Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d3:fa:fd:19:1a:c6:45:6f:e6:bb:ce:59:0a:1d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Certification Authority - L1K
Validity
Not Before: Apr 26 11:15:19 2021 GMT
Not After : May 25 11:15:18 2022 GMT
Subject: C=CA, ST=Ontario, L=Ottawa, O=Immigration, Refugees and Citizenship Canada, CN=cic.gc.ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:06:99:e2:88:cc:e9:53:9c:00:2b:b7:15:
e3:83:b0:5f:6e:a2:20:bf:b6:61:6a:e7:cb:cc:b7:
c7:5a:13:fb:27:2a:d7:b3:2f:52:f6:4b:77:7d:e0:
17:25:88:29:21:1f:92:5a:04:14:0e:86:b3:6b:7d:
e5:4c:4a:25:a1:eb:ba:12:47:14:44:d7:f9:64:62:
91:07:49:5f:0c:b9:15:33:57:fb:c9:fd:8d:3a:15:
44:ea:80:8e:36:bf:b5:c7:5b:ff:7f:44:80:43:c8:
13:f4:80:fe:15:76:75:96:b1:7b:78:e5:7f:b8:ae:
ed:7a:55:1b:78:3e:55:fb:de:a4:f9:6c:97:31:da:
ba:d5:df:91:7e:b1:95:4a:51:02:84:6a:de:9d:6b:
67:7a:37:f9:0c:c9:21:08:41:16:96:91:f3:73:b7:
61:1e:2f:84:03:88:62:e2:f7:bc:c9:e0:51:2f:c3:
cd:e1:7f:19:bc:4e:ee:48:59:2d:23:4c:d5:f2:fa:
db:fd:74:77:64:e0:8f:a5:16:fa:79:c1:73:54:7e:
41:32:29:d1:0f:e1:8c:4a:ea:4c:87:72:b0:be:19:
5b:4b:73:79:7f:56:2d:2f:b7:e2:38:11:65:17:81:
e2:97:7c:82:f7:b0:b3:55:25:3b:ce:14:e5:ae:cc:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
AD:DC:FC:D5:5F:B3:BF:86:3E:92:2D:D7:AE:46:D1:18:86:C7:80:0A
X509v3 Authority Key Identifier:
keyid:82:A2:70:74:DD:BC:53:3F:CF:7B:D4:F7:CD:7F:A7:60:C6:0A:4C:BF

Authority Information Access:
OCSP - URI:http://ocsp.entrust.net
CA Issuers - URI:http://aia.entrust.net/l1k-chain256.cer

X509v3 CRL Distribution Points:

Full Name:
URI:http://crl.entrust.net/level1k.crl

X509v3 Subject Alternative Name:
DNS:cic.gc.ca, DNS:www.cic.gc.ca, DNS:immigration.gc.ca, DNS:citizenship.gc.ca, DNS:citoyennete.gc.ca, DNS:servicesfornewcomers.cic.gc.ca, DNS:servicespourlesnouveauxarrivants.cic.gc.ca, DNS:ci.gc.ca, DNS:serendreaucanada.gc.ca, DNS:goingtocanada.gc.ca, DNS:cic.gslb.global.gc.ca, DNS:www.immigration.gc.ca, DNS:www.citizenship.gc.ca, DNS:www.citoyennete.gc.ca, DNS:www.servicesfornewcomers.cic.gc.ca, DNS:www.servicespourlesnouveauxarrivants.cic.gc.ca, DNS:www.ci.gc.ca, DNS:www.serendreaucanada.gc.ca, DNS:www.goingtocanada.gc.ca, DNS:www.cic.gslb.global.gc.ca, DNS:immigration.canada.ca, DNS:www.immigration.canada.ca, DNS:citizenship.canada.ca, DNS:www.citizenship.canada.ca, DNS:citoyennete.canada.ca, DNS:www.citoyennete.canada.ca, DNS:servicesfornewcomers.canada.ca, DNS:servicespourlesnouveauxarrivants.canada.ca, DNS:www.servicespourlesnouveauxarrivants.canada.ca, DNS:ircc.canada.ca, DNS:www.ircc.canada.ca, DNS:www.goingtocanada.canada.ca, DNS:serendreaucanada.canada.ca, DNS:www.serendreaucanada.canada.ca, DNS:refugees.canada.ca, DNS:www.refugees.canada.ca, DNS:refugies.canada.ca, DNS:www.refugies.canada.ca, DNS:settlement.canada.ca, DNS:www.settlement.canada.ca, DNS:etablissement.canada.ca, DNS:www.etablissement.canada.ca, DNS:passport.canada.ca, DNS:www.passport.canada.ca, DNS:passeport.canada.ca, DNS:www.passeport.canada.ca, DNS:www.servicesfornewcomers.canada.ca, DNS:goingtocanada.canada.ca
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 2.16.840.1.114028.10.1.5
CPS: https://www.entrust.net/rpa
Policy: 2.23.140.1.2.2

CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 56:14:06:9A:2F:D7:C2:EC:D3:F5:E1:BD:44:B2:3E:C7:
46:76:B9:BC:99:11:5C:C0:EF:94:98:55:D6:89:D0:DD
Timestamp : Apr 26 11:15:19.905 2021 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:9C:D4:CA:40:B8:0A:4F:DC:0F:BC:42:
79:A4:78:42:5C:BF:ED:02:59:47:A4:E3:9A:A4:23:78:
5F:5E:18:D0:9D:02:21:00:AD:3C:D1:57:D4:EA:92:B7:
30:21:07:AE:C7:D1:8E:33:E4:9C:4A:7E:36:59:49:CC:
CB:DE:E6:FB:24:B7:02:C6
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DF:A5:5E:AB:68:82:4F:1F:6C:AD:EE:B8:5F:4E:3E:5A:
EA:CD:A2:12:A4:6A:5E:8E:3B:12:C0:20:44:5C:2A:73
Timestamp : Apr 26 11:15:19.761 2021 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:81:C3:4F:62:9F:9D:77:AC:7B:12:7C:
43:C0:C1:E2:F6:5C:15:15:81:88:A1:D1:35:95:8E:AE:
0D:87:59:77:36:02:21:00:B0:55:26:0F:08:57:CA:5B:
2B:E0:04:57:CA:37:E9:6E:80:DE:E4:14:55:21:7B:4B:
94:FF:12:B5:D3:35:8A:93
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 46:A5:55:EB:75:FA:91:20:30:B5:A2:89:69:F4:F3:7D:
11:2C:41:74:BE:FD:49:B8:85:AB:F2:FC:70:FE:6D:47
Timestamp : Apr 26 11:15:20.167 2021 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:63:2C:F9:58:41:85:A8:81:11:20:B0:6D:
0F:13:30:A9:7E:FC:0F:EC:BC:1A:0D:24:2B:2E:AB:CA:
BE:DF:09:68:02:21:00:8B:5A:03:E4:20:D3:72:48:15:
51:AB:AF:58:2A:BE:AB:BE:B4:15:83:DD:00:4A:8D:A5:
CA:08:A0:26:7E:89:A0
Signature Algorithm: sha256WithRSAEncryption
8d:e6:95:38:6d:d2:7e:95:ea:64:d8:b0:2d:ad:37:26:cc:b4:
a9:ee:d3:dc:81:4a:79:a6:3d:c7:2d:bf:93:e8:4d:ba:47:ca:
c6:3f:40:23:e6:0d:19:27:9e:13:a0:1a:cd:19:eb:90:0f:ff:
d5:ea:a8:44:5f:56:b2:eb:de:8d:ae:76:ed:53:27:82:17:e7:
3b:01:d0:c1:36:9d:67:9f:37:66:c2:c7:b8:0a:bc:19:75:be:
86:77:bc:ac:d0:91:6c:a9:c1:78:c7:cc:bd:dd:42:20:ed:fe:
19:9d:7c:4a:47:95:8f:7b:5b:02:3e:b8:4f:22:8a:c3:99:a1:
52:ee:95:3c:e8:93:1c:76:1c:8b:a6:eb:a8:32:61:c5:45:3c:
27:b9:9f:72:4c:63:34:94:fa:d1:4d:a0:ce:2d:d4:76:b7:9a:
db:02:10:43:b4:7d:e1:e4:59:fa:04:9a:d8:66:ae:ab:8f:f6:
9e:bc:50:af:6d:c3:fd:2f:18:1c:5c:77:fb:1e:5d:2e:57:b5:
93:b5:85:84:1a:cb:e9:65:dd:22:19:ef:b4:8e:9c:bf:8a:34:
60:96:0e:92:60:f5:23:4d:7b:cf:f4:58:ba:b0:20:37:57:d9:
c4:96:83:42:ea:23:59:d2:6f:6e:78:68:af:84:0d:9e:dd:1a:
b4:9a:ec:6e