cdts.service.canada.ca
Issued by R3
About this certificate
This digital certificate with serial number 03:ae:28:98:65:cc:b0:7c:64:9a:84:5d:c6:0b:63:9d:5d:1e was issued on by Let's Encrypt.
With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cdts.service.canada.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ae:28:98:65:cc:b0:7c:64:9a:84:5d:c6:0b:63:9d:5d:1eSerial Number (int): 320599950053218461376560380624101332311326
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 18:36:cc:13:d0:96:33:be:80:c8:25:0f:0b:79:d1:b6:5a:e4:67:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5f:dd:ac:15:61:19:d8:13:22:b1:74:6d:5c:7b:15:c1:b2:29:35:c4
Fingerprint (sha256): 05:19:ed:17:f0:8e:01:b3:8d:89:ce:d0:4d:8d:1b:d5:62:53:e0:63:47:c3:fd:75:3b:09:50:df:77:5d:9b:22
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cdts.service.canada.ca
37
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdts.service.canada.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ag.cms-sgc.esdc-edsc.canada.ca
*.cdts.service.canada.ca
*.cms-sgc.esdc-edsc.canada.ca
*.crt-orc.esdc-edsc.canada.ca
*.iservice.esdc-edsc.canada.ca
*.jobbank-guichetemplois.service.canada.ca
*.jurisprudence.service.canada.ca
*.negotech.service.canada.ca
*.ort-orl.esdc-edsc.canada.ca
*.prort-orlrtc.esdc-edsc.canada.ca
*.prv.esdc-edsc.canada.ca
*.reee-resp.service.canada.ca
*.reei-rdsp.service.canada.ca
*.search-recherche.esdc-edsc.canada.ca
*.search-recherche.service.canada.ca
*.www.ellischart.ca
*.www.red-seal.ca
*.www.sceau-rouge.ca
*.www.tableauellis.ca
cdts.service.canada.ca
cms-sgc.esdc-edsc.canada.ca
crt-orc.esdc-edsc.canada.ca
iservice.esdc-edsc.canada.ca
jobbank-guichetemplois.service.canada.ca
jurisprudence.service.canada.ca
negotech.service.canada.ca
ort-orl.esdc-edsc.canada.ca
prort-orlrtc.esdc-edsc.canada.ca
prv.esdc-edsc.canada.ca
reee-resp.service.canada.ca
reei-rdsp.service.canada.ca
search-recherche.esdc-edsc.canada.ca
search-recherche.service.canada.ca
www.ellischart.ca
www.red-seal.ca
www.sceau-rouge.ca
www.tableauellis.ca
*.cdts.service.canada.ca
*.cms-sgc.esdc-edsc.canada.ca
*.crt-orc.esdc-edsc.canada.ca
*.iservice.esdc-edsc.canada.ca
*.jobbank-guichetemplois.service.canada.ca
*.jurisprudence.service.canada.ca
*.negotech.service.canada.ca
*.ort-orl.esdc-edsc.canada.ca
*.prort-orlrtc.esdc-edsc.canada.ca
*.prv.esdc-edsc.canada.ca
*.reee-resp.service.canada.ca
*.reei-rdsp.service.canada.ca
*.search-recherche.esdc-edsc.canada.ca
*.search-recherche.service.canada.ca
*.www.ellischart.ca
*.www.red-seal.ca
*.www.sceau-rouge.ca
*.www.tableauellis.ca
cdts.service.canada.ca
cms-sgc.esdc-edsc.canada.ca
crt-orc.esdc-edsc.canada.ca
iservice.esdc-edsc.canada.ca
jobbank-guichetemplois.service.canada.ca
jurisprudence.service.canada.ca
negotech.service.canada.ca
ort-orl.esdc-edsc.canada.ca
prort-orlrtc.esdc-edsc.canada.ca
prv.esdc-edsc.canada.ca
reee-resp.service.canada.ca
reei-rdsp.service.canada.ca
search-recherche.esdc-edsc.canada.ca
search-recherche.service.canada.ca
www.ellischart.ca
www.red-seal.ca
www.sceau-rouge.ca
www.tableauellis.ca
Other certificates including the domain name canada.ca
(limited to 100 certificates)
*.dev.tc.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca
pop.ctst.email-courriel.canada.ca
api.explorer-marche-travail.service.canada.ca
rp2-oidc.id.alpha.canada.ca
avis-confidentialite.snc.alpha.canada.ca
srv129.services.gc.ca
gac-amc-sso-au-cate.canada.ca
explorer-marche-travail.service.canada.ca
impact.canada.ca
reports.young-canada-works.canada.ca
canadabuys.canada.ca
sni.cloudflaressl.com
cbapps-viya4-dev.service.cloud-nuage.canada.ca
api.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ceres-seres-api-test1.test.cbsa-asfc.cloud-nuage.canada.ca
dev.dam.explore-labour-market.service.canada.ca
*.Canada.ca
energy-information.canada.ca
ide.dev.service.canada.ca
nvmipiis-ihs-qa.g.phac.cloud-nuage.canada.ca
mygcpay-dev.azure.tpsgc-pwgsc.cloud-nuage.canada.ca
canada.ca
feedback-by-page.tbs.alpha.canada.ca
blog.canada.ca
cicp-pcid.dev.cbsa-asfc.cloud-nuage.canada.ca
fs-dev-gcfm.canada.ca
dev-estma-lmtse.canada.ca
numerique.canada.ca
veterans-service-card.canada.ca
health-infobase.canada.ca
veterans-service-card.canada.ca
code.sp.ssc.alpha.canada.ca
uat.ised-isde.canada.ca
x2h-dev.gcfm.canada.ca
*.apps.aro-nonprd.api-nonprod.service.cloud-nuage.canada.ca
ircc-services-dev.canada.ca
esdc-consultations.canada.ca
inspection.gc.ca
*.library-archives.canada.ca
dec.canada.ca
helloweb.ssc-spc.dl-consol.com-dev.m.ent.cloud-nuage.canada.ca
api.notification.alpha.canada.ca
cdts.service.canada.ca
console.dev.openshift.ised-isde.canada.ca
cic.gc.ca
sjc.jeunesse.service.canada.ca
marine-geo.canada.ca
veterans-service-card.canada.ca
XMPPcluster01.video.gc.ca
cat.fsl-bsf.scitech.gc.ca
integration-gcaccounts.canada.ca
srv130.services.gc.ca
design.alpha.canada.ca
www1.canada.ca
covid-19inventory.tbs.alpha.canada.ca
wayfinding.tbs.alpha.canada.ca
jeunesse-canada-travail.canada.ca
beta.canada.ca
sr.canada.ca
ck.ised-isde.canada.ca
SSC-VCSE-15.video.gc.ca
major-projects.canada.ca
do-rb-dev.dev.cbsa-asfc.cloud-nuage.canada.ca
fakecuram.dev.ps-sp.esdc-edsc.canada.ca
code.open.canada.ca
youth.service.cloud-nuage.canada.ca
dev.explore-labour-market.service.canada.ca
canadaservicecorps-corpsdeserviceducanada.canada.ca
sh.api.dev.portfolio1.n.g.phac.cloud-nuage.canada.ca
cfc-swc.gc.ca
nrcan-funding-financement-rncan.canada.ca
numerique.canada.ca
impact.canada.ca
api.explore-labour-market.service.canada.ca
video2.servicecanada.gc.ca
api.osdp-cumulative-effects-stage.canada.ca
preprod-app.neics-nscei.canada.ca
careers-carrieres.cbsa-asfc.cloud-nuage.canada.ca
ised-isde.canada.ca
statistics.alpha.canada.ca
srv130.services.gc.ca
snic77fgl.wpc.edgecastcdn.net
digital.canada.ca
science-libraries.canada.ca
digital.canada.ca
conception.canada.ca
integration-gcaccounts.canada.ca
ceres-seres-api-dev1.dev.cbsa-asfc.cloud-nuage.canada.ca
api.ocp.dev.ised-isde.canada.ca
environmental-maps.canada.ca
jeunesse-canada-travail.canada.ca
devservices.gcfm.canada.ca
dev.ised-isde.canada.ca
ised-isde.canada.ca
sni18924gl.wpc.edgecastcdn.net
*.cbsa-asfc.cloud-nuage.canada.ca
demoapp.mvpdemo.bd-demo.com-dev.m.ent.cloud-nuage.canada.ca
beta.canada.ca
io.canada.ca
pwd.gcfm.canada.ca
pop.ctst.email-courriel.canada.ca
api.explorer-marche-travail.service.canada.ca
rp2-oidc.id.alpha.canada.ca
Certificate
The complete raw certificate details for cdts.service.canada.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJZjCCCE6gAwIBAgISA64omGXMsHxkmoRdxgtjnV0eMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjEyMDUxNDM1NDZaFw0yMzAzMDUxNDM1NDVaMCExHzAdBgNVBAMT FmNkdHMuc2VydmljZS5jYW5hZGEuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDyACSNOFZxrUctbI2LCQZ/UPRpAH3Yf0CTkW7o3JtUVBN7MwGRvxbX QwlJnVj4jCqPVS9NFS+3/Wh/VKn85SG8tlW5aM8XPjdIKhjMz3gO0NWlSwdptVQi MuRYuKwuvdsFg0dOW8hDop50xHrLYkRUrSjlKTUAGEUfjukdKZb0pFdPxSx8QZn5 5UNxBLMOc+gxe6qDce41jzghdrLvBGWgX14/FeSOi+wYFs6EJi7AEnrVQ8Bjoyyv 0z2nKxygvIZIpiLlRyZvKj/2KxtciQlRHHECuCmkZXa/go1TvfOHkZ/aZkTMX3wz LqmNjrPnnTO9yL/vyDbUy+c3fla3pJVtAgMBAAGjggaFMIIGgTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFBg2zBPQljO+gMglDwt50bZa5GdEMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMIIEUwYDVR0RBIIESjCCBEaCICouYWcuY21zLXNnYy5lc2RjLWVk c2MuY2FuYWRhLmNhghgqLmNkdHMuc2VydmljZS5jYW5hZGEuY2GCHSouY21zLXNn Yy5lc2RjLWVkc2MuY2FuYWRhLmNhgh0qLmNydC1vcmMuZXNkYy1lZHNjLmNhbmFk YS5jYYIeKi5pc2VydmljZS5lc2RjLWVkc2MuY2FuYWRhLmNhgioqLmpvYmJhbmst Z3VpY2hldGVtcGxvaXMuc2VydmljZS5jYW5hZGEuY2GCISouanVyaXNwcnVkZW5j ZS5zZXJ2aWNlLmNhbmFkYS5jYYIcKi5uZWdvdGVjaC5zZXJ2aWNlLmNhbmFkYS5j YYIdKi5vcnQtb3JsLmVzZGMtZWRzYy5jYW5hZGEuY2GCIioucHJvcnQtb3JscnRj LmVzZGMtZWRzYy5jYW5hZGEuY2GCGSoucHJ2LmVzZGMtZWRzYy5jYW5hZGEuY2GC HSoucmVlZS1yZXNwLnNlcnZpY2UuY2FuYWRhLmNhgh0qLnJlZWktcmRzcC5zZXJ2 aWNlLmNhbmFkYS5jYYImKi5zZWFyY2gtcmVjaGVyY2hlLmVzZGMtZWRzYy5jYW5h ZGEuY2GCJCouc2VhcmNoLXJlY2hlcmNoZS5zZXJ2aWNlLmNhbmFkYS5jYYITKi53 d3cuZWxsaXNjaGFydC5jYYIRKi53d3cucmVkLXNlYWwuY2GCFCoud3d3LnNjZWF1 LXJvdWdlLmNhghUqLnd3dy50YWJsZWF1ZWxsaXMuY2GCFmNkdHMuc2VydmljZS5j YW5hZGEuY2GCG2Ntcy1zZ2MuZXNkYy1lZHNjLmNhbmFkYS5jYYIbY3J0LW9yYy5l c2RjLWVkc2MuY2FuYWRhLmNhghxpc2VydmljZS5lc2RjLWVkc2MuY2FuYWRhLmNh gihqb2JiYW5rLWd1aWNoZXRlbXBsb2lzLnNlcnZpY2UuY2FuYWRhLmNhgh9qdXJp c3BydWRlbmNlLnNlcnZpY2UuY2FuYWRhLmNhghpuZWdvdGVjaC5zZXJ2aWNlLmNh bmFkYS5jYYIbb3J0LW9ybC5lc2RjLWVkc2MuY2FuYWRhLmNhgiBwcm9ydC1vcmxy dGMuZXNkYy1lZHNjLmNhbmFkYS5jYYIXcHJ2LmVzZGMtZWRzYy5jYW5hZGEuY2GC G3JlZWUtcmVzcC5zZXJ2aWNlLmNhbmFkYS5jYYIbcmVlaS1yZHNwLnNlcnZpY2Uu Y2FuYWRhLmNhgiRzZWFyY2gtcmVjaGVyY2hlLmVzZGMtZWRzYy5jYW5hZGEuY2GC InNlYXJjaC1yZWNoZXJjaGUuc2VydmljZS5jYW5hZGEuY2GCEXd3dy5lbGxpc2No YXJ0LmNhgg93d3cucmVkLXNlYWwuY2GCEnd3dy5zY2VhdS1yb3VnZS5jYYITd3d3 LnRhYmxlYXVlbGxpcy5jYTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AK33vvp8/xDIi509nB4+GGq0Zyldz7EM JMqFhjTr3IKKAAABhOLtzmEAAAQDAEYwRAIgHG/4GOxxytRkFgtH6xk0V8nOBkVd SWKyE2Xa0yalAuQCIAMsrgSIXvxoNklsuDBs+DUmAtrY2HfD8lJ+CEAQLCxeAHcA tz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGE4u3QHgAABAMASDBG AiEAsDO5thmSo2TjYFB0wAw2Jq0i/QjOT8EAMxtVG2VPfi0CIQCDofrSkBdzF+5S 955OSCr3sOv+g/1ouSRp5veSZ+iJBDANBgkqhkiG9w0BAQsFAAOCAQEAFcBUtkUn nIWLfnf0g47HbbeaCtgtnHsRCuM9k77xKszmrG5Q0Ws8HSkNgbbZ2IDYh4rDBG/6 a+ZszW5lsXvb2krSGvn+8ZgAbq7vBZKGV4knbt3F9Bc68s8PpV3jKFpGFQP7byB+ uFSXeLouAe5yZN4/B5l5tBgGeW7Pjusj8sOLqCg/hX7kVxl9Vr19thQWW87legew hoJACTGOTHuy1clLKNMNbh8110ICQq4rh+oOOIHl/vw6mAG1pbbk4WcIU1P8qWKt PpF708mZiv2SlVInV+/ddA50yn02+zZsfTCGed1Jzyac8KE+UIfbkxRwq5Hd9jgi 5tLckidz29/hhg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gAkjThWca1HLWyNiwkG f1D0aQB92H9Ak5Fu6NybVFQTezMBkb8W10MJSZ1Y+Iwqj1UvTRUvt/1of1Sp/OUh vLZVuWjPFz43SCoYzM94DtDVpUsHabVUIjLkWLisLr3bBYNHTlvIQ6KedMR6y2JE VK0o5Sk1ABhFH47pHSmW9KRXT8UsfEGZ+eVDcQSzDnPoMXuqg3HuNY84IXay7wRl oF9ePxXkjovsGBbOhCYuwBJ61UPAY6Msr9M9pyscoLyGSKYi5Ucmbyo/9isbXIkJ URxxArgppGV2v4KNU73zh5Gf2mZEzF98My6pjY6z550zvci/78g21MvnN35Wt6SV bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320599950053218461376560380624101332311326 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 14:35:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-05 14:35:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdts.service.canada.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30549740209152981468764871573017415577296117423826665825433906675942892528373259529611577157735190103630493510809333874654476848264797435187883877819105467354448940771994333835330022480528195935558008209042805090252035465129478663673095509629321610453705124680941836125375727915874004785164964047533598369668431869078512086455591257126163513454736953452930584788164710383035694217963997608826912359912017640592958907402929265830455634169251965616773973675176609979972677450647273573526022710282026642005003053454376640050958560628692136682976865949518812895861507349085535357289001250888555959618901129619519092069741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1836cc13d09633be80c8250f0b79d1b65ae46744 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1098 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ag.cms-sgc.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdts.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms-sgc.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crt-orc.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iservice.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobbank-guichetemplois.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jurisprudence.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negotech.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ort-orl.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prort-orlrtc.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prv.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reee-resp.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reei-rdsp.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.search-recherche.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.search-recherche.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.ellischart.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.red-seal.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.sceau-rouge.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.tableauellis.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdts.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-sgc.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crt-orc.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iservice.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobbank-guichetemplois.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jurisprudence.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negotech.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ort-orl.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prort-orlrtc.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prv.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reee-resp.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reei-rdsp.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-recherche.esdc-edsc.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-recherche.service.canada.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellischart.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.red-seal.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sceau-rouge.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tableauellis.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184e2edce61000004030046304402201c6ff818ec71cad464160b47eb193457c9ce06455d4962b21365dad326a502e40220032cae04885efc6836496cb8306cf8352602dad8d877c3f2527e0840102c2c5e007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184e2edd01e0000040300483046022100b033b9b61992a364e3605074c00c3626ad22fd08ce4fc100331b551b654f7e2d02210083a1fad290177317ee52f79e4e482af7b0ebfe83fd68b92469e6f79267e88904 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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