dev.law.queensu.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bb:ae:50:e0:fc:7b:6c:72:8c:8e:1d:e1:b3:9f:85:52:c0 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dev.law.queensu.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bb:ae:50:e0:fc:7b:6c:72:8c:8e:1d:e1:b3:9f:85:52:c0Serial Number (int): 325201366027774936688326190633443333067456
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c2:03:33:82:a6:cc:fd:bf:f4:01:01:9a:c4:31:67:24:7c:62:1b:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f8:86:16:2c:dc:2a:63:f7:8d:f0:ec:4f:81:64:ef:d6:58:c3:94:08
Fingerprint (sha256): 04:3a:8b:e3:9f:cb:92:b2:b7:98:2e:da:35:23:1f:28:5f:59:d3:8b:e4:d9:cf:df:86:79:a3:40:21:f0:32:4e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dev.law.queensu.ca
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev.law.queensu.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
certificate.queenslaw.ca
clinics.queenslaw.ca
dev.certificate.queenslaw.ca
dev.clinics.queenslaw.ca
dev.law.queensu.ca
docs.law.queensu.ca
law.queensu.ca
old.law.queensu.ca
status.queenslaw.ca
stg.law.queensu.ca
web-cac.law.queensu.ca
web-dup.law.queensu.ca
clinics.queenslaw.ca
dev.certificate.queenslaw.ca
dev.clinics.queenslaw.ca
dev.law.queensu.ca
docs.law.queensu.ca
law.queensu.ca
old.law.queensu.ca
status.queenslaw.ca
stg.law.queensu.ca
web-cac.law.queensu.ca
web-dup.law.queensu.ca
Other certificates including the domain name queensu.ca
(limited to 100 certificates)
sleeptherapyservice.queensu.ca
healthsci.queensu.ca
biology.queensu.ca
accredible.tutor.com
it-365mgm-p-a01.ad.queensu.ca
statuspage.io
webapp.queensu.ca
booking.library.queensu.ca
kingkongdev.ctg.queensu.ca
healthsci.queensu.ca
azure-vhost.its.queensu.ca
flux.cs.queensu.ca
its-edu01.ad.queensu.ca
epay.queensu.ca
authoring.wp.queensu.ca
fsus-5.freshservice.com
aonhrlearningcenter.credentials.aon.com
www.skhs.queensu.ca
OHDP-INDOC-RDS.HDP.AD.QUEENSU.CA
www.path.queensu.ca
qloud.azure.queensu.ca
PRINTQ.QUEENSU.CA
my.queensu.ca
magneto.ctg.queensu.ca
academy-achievements.gong.io
staging.it.meds.queensu.ca
PRINTQ.QUEENSU.CA
vcentrev.ad.queensu.ca
VICHALL-D006-PCI-H01.pci.queensu.ca
vote.queensu.ca
badges.gmac.com
BOMGAR.SMITH.QUEENSU.CA
www.ctg.queensu.ca
nursing.queensu.ca
admissions.meds.queensu.ca
ROOMS.SMITH.QUEENSU.CA
academy-achievements.gong.io
saself.ps.queensu.ca
spiderman.ctg.queensu.ca
au.credential.getsmarter.com
econ.queensu.ca
geologyds.geol.queensu.ca
its-cppm01.pci.queensu.ca
cdms.phy.queensu.ca
jira.its.queensu.ca
webmail.cs.queensu.ca
biology.queensu.ca
kingkongdev.ctg.queensu.ca
statuspage.io
statuspage.io
statuspage.io
www.path.queensu.ca
helpdesk.stepstone.de
server2.advance.queensu.ca
magneto.ctg.queensu.ca
stores.phy.queensu.ca
uniweb.time.queensu.ca
portal.bhsc.queensu.ca
WEB.SMITH.QUEENSU.CA
statuspage.io
dev.law.queensu.ca
engsoc.queensu.ca
aonhrlearningcenter.credentials.aon.com
services.housing.queensu.ca
PCI-RDPGW.pci.queensu.ca
server3.advance.queensu.ca
engsoc.queensu.ca
listingservice.housing.queensu.ca
academy-achievements.gong.io
jay.phy.queensu.ca
ojs.library.queensu.ca
2fa.dfm.queensu.ca
healthsci.queensu.ca
RDS02.LAW.QUEENSU.CA
badges.gmac.com
etlab.cs.queensu.ca
statuspage.io
fsus-5.freshservice.com
wiki.queensu.ca
ad.queensu.ca
onq.queensu.ca
remote.its.queensu.ca
web-vhost.its.queensu.ca
wiredauth.queensu.ca
content.queensu.ca
statuspage.io
rehab.queensu.ca
autodrive.engineering.queensu.ca
dcp.vpn.queensu.ca
idptest.queensu.ca
mytimetable.queensu.ca
adminpix.vpn.queensu.ca
ROOMS.SMITH.QUEENSU.CA
remote.its.queensu.ca
edc.ctg.queensu.ca
akamaisecure4.qualtrics.com
statuspage.io
OHDPQ-RDS-0384.HDP.AD.QUEENSU.CA
qservices.queensu.ca
engsoc.queensu.ca
healthsci.queensu.ca
biology.queensu.ca
accredible.tutor.com
it-365mgm-p-a01.ad.queensu.ca
statuspage.io
webapp.queensu.ca
booking.library.queensu.ca
kingkongdev.ctg.queensu.ca
healthsci.queensu.ca
azure-vhost.its.queensu.ca
flux.cs.queensu.ca
its-edu01.ad.queensu.ca
epay.queensu.ca
authoring.wp.queensu.ca
fsus-5.freshservice.com
aonhrlearningcenter.credentials.aon.com
www.skhs.queensu.ca
OHDP-INDOC-RDS.HDP.AD.QUEENSU.CA
www.path.queensu.ca
qloud.azure.queensu.ca
PRINTQ.QUEENSU.CA
my.queensu.ca
magneto.ctg.queensu.ca
academy-achievements.gong.io
staging.it.meds.queensu.ca
PRINTQ.QUEENSU.CA
vcentrev.ad.queensu.ca
VICHALL-D006-PCI-H01.pci.queensu.ca
vote.queensu.ca
badges.gmac.com
BOMGAR.SMITH.QUEENSU.CA
www.ctg.queensu.ca
nursing.queensu.ca
admissions.meds.queensu.ca
ROOMS.SMITH.QUEENSU.CA
academy-achievements.gong.io
saself.ps.queensu.ca
spiderman.ctg.queensu.ca
au.credential.getsmarter.com
econ.queensu.ca
geologyds.geol.queensu.ca
its-cppm01.pci.queensu.ca
cdms.phy.queensu.ca
jira.its.queensu.ca
webmail.cs.queensu.ca
biology.queensu.ca
kingkongdev.ctg.queensu.ca
statuspage.io
statuspage.io
statuspage.io
www.path.queensu.ca
helpdesk.stepstone.de
server2.advance.queensu.ca
magneto.ctg.queensu.ca
stores.phy.queensu.ca
uniweb.time.queensu.ca
portal.bhsc.queensu.ca
WEB.SMITH.QUEENSU.CA
statuspage.io
dev.law.queensu.ca
engsoc.queensu.ca
aonhrlearningcenter.credentials.aon.com
services.housing.queensu.ca
PCI-RDPGW.pci.queensu.ca
server3.advance.queensu.ca
engsoc.queensu.ca
listingservice.housing.queensu.ca
academy-achievements.gong.io
jay.phy.queensu.ca
ojs.library.queensu.ca
2fa.dfm.queensu.ca
healthsci.queensu.ca
RDS02.LAW.QUEENSU.CA
badges.gmac.com
etlab.cs.queensu.ca
statuspage.io
fsus-5.freshservice.com
wiki.queensu.ca
ad.queensu.ca
onq.queensu.ca
remote.its.queensu.ca
web-vhost.its.queensu.ca
wiredauth.queensu.ca
content.queensu.ca
statuspage.io
rehab.queensu.ca
autodrive.engineering.queensu.ca
dcp.vpn.queensu.ca
idptest.queensu.ca
mytimetable.queensu.ca
adminpix.vpn.queensu.ca
ROOMS.SMITH.QUEENSU.CA
remote.its.queensu.ca
edc.ctg.queensu.ca
akamaisecure4.qualtrics.com
statuspage.io
OHDPQ-RDS-0384.HDP.AD.QUEENSU.CA
qservices.queensu.ca
engsoc.queensu.ca
Certificate
The complete raw certificate details for dev.law.queensu.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgISA7uuUOD8e2xyjI4d4bOfhVLAMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjIxOTExMzNaFw0x ODExMjAxOTExMzNaMB0xGzAZBgNVBAMTEmRldi5sYXcucXVlZW5zdS5jYTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM5regV1FSA5pvwrp00gnfH4bvHH nJbOJAg2LgRs7eJ9gTBbmDA8pLZac72yteZB0HGLxirN3elafIKUh8sLU7Wbkjwo lOk4wOBYY63q95g519QQhiuksKIcHhtyrrDmRR++26aVLZHHpB8NzOBRBAtRgOZU EBeSOQmGlXAo3rEcxWLP6fdGiqy8K1vIfA+Gg9xIDnYjh78d13HOcxYyit6xl5CV DN30EvRMCmUQLzpGTV0SKQQ7vB4WRyclDyov1HFZ5xncwaxqEgz1zYppum0+Tapv ze6XTEqZX6vYkGLDJ/9KkhGGXT2+iQqr5qCnyQoolO4VgPEXD3MEMnU3g2MCAwEA AaOCBBkwggQVMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUwgMzgqbM/b/0AQGaxDFn JHxiG4EwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzCCARsGA1UdEQSCARIwggEOghhjZXJ0aWZpY2F0ZS5xdWVlbnNsYXcu Y2GCFGNsaW5pY3MucXVlZW5zbGF3LmNhghxkZXYuY2VydGlmaWNhdGUucXVlZW5z bGF3LmNhghhkZXYuY2xpbmljcy5xdWVlbnNsYXcuY2GCEmRldi5sYXcucXVlZW5z dS5jYYITZG9jcy5sYXcucXVlZW5zdS5jYYIObGF3LnF1ZWVuc3UuY2GCEm9sZC5s YXcucXVlZW5zdS5jYYITc3RhdHVzLnF1ZWVuc2xhdy5jYYISc3RnLmxhdy5xdWVl bnN1LmNhghZ3ZWItY2FjLmxhdy5xdWVlbnN1LmNhghZ3ZWItZHVwLmxhdy5xdWVl bnN1LmNhMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A dQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWVjQ4KNAAAEAwBG MEQCIHjsWVpPEVo1EmDG5IELNz9pRjSyauIQZ1Hi7ZGBd18FAiAiaETerpsWvEig WqiBjVPuzxyV6egfIQ4WLIUFBOYbdgB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUI Fy+jqh0HE9MMAAABZWNDg8sAAAQDAEcwRQIgYchBn7HUW0Txa4KFLG2dWWwYlvqw zj1+jB4Oya11KcYCIQCDqzQD9F5fwArtJ+G0uXqdT4dHrMmpH/JkkBT7hBQAgDAN BgkqhkiG9w0BAQsFAAOCAQEADewascn8p1LoTYAiLYhI73i9s3TsSZwnIlPMgJU5 BmcxfRMblwXpMWjlZJEAfBvLWjB07VN2XzviNXE24VY8qW0oZE1WgC+uTAkvkTI9 pj71aTHF+PCpPdmUQjOqdb3BgMB6VSBFwfNgNpa09xue2ACKaxVZRuE52oqWCCde 8lHoleErpVuvCDva/QVMlfcmat3M7+Rt7G+6VxtAkPFNinn7PZOuraIpRREmab4H wu7TcRIeztY7Lwcqjkb5ATwvVBN/f7I2nqlrn6DXHPm0xYdZ00B1DKwtoRcDKxT8 HVCdl4GqGAyDwAB2hwxHmEjlWCnQal8aRY1ERbgcJG/pXQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmt6BXUVIDmm/CunTSCd 8fhu8cecls4kCDYuBGzt4n2BMFuYMDyktlpzvbK15kHQcYvGKs3d6Vp8gpSHywtT tZuSPCiU6TjA4Fhjrer3mDnX1BCGK6SwohweG3KusOZFH77bppUtkcekHw3M4FEE C1GA5lQQF5I5CYaVcCjesRzFYs/p90aKrLwrW8h8D4aD3EgOdiOHvx3Xcc5zFjKK 3rGXkJUM3fQS9EwKZRAvOkZNXRIpBDu8HhZHJyUPKi/UcVnnGdzBrGoSDPXNimm6 bT5Nqm/N7pdMSplfq9iQYsMn/0qSEYZdPb6JCqvmoKfJCiiU7hWA8RcPcwQydTeD YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325201366027774936688326190633443333067456 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 19:11:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 19:11:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.law.queensu.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26058089532327496035835947480234828746107677405844772673558344954366492373311828795585477330776269210701881078730894808068250283129765598855667836504533975489162337395061893498978205307611360864981156328408756878800882656560327123525943309226536000088873579121130576015269051999194262424468776728003014608256365250656700900679684736580898150341378157848071025733353432319720920025669623986902035099406224009245514975444327693538661769237297940398543252317287467008661482632654437911236278292306243651833179948534343601966500624814430859076521787434065175705365189890856013552472320465130367699809970172252686957118307 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c2033382a6ccfdbff401019ac43167247c621b81 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (274 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificate.queenslaw.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinics.queenslaw.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.certificate.queenslaw.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.clinics.queenslaw.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.law.queensu.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.law.queensu.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.queensu.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.law.queensu.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.queenslaw.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.law.queensu.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-cac.law.queensu.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-dup.law.queensu.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001656343828d0000040300463044022078ec595a4f115a351260c6e4810b373f694634b26ae2106751e2ed9181775f050220226844deae9b16bc48a05aa8818d53eecf1c95e9e81f210e162c850504e61b760076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000165634383cb0000040300473045022061c8419fb1d45b44f16b82852c6d9d596c1896fab0ce3d7e8c1e0ec9ad7529c602210083ab3403f45e5fc00aed27e1b4b97a9d4f8747acc9a91ff2649014fb84140080 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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