fe5b2d39f59e000ecf46ea5dabf684007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016547b3727e00000403004830460221009c39e3c6c2847c0e44a86eb6ce61a8a56195da6cc8a682bc5c59f291f483e6c0022100e1b0bc131fa5f9098defff818240f344dbdd0b366bda36f8dd45012b527d133c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70dbc400ea9a69e743b8ad4b725aea579ed86b02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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