cdts.service.canada.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:ae:28:98:65:cc:b0:7c:64:9a:84:5d:c6:0b:63:9d:5d:1e was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdts.service.canada.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:28:98:65:cc:b0:7c:64:9a:84:5d:c6:0b:63:9d:5d:1e
Serial Number (int): 320599950053218461376560380624101332311326
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:36:cc:13:d0:96:33:be:80:c8:25:0f:0b:79:d1:b6:5a:e4:67:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5f:dd:ac:15:61:19:d8:13:22:b1:74:6d:5c:7b:15:c1:b2:29:35:c4
Fingerprint (sha256): 05:19:ed:17:f0:8e:01:b3:8d:89:ce:d0:4d:8d:1b:d5:62:53:e0:63:47:c3:fd:75:3b:09:50:df:77:5d:9b:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cdts.service.canada.ca

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdts.service.canada.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ag.cms-sgc.esdc-edsc.canada.ca
*.cdts.service.canada.ca
*.cms-sgc.esdc-edsc.canada.ca
*.crt-orc.esdc-edsc.canada.ca
*.iservice.esdc-edsc.canada.ca
*.jobbank-guichetemplois.service.canada.ca
*.jurisprudence.service.canada.ca
*.negotech.service.canada.ca
*.ort-orl.esdc-edsc.canada.ca
*.prort-orlrtc.esdc-edsc.canada.ca
*.prv.esdc-edsc.canada.ca
*.reee-resp.service.canada.ca
*.reei-rdsp.service.canada.ca
*.search-recherche.esdc-edsc.canada.ca
*.search-recherche.service.canada.ca
*.www.ellischart.ca
*.www.red-seal.ca
*.www.sceau-rouge.ca
*.www.tableauellis.ca
cdts.service.canada.ca
cms-sgc.esdc-edsc.canada.ca
crt-orc.esdc-edsc.canada.ca
iservice.esdc-edsc.canada.ca
jobbank-guichetemplois.service.canada.ca
jurisprudence.service.canada.ca
negotech.service.canada.ca
ort-orl.esdc-edsc.canada.ca
prort-orlrtc.esdc-edsc.canada.ca
prv.esdc-edsc.canada.ca
reee-resp.service.canada.ca
reei-rdsp.service.canada.ca
search-recherche.esdc-edsc.canada.ca
search-recherche.service.canada.ca
www.ellischart.ca
www.red-seal.ca
www.sceau-rouge.ca
www.tableauellis.ca

Other certificates including the domain name canada.ca

(limited to 100 certificates)
*.dev.tc.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca
pop.ctst.email-courriel.canada.ca
api.explorer-marche-travail.service.canada.ca
rp2-oidc.id.alpha.canada.ca

Certificate

The complete raw certificate details for cdts.service.canada.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gAkjThWca1HLWyNiwkG
f1D0aQB92H9Ak5Fu6NybVFQTezMBkb8W10MJSZ1Y+Iwqj1UvTRUvt/1of1Sp/OUh
vLZVuWjPFz43SCoYzM94DtDVpUsHabVUIjLkWLisLr3bBYNHTlvIQ6KedMR6y2JE
VK0o5Sk1ABhFH47pHSmW9KRXT8UsfEGZ+eVDcQSzDnPoMXuqg3HuNY84IXay7wRl
oF9ePxXkjovsGBbOhCYuwBJ61UPAY6Msr9M9pyscoLyGSKYi5Ucmbyo/9isbXIkJ
URxxArgppGV2v4KNU73zh5Gf2mZEzF98My6pjY6z550zvci/78g21MvnN35Wt6SV
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320599950053218461376560380624101332311326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 14:35:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-05 14:35:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdts.service.canada.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30549740209152981468764871573017415577296117423826665825433906675942892528373259529611577157735190103630493510809333874654476848264797435187883877819105467354448940771994333835330022480528195935558008209042805090252035465129478663673095509629321610453705124680941836125375727915874004785164964047533598369668431869078512086455591257126163513454736953452930584788164710383035694217963997608826912359912017640592958907402929265830455634169251965616773973675176609979972677450647273573526022710282026642005003053454376640050958560628692136682976865949518812895861507349085535357289001250888555959618901129619519092069741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1836cc13d09633be80c8250f0b79d1b65ae46744
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1098 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ag.cms-sgc.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdts.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms-sgc.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crt-orc.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iservice.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobbank-guichetemplois.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jurisprudence.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negotech.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ort-orl.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prort-orlrtc.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prv.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reee-resp.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reei-rdsp.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.search-recherche.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.search-recherche.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.ellischart.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.red-seal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.sceau-rouge.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.tableauellis.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdts.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-sgc.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crt-orc.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iservice.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobbank-guichetemplois.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jurisprudence.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negotech.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ort-orl.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prort-orlrtc.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prv.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reee-resp.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reei-rdsp.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-recherche.esdc-edsc.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-recherche.service.canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellischart.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.red-seal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sceau-rouge.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tableauellis.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184e2edce61000004030046304402201c6ff818ec71cad464160b47eb193457c9ce06455d4962b21365dad326a502e40220032cae04885efc6836496cb8306cf8352602dad8d877c3f2527e0840102c2c5e007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184e2edd01e0000040300483046022100b033b9b61992a364e3605074c00c3626ad22fd08ce4fc100331b551b654f7e2d02210083a1fad290177317ee52f79e4e482af7b0ebfe83fd68b92469e6f79267e88904
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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