www.dgp.toronto.edu

- The Governing Council of the University of Toronto -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 79:bf:01:cf:7d:9b:b8:39:2c:23:95:09:d1:4a:16:16 was issued on by Sectigo Limited.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Governing Council of the University of Toronto

Organization: The Governing Council of the University of Toronto
Organization unit: Computer Science Department
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 79:bf:01:cf:7d:9b:b8:39:2c:23:95:09:d1:4a:16:16
Serial Number (int): 161828352911468096502584495863744828950
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 14:80:02:c4:00:0c:31:c8:4b:49:7d:e9:18:dc:80:d6:af:e6:4e:d7
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 18:37:28:7d:d6:2a:91:30:e3:51:46:fa:70:8d:f0:14:7c:66:cc:19
Fingerprint (sha256): 08:3f:c8:3f:d7:b5:9b:40:91:4f:89:3f:4c:93:3e:a3:81:53:8e:41:6e:d4:83:5b:ce:35:00:00:f6:b6:d6:e6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.dgp.toronto.edu

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dgp.toronto.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dgp.toronto.edu
charybdis.dgp.toronto.edu
charybdis.dgp.utoronto.ca
dgp.toronto.edu
dgp.utoronto.ca
glaucus.dgp.toronto.edu
glaucus.dgp.utoronto.ca
rt.dgp.toronto.edu
rt.dgp.utoronto.ca
scylla.dgp.toronto.edu
scylla.dgp.utoronto.ca
thirdspace.toronto.edu
thirdspace.utoronto.ca
webmail.dgp.toronto.edu
webmail.dgp.utoronto.ca
www.dgp.utoronto.ca

Other certificates including the domain name toronto.edu

(limited to 100 certificates)
support.cs.toronto.edu
gradapps.cs.toronto.edu
www.teach.cs.toronto.edu
*.teach.cs.toronto.edu
services.cs.toronto.edu
webfiles.cs.toronto.edu
dcsis.cs.toronto.edu
heavenly.csl.utoronto.ca
cs.toronto.edu
dcsweb.cs.toronto.edu
bejih.com
gradapply.engineering.utoronto.ca
tdp.lio.mybluehost.me
flapstest.cs.toronto.edu
mail.math.toronto.edu
webfiles.cs.toronto.edu
taglab.ca
imap.cs.toronto.edu
dcsweb.cs.toronto.edu
usra.cs.toronto.edu
plan.cs.toronto.edu
bejih.com
webmail.cs.toronto.edu
openbsd.cs.toronto.edu
www.dgp.toronto.edu
openbsd.cs.toronto.edu
nrostatic.com
dcsweb.cs.toronto.edu
copd.cs.toronto.edu
dcsweb.cs.toronto.edu
telluride.csl.utoronto.ca
dcsil.cs.toronto.edu
taglab.ca
markus.teach.cs.toronto.edu
bejih.com
aasdsloth.gsm.cornell.edu
pump.math.toronto.edu
services.cs.toronto.edu
ece496v2.ece.toronto.edu
internal.ece.utoronto.ca
support.cs.toronto.edu
csweb.cs.toronto.edu
pcrs.teach.cs.toronto.edu
bejih.com
mail.math.toronto.edu
dcsil.cs.toronto.edu
mu.math.toronto.edu
mail.dgp.toronto.edu
pump.math.toronto.edu
markus.teach.cs.toronto.edu
www.taglab.toronto.edu
mpadmin.math.toronto.edu
webfiles.cs.toronto.edu
www.cs.toronto.edu
csweb.cs.toronto.edu
godzilla.cs.toronto.edu
cs.toronto.edu
seinternal.cs.toronto.edu
dcsweb.cs.toronto.edu
openbsd.cs.toronto.edu
www.dgp.toronto.edu
toronto.edu
gradapps2.cs.toronto.edu
*.teach.cs.toronto.edu
gradapps.cs.toronto.edu
bejih.com
magellan.ece.toronto.edu
openbsd.cs.toronto.edu
industryday.cs.toronto.edu
itstatus.math.toronto.edu
ug251.eecg.toronto.edu
internal.ece.toronto.edu
plan.cs.toronto.edu
tapp-dev.cs.toronto.edu
services.cs.toronto.edu
courseography.cdf.toronto.edu
www.cdf.toronto.edu
www.cdf.toronto.edu
rt.dgp.toronto.edu
aria.cs.toronto.edu
socialissues.cs.toronto.edu
cairo.csl.toronto.edu
csweb.cs.toronto.edu
share.math.toronto.edu
aasdsloth.gsm.cornell.edu
openbsd.cs.toronto.edu
hisokusa.cs.toronto.edu
tapp.cs.toronto.edu
mathplus.math.toronto.edu
cs.toronto.edu
gradapps.cs.toronto.edu
csweb.cs.toronto.edu
pcrs.teach.cs.toronto.edu
csweb.cs.toronto.edu
usra.cs.toronto.edu
se.cs.toronto.edu
*.teach.cs.toronto.edu
bejih.com
dcsil.cs.toronto.edu
cs.toronto.edu

Certificate

The complete raw certificate details for www.dgp.toronto.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rAAQVL/wKkUSvWbnbvY
vCT86dEbmHJJeRYGvPHBc5YKa3JBcJ00kEn+cux3j5+CbpQo3G+zyB/6rG6hjy3W
8xlx7J59HmmWrmjoFDd+FHvjOskpHFus3QwyWrV4UhJfIlMIp9UJfDK4CjXIE7/l
eX7Stp5rEj1PsYyOB8AzlsSH9R/l1BIA68jMaIvJ52LAWjwdCHj6mH48F3RT59Wl
J3kFN23lSYm6+FvQKcLe/4HxXY6IVtAA5Tn+hcOJRoMqFcsMYkp7pVp7ueZBJOFW
0+Jx6hPGBtdwaerwn5Kx43w8284tPyvDu4YiwHUck5imYtB7iqsroeTfb/C6vS/I
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161828352911468096502584495863744828950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Governing Council of the University of Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computer Science Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dgp.toronto.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28111693028654005236369005429510289467974500486202986348281059670572566925413354860810872257252723750851106116099748683855910286114691380031293195980154670652542951015674605409362879058299354696512761487436926594463144412234329487867247231558882738961292794469859386622738833783608923487845361966012242527620494809945812330043339015821322003942356804127271899855500386667129456346020861635618434532346578947431142089411838616425288528979730349365488299031573815893328915133133516306586420355227479979943608547647867169961099971808047486548080210175329754234170175795334867486892709804720608396987719148496184581015561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							148002c4000c31c84b497de918dc80d6afe64ed7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dgp.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charybdis.dgp.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charybdis.dgp.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgp.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgp.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glaucus.dgp.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glaucus.dgp.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.dgp.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.dgp.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scylla.dgp.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scylla.dgp.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdspace.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdspace.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.dgp.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.dgp.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dgp.utoronto.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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