lyncaccess2.gov.ab.ca

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 3d:5c:2c:df:b5:86:62:5e:d2:68:9a:be:6a:d3:de:8f was issued on by Sectigo Limited.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lyncaccess2.gov.ab.ca

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:5c:2c:df:b5:86:62:5e:d2:68:9a:be:6a:d3:de:8f
Serial Number (int): 81561509203947121121965593569441078927
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 92:7b:84:7c:1a:df:51:9c:fd:97:98:35:b0:18:40:1e:da:09:54:f4
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 7f:fb:9b:91:f2:e8:e4:9e:3c:c6:fd:86:21:3e:55:9e:91:14:c9:93
Fingerprint (sha256): 0c:a0:ec:fe:b1:7a:3e:d2:7c:21:92:29:52:30:a3:af:fe:20:6e:67:5a:b7:ab:47:6c:fa:9d:9c:76:9e:4f:f8

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate lyncaccess2.gov.ab.ca

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncaccess2.gov.ab.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncaccess2.gov.ab.ca
Skypeav.gov.ab.ca
Skypeconf.gov.ab.ca
Skypemedia.gov.ab.ca
SkypemediaDR.gov.ab.ca
conf.gov.ab.ca
confDR.gov.ab.ca
conference.gov.ab.ca
dialin.alberta.ca
lync.gov.ab.ca
lyncaccess.gov.ab.ca
lyncav.gov.ab.ca
lyncav2.gov.ab.ca
lyncdiscover.alberta.ca
lyncdiscover.gov.ab.ca
lyncweb.gov.ab.ca
lyncwebcon.gov.ab.ca
lyncwebcon2.gov.ab.ca
lyncwebconf.gov.ab.ca
lyncwebdr.gov.ab.ca
meeting.alberta.ca
officeweb.gov.ab.ca
officewebdr.gov.ab.ca
scheduler.alberta.ca
scheduler.gov.ab.ca
sip.alberta.ca
sip.gov.ab.ca
skype.gov.ab.ca
skypedr.gov.ab.ca
skypejjb.gov.ab.ca
skypencc.gov.ab.ca
skypeweb.gov.ab.ca
skypewebdr.gov.ab.ca

Other certificates including the domain name gov.ab.ca

(limited to 100 certificates)
www.extintuat.gov.ab.ca
mail.nrcb.gov.ab.ca
www.pablo.gov.ab.ca
library.gov.ab.ca
uat.epstest.gov.ab.ca
access.lan.gov.ab.ca
www.petrinex.gov.ab.ca
wap.gov.ab.ca
rrrsuat.gov.ab.ca
cpi.gov.ab.ca
webmail.gov.ab.ca
healthshare.gov.ab.ca
travis2.gov.ab.ca
www.hrtrn1.gov.ab.ca
portal.aet.gov.ab.ca
aemagis.gov.ab.ca
www.itsmprd.gov.ab.ca
*.forms.gov.ab.ca
extranetsyt.inftra.gov.ab.ca
sspr.gov.ab.ca
nadc.gov.ab.ca
rtc.lan.gov.ab.ca
www.lrc.education.gov.ab.ca
abdlan.gov.ab.ca
alta.registries.gov.ab.ca
extern.wln.gov.ab.ca
lyncaccess2.gov.ab.ca
xtrauat.edc.gov.ab.ca
www.tradesecrets.gov.ab.ca
www.adoptionsadmin.gov.ab.ca
acfa.gov.ab.ca
mahextranet.gov.ab.ca
secureaccess.pdd.gov.ab.ca
www.blimsonline.gov.ab.ca
abdlan.gov.ab.ca
owa-auth.gov.ab.ca
healthshare.gov.ab.ca
www.ecollision.gov.ab.ca
www.mims.gov.ab.ca
qpsecure.gov.ab.ca
extranet.gov.ab.ca
datalink.gov.ab.ca
ownernet.gov.ab.ca
eascdv.env.gov.ab.ca
www.ftoa.trans.gov.ab.ca
eascuv.env.gov.ab.ca
www.trans.gov.ab.ca
www3.eub.gov.ab.ca
www.petrinex.gov.ab.ca
extranetuat.learning.gov.ab.ca
gpas.trans.gov.ab.ca
acis.gov.ab.ca
secureaccess2.gov.ab.ca
environment.extranet.gov.ab.ca
secureaccess.srd.gov.ab.ca
uat.trans.gov.ab.ca
qp.inter.gov.ab.ca
extranet.inftra.gov.ab.ca
*.epstest.gov.ab.ca
wln.inftra.gov.ab.ca
*.edt.gov.ab.ca
aemagis.gov.ab.ca
www.padev1.gov.ab.ca
addrveruat.gov.ab.ca
ext.sp.mah.gov.ab.ca
*.ds.ma.gov.ab.ca
www.hr90uataext.gov.ab.ca
uat.adfs.aet.gov.ab.ca
gpas.env.gov.ab.ca
extern1.commonuat.secureaccess.gov.ab.ca
ocs.gov.ab.ca
goauat.portal.gov.ab.ca
secureaccess.gov.ab.ca
registries.gov.ab.ca
ps.adfs.aet.gov.ab.ca
magic.agric.gov.ab.ca
external.sp.environment.gov.ab.ca
cdms.ext.gov.ab.ca
tracs.finance.gov.ab.ca
cj.external.gov.ab.ca
wln.inftra.gov.ab.ca
www.lrc.education.gov.ab.ca
lyncaccess2.gov.ab.ca
abdlan.gov.ab.ca
itr.gov.ab.ca
prod.util.moves.gov.ab.ca
goainternational.gov.ab.ca
sydsql.lrc.education.gov.ab.ca
www.fundingconsortium.gov.ab.ca
ocswc.lan.gov.ab.ca
xwiki.gov.ab.ca
www.padev1.gov.ab.ca
ext.sp.agric.gov.ab.ca
www.servicelink.gov.ab.ca
TheHive.gov.ab.ca
sni.cloudflaressl.com
blimscem.gov.ab.ca
wap.gov.ab.ca
extranet.inftra.gov.ab.ca
library.gov.ab.ca

Certificate

The complete raw certificate details for lyncaccess2.gov.ab.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwslGmwbFnJ9fulLefFfH
AGOKdvBi9+yYUGnl9FQ6dIOurA2M5kt/kJxjQKgdB0W+sPtYU6bfMER5CVgGQbIr
oXHTCts0QEShmj+lceOX62stWaSH4E/8e5uExYtBDVFW51bSsckc+u7DlUKKXF/P
N08ZyileYW8yK0S52S2nPHKyp8ClaI2IJXEVQYuhqRL2jxx+oC0MUfPmDosSkvwm
A4rgOxNZpOSq6pbI6ATqlY6EkKiNquc9gLJ/VC6XEDOagtAtnggebF6b5kxXLtRs
UT/yYplAVypy1rzAXxVUYR5r/0BOJffs9L8R/NCt+ha0kAZX0/Dt102Vzr/wWPxv
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81561509203947121121965593569441078927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyncaccess2.gov.ab.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24589483961084962207708925397654357779484353102937328840638356799249718749639851878532022537157527074858505466115821113605724211091970338836452453647697482662156494078333395995695176999864863424580943950685521986061218843961519363516908852489116965747868549485354355222396416937096772498625077236463269693564409828268741688332978400818342568684865868333064610451383949570949893352424779193610400886075833564637319921373717790722508684776989194812606940286818954433952470641887308196026086820700348826430748622119322497144233464623545582848336499427464850797833367170789672184541876838912834419518067656844607506640857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							927b847c1adf519cfd979835b018401eda0954f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (676 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncaccess2.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Skypeav.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Skypeconf.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Skypemedia.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SkypemediaDR.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confDR.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncaccess.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncav.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncav2.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncweb.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebcon.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebcon2.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebconf.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebdr.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meeting.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officeweb.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officewebdr.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skype.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypedr.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypejjb.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypencc.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypeweb.gov.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypewebdr.gov.ab.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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