idrc.ocadu.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:46:90:be:44:b5:0b:a4:81:97:ac:78:02:5d:d1:5a:32:08 was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=idrc.ocadu.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:90:be:44:b5:0b:a4:81:97:ac:78:02:5d:d1:5a:32:08
Serial Number (int): 285349020241090335559576537897677920809480
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:22:fe:ea:47:78:ff:f1:cf:a1:3a:06:ef:a2:fb:af:24:43:5f:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:23:25:d3:58:3f:fb:3c:0e:35:0f:c0:fe:6e:86:9c:cf:b9:d4:8f
Fingerprint (sha256): 01:bf:49:a2:23:02:da:45:f9:f0:57:d8:29:f6:e0:a4:24:2a:a0:34:ce:53:1e:e1:f4:7d:5a:e9:57:12:4d:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate idrc.ocadu.ca

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idrc.ocadu.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adod.idrc.ocad.ca
adod.idrc.ocadu.ca
aegis.idrc.ocad.ca
aegis.idrc.ocadu.ca
aha.idrc.ocad.ca
aha.idrc.ocadu.ca
bell-community.idrc.ocad.ca
bell-community.idrc.ocadu.ca
clinic.idrc.ocad.ca
clinic.idrc.ocadu.ca
cnice.idrc.ocad.ca
cnice.idrc.ocadu.ca
courses.idrc.ocad.ca
courses.idrc.ocadu.ca
culturall.idrc.ocad.ca
culturall.idrc.ocadu.ca
culturall1.idrc.ocad.ca
culturall1.idrc.ocadu.ca
culturall2.idrc.ocad.ca
culturall2.idrc.ocadu.ca
deep-dev.idrc.ocadu.ca
deep.idrc.ocad.ca
deep.idrc.ocadu.ca
idrc.ocad.ca
idrc.ocadu.ca
ilc.idrc.ocad.ca
ilc.idrc.ocadu.ca
jan.idrc.ocad.ca
jan.idrc.ocadu.ca
lists.idrc.ocad.ca
lists.idrc.ocadu.ca
mobile-accessibility.idrc.ocad.ca
mobile-accessibility.idrc.ocadu.ca
nide.idrc.ocad.ca
nide.idrc.ocadu.ca
opencaps.idrc.ocad.ca
opencaps.idrc.ocadu.ca
opendoors.idrc.ocad.ca
opendoors.idrc.ocadu.ca
outside-in.idrc.ocad.ca
outside-in.idrc.ocadu.ca
pipedaproject.idrc.ocad.ca
pipedaproject.idrc.ocadu.ca
static.idrc.ocad.ca
static.idrc.ocadu.ca
stretch.idrc.ocad.ca
stretch.idrc.ocadu.ca
stretch2.idrc.ocad.ca
stretch2.idrc.ocadu.ca
timetrack.idrc.ocad.ca
timetrack.idrc.ocadu.ca
tts.idrc.ocad.ca
tts.idrc.ocadu.ca
websavvy.idrc.ocad.ca
websavvy.idrc.ocadu.ca
wiki.mobile-accessibility.idrc.ocad.ca
wiki.mobile-accessibility.idrc.ocadu.ca
www.idrc.ocad.ca
www.idrc.ocadu.ca

Other certificates including the domain name ocadu.ca

(limited to 100 certificates)
webco-its.ocadu.ca
idrc.ocadu.ca
designjam.ocadu.ca
5745189578604544-fe1.pantheonsite.io
ocad.ca
www2.ocadu.ca
wlan-login.its.ocadu.ca
designjam.ocadu.ca
snow.idrc.ocadu.ca
eportfolio.ocadu.ca
slab.ocadu.ca
www2.ocadu.ca
idrc.ocadu.ca
adfs.ocadu.ca
apply.ocadu.ca
courses.idrc.ocadu.ca
www1.ocadu.ca
snow.idrc.ocadu.ca
www2.ocadu.ca
adod.idrc.ocad.ca
www1.ocadu.ca
eportfolio.ocadu.ca
idrc.ocadu.ca
continuingstudies.ocadu.ca
5745189578604544-fe1.pantheonsite.io
achecker.ca
admissions.ocadu.ca
*.ocadu.ca
apply.ocadu.ca
opendoors.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
www2.ocadu.ca
continuingstudies-staff.ocadu.ca
snow.idrc.ocadu.ca
wireless-login.ocadu.ca
ocad.ca
snow.idrc.ocadu.ca
idrc.ocadu.ca
eportfolio.ocadu.ca
clown.idrc.ocadu.ca
achecker.ca
idrc.ocadu.ca
www2.ocadu.ca
infodrive.ocadu.ca
webco-its.ocadu.ca
webco-its.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
csa-its.ocadu.ca
snow.idrc.ocadu.ca
cnice.idrc.ocad.ca
snow.idrc.ocadu.ca
adfs.ocadu.ca
snow.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
infodrive.ocadu.ca
webco-its.ocadu.ca
achecker.ca
*.ocadu.ca
clown.idrc.ocadu.ca
5768714657988608-fe2.pantheonsite.io
snow.idrc.ocadu.ca
ocad.ca
*.ocadu.ca
*.ocadu.ca
ocad.ca
5745189578604544-fe1.pantheonsite.io
openresearch.ocadu.ca
*.ocadu.ca
snow.idrc.ocadu.ca
webco-its.ocadu.ca
legacy.idrc.ocadu.ca
hybrid.ocadu.ca
5745189578604544-fe1.pantheonsite.io
slab.ocadu.ca
infodrive.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
*.ocadu.ca
slab.ocadu.ca
wlan-login.its.ocadu.ca
adfs.ocadu.ca
adod.idrc.ocad.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
*.ocadu.ca
adfs.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
idrc.ocadu.ca
vpn.ocadu.ca
5745189578604544-fe1.pantheonsite.io
continuingstudies-staff.ocadu.ca
www2.ocadu.ca
5768714657988608-fe2.pantheonsite.io
www2.ocadu.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
clown.idrc.ocadu.ca

Certificate

The complete raw certificate details for idrc.ocadu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XkK/Mski/EHTjjySxaF
XDEuowWDJ43xcRSlGdMz+9fDRBsR/14pYtgL0E3E/n34JnIX5X84LrNBTBr6t8ar
ODd9qq0R5zMOSU6gG26NAeigk52IgRK3GGRO+IFFSF6Vt/exhMIs352PY5KilCgj
QOYtx0lh9DOHXo9Vo7xbCI/PD0QNcB9hzS7RCBoiluBYtHxWsZU4ZggUgrq5pI2q
YYJtfYhG79GUr32e/I/ItDHDIeMCgAWyne9gMl+gRGC8ZJS4gbVpAXYqFX8rR7I+
B6hvt/2qme73EDsL1BjluEdOHqdtI5pkObuLL5lsIB2/aCB88QHpo4b4oURVfBmk
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285349020241090335559576537897677920809480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 23:26:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 23:26:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idrc.ocadu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26948447446155682451512194565971606985428897992866227018294867639664822018028518779260390720334249722552793271166696030955475580620702166188635674717860415818376971455698951087414201542940561244908585122562996771799615753574274276083763061671427731598761934067296614288822168783155020632819696465334277231675758249222681187657594773515414728261495366546711186137597217757182902046185030577884249727010856184150792559005267494150677895081357776346474484474984128067907964232621660225334327564330524706565735641458566440580790131112498531929888168720175149715912881719238160212969898920088250015552654626123746148721857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7722feea4778fff1cfa13a06efa2fbaf24435f4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adod.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adod.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegis.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegis.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aha.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aha.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell-community.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell-community.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinic.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinic.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnice.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnice.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall1.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall1.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall2.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall2.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep-dev.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilc.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilc.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-accessibility.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-accessibility.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nide.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nide.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencaps.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencaps.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendoors.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendoors.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outside-in.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outside-in.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipedaproject.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipedaproject.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch2.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch2.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetrack.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetrack.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tts.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tts.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websavvy.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websavvy.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.mobile-accessibility.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.mobile-accessibility.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e4d8db2b00000040300473045022100e1e2b488cd45d7cdf4ad3f02b14fdad008b8ce027916182ed9bba5f72253a7f602206cab12b4d59bd53b33703eed1ce8f13172e948f40bde6af15204ce3a543e7f53007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4d8db2980000040300483046022100df857b50cf5347dee93d5452475970729b67a1c30a50c5cb0e1ea6f2d44aab7e022100adf27451c77f6033279017220a21829eff3c352b7e2eeab3e5dd567391a96f95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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