communityvotes.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:e8:51:36:a9:c2:6c:7e:59:df:28:b8:fd:35:a8:ac:38 was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=communityvotes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:e8:51:36:a9:c2:6c:7e:59:df:28:b8:fd:35:a8:ac:38
Serial Number (int): 328341004291552169896915468412158875315256
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:89:bd:81:95:70:e6:d2:7b:61:55:15:de:da:66:c2:2e:1e:de:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d9:cc:78:2a:06:21:65:fa:3f:e7:0a:c0:e9:02:d0:70:f8:a4:29:96
Fingerprint (sha256): 0d:50:34:bd:31:4a:29:8b:f6:a6:65:2f:b8:1e:71:3a:fa:cd:fc:06:c5:67:7f:b5:83:fd:40:09:59:a8:47:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate communityvotes.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for communityvotes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.communityvotes.com
caledon.communityvotes.com
calgary.metrocommunitychoice.com
cambridgetimes.communityvotes.com
cambridgetimeschoice.ca
cmv.to
cmvt.ca
cmvtdemo.communityvotes.com
communityvotes.com
dufferin.communityvotes.com
edmonton.metrocommunitychoice.com
forteriepost.communityvotes.com
grimsbylincolnnews.communityvotes.com
guelphmercurytribune.communityvotes.com
halifax.metrocommunitychoice.com
haltonhills.communityvotes.com
kawarthalakesthisweek.communityvotes.com
kitchenerreaderschoice.ca
london.communityvotes.com
metrocommunitychoice.com
niagara.communityvotes.com
niagaraonthelakeadvance.communityvotes.com
niagarathisweekniagarafalls.communityvotes.com
niagarathisweekstcatharinesthorold.communityvotes.com
niagarathisweekwellandpelham.communityvotes.com
peterboroughexaminer.communityvotes.com
peterboroughthisweek.communityvotes.com
portcolborneleader.communityvotes.com
readerschoice.burlingtonpost.com
readerschoice.hamiltonnews.com
readerschoice.kamloopsthisweek.com
region1.cmvtregiondemo.communityvotes.com
region2.cmvtregiondemo.communityvotes.com
sachem.communityvotes.com
sarnia.communityvotes.com
scarboroughmirrorreaderschoice.toronto.com
src.toronto.com
waterlooreaderschoice.ca
www.cmv.to
www.cmvt.ca
www.communityvotes.com
www.readerschoice.kamloopsthisweek.com

Other certificates including the domain name communityvotes.com

(limited to 100 certificates)
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com

Certificate

The complete raw certificate details for communityvotes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKijCCCXKgAwIBAgISA8ToUTapwmx+Wd8ouP01qKw4MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDkxODU0MDVaFw0x
OTEyMDgxODU0MDVaMB0xGzAZBgNVBAMTEmNvbW11bml0eXZvdGVzLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOAbTD+O4Ypbbi1YCL+sQDdIoIVn
7aYBdpcA7UtoA7H2aQdFoZ+ei3mwK1+foFYzV0lKEINiPs5SX8ZbT21UPu08iY+Y
D3LOzeHPjp7jFtQ6i7I2HlMKY2uULTLfHoncBchNhRM2Y5C0H5Urzvhyj7bZIQPa
trpWFfXuVplNFp5EVAw7F3sFuhEqFYPWtFq2TKjfBH55x5jGauk0cbOYvtKtXZCv
XrPdVuBW2tO/JdVu2D0FNgwk/ivSfqWroOtwXG9DSOLjneZanEATO/4SHUMYF2Ds
tuh5MVcvOc7MjfM1HX/oyNmj/UJa+JuoUDpoPh/S48Ft9FhUT0GEGSIUgb0CAwEA
AaOCB5UwggeRMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU8Ym9gZVw5tJ7YVUV3tpm
wi4e3u0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBUoGA1UdEQSCBUEwggU9ghdhdXRoLmNvbW11bml0eXZvdGVzLmNv
bYIaY2FsZWRvbi5jb21tdW5pdHl2b3Rlcy5jb22CIGNhbGdhcnkubWV0cm9jb21t
dW5pdHljaG9pY2UuY29tgiFjYW1icmlkZ2V0aW1lcy5jb21tdW5pdHl2b3Rlcy5j
b22CF2NhbWJyaWRnZXRpbWVzY2hvaWNlLmNhggZjbXYudG+CB2NtdnQuY2GCG2Nt
dnRkZW1vLmNvbW11bml0eXZvdGVzLmNvbYISY29tbXVuaXR5dm90ZXMuY29tghtk
dWZmZXJpbi5jb21tdW5pdHl2b3Rlcy5jb22CIWVkbW9udG9uLm1ldHJvY29tbXVu
aXR5Y2hvaWNlLmNvbYIfZm9ydGVyaWVwb3N0LmNvbW11bml0eXZvdGVzLmNvbYIl
Z3JpbXNieWxpbmNvbG5uZXdzLmNvbW11bml0eXZvdGVzLmNvbYInZ3VlbHBobWVy
Y3VyeXRyaWJ1bmUuY29tbXVuaXR5dm90ZXMuY29tgiBoYWxpZmF4Lm1ldHJvY29t
bXVuaXR5Y2hvaWNlLmNvbYIeaGFsdG9uaGlsbHMuY29tbXVuaXR5dm90ZXMuY29t
gihrYXdhcnRoYWxha2VzdGhpc3dlZWsuY29tbXVuaXR5dm90ZXMuY29tghlraXRj
aGVuZXJyZWFkZXJzY2hvaWNlLmNhghlsb25kb24uY29tbXVuaXR5dm90ZXMuY29t
ghhtZXRyb2NvbW11bml0eWNob2ljZS5jb22CGm5pYWdhcmEuY29tbXVuaXR5dm90
ZXMuY29tgipuaWFnYXJhb250aGVsYWtlYWR2YW5jZS5jb21tdW5pdHl2b3Rlcy5j
b22CLm5pYWdhcmF0aGlzd2Vla25pYWdhcmFmYWxscy5jb21tdW5pdHl2b3Rlcy5j
b22CNW5pYWdhcmF0aGlzd2Vla3N0Y2F0aGFyaW5lc3Rob3JvbGQuY29tbXVuaXR5
dm90ZXMuY29tgi9uaWFnYXJhdGhpc3dlZWt3ZWxsYW5kcGVsaGFtLmNvbW11bml0
eXZvdGVzLmNvbYIncGV0ZXJib3JvdWdoZXhhbWluZXIuY29tbXVuaXR5dm90ZXMu
Y29tgidwZXRlcmJvcm91Z2h0aGlzd2Vlay5jb21tdW5pdHl2b3Rlcy5jb22CJXBv
cnRjb2xib3JuZWxlYWRlci5jb21tdW5pdHl2b3Rlcy5jb22CIHJlYWRlcnNjaG9p
Y2UuYnVybGluZ3RvbnBvc3QuY29tgh5yZWFkZXJzY2hvaWNlLmhhbWlsdG9ubmV3
cy5jb22CInJlYWRlcnNjaG9pY2Uua2FtbG9vcHN0aGlzd2Vlay5jb22CKXJlZ2lv
bjEuY212dHJlZ2lvbmRlbW8uY29tbXVuaXR5dm90ZXMuY29tgilyZWdpb24yLmNt
dnRyZWdpb25kZW1vLmNvbW11bml0eXZvdGVzLmNvbYIZc2FjaGVtLmNvbW11bml0
eXZvdGVzLmNvbYIZc2FybmlhLmNvbW11bml0eXZvdGVzLmNvbYIqc2NhcmJvcm91
Z2htaXJyb3JyZWFkZXJzY2hvaWNlLnRvcm9udG8uY29tgg9zcmMudG9yb250by5j
b22CGHdhdGVybG9vcmVhZGVyc2Nob2ljZS5jYYIKd3d3LmNtdi50b4ILd3d3LmNt
dnQuY2GCFnd3dy5jb21tdW5pdHl2b3Rlcy5jb22CJnd3dy5yZWFkZXJzY2hvaWNl
LmthbWxvb3BzdGhpc3dlZWsuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG
AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK/
/V5CIAjGNzV55hB7zFYAAAFtF5cs3gAABAMARjBEAiB3NgNqd5qVev+vn/V3SpuP
kvNo5/tWuYI39L0bvmB6xAIgSwRjQg/fh/GT6Mt6pZTKy0YgXTFco2K27QZRe/qD
LWoAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW0XlyzMAAAE
AwBHMEUCIBLhYuxCe+ijVKRXto13EztrWwOg97cxkUVhrdsjTOrTAiEA8sQ7N3KY
8FRu2NA7vdqYbuBhS9J8aYVsOYWU508veB0wDQYJKoZIhvcNAQELBQADggEBAJoN
rrIym8Sl432/8kmzHOiW3g5j9wGLWg2XlEaWtsQ6Romi6xPPEjxoU+kBB1Xtyw8x
G51VLGkO9FavItcW2w9m2leegdnzb/jSfRTC+I3no+D1F0W0CR1WGK2ZLGh/gGec
YH4GNxYA1En36Th6Nk7JLH6Dx0hEP1FuN/9y18cUPOOCGgSboLApd4nP7F+UrZOb
Zo+0IfOp+Ze6WU9MrraRxgjCka7jPe4rdc3xXU/yDhYl4NY1p6/+D/ze6r0ZFjhF
81deiaKgMiQJt+k2LRGqNioZWLqIMoDaC8K8f076voqKK7pazjd5SZ2vnkxDDuxH
WYFxLOs8rEEUaiid9Xg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BtMP47hiltuLVgIv6xA
N0ighWftpgF2lwDtS2gDsfZpB0Whn56LebArX5+gVjNXSUoQg2I+zlJfxltPbVQ+
7TyJj5gPcs7N4c+OnuMW1DqLsjYeUwpja5QtMt8eidwFyE2FEzZjkLQflSvO+HKP
ttkhA9q2ulYV9e5WmU0WnkRUDDsXewW6ESoVg9a0WrZMqN8EfnnHmMZq6TRxs5i+
0q1dkK9es91W4Fba078l1W7YPQU2DCT+K9J+paug63Bcb0NI4uOd5lqcQBM7/hId
QxgXYOy26HkxVy85zsyN8zUdf+jI2aP9Qlr4m6hQOmg+H9LjwW30WFRPQYQZIhSB
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328341004291552169896915468412158875315256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 18:54:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 18:54:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'communityvotes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28290841381378825957994982495828968187046352605939113851003644985212736662022971332998116956446893484388819534507790782064044121276613084545622044411375642787423261716340057544597276408459078920068555852508275427306301342679468151134654082174120070266111081139141854646527202684216451719196793300438909644325500711318789605617457056778420383676865352798598582001841889641688826245173592935301041483400577028684149399992133962586344143992862113201856751284561124964276763851767088467079597359258820610667369430249016648757491493967079791801197769926471185891953598796422447970119017272958652530885647196483968109412797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f189bd819570e6d27b615515deda66c22e1edeed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1345 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caledon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calgary.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgetimes.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgetimeschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmv.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvtdemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dufferin.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmonton.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forteriepost.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grimsbylincolnnews.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guelphmercurytribune.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifax.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haltonhills.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawarthalakesthisweek.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenerreaderschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'london.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagara.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagaraonthelakeadvance.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekniagarafalls.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekstcatharinesthorold.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekwellandpelham.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughexaminer.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughthisweek.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portcolborneleader.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.burlingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.hamiltonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region1.cmvtregiondemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region2.cmvtregiondemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachem.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarnia.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarboroughmirrorreaderschoice.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterlooreaderschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmv.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readerschoice.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d17972cde000004030046304402207736036a779a957affaf9ff5774a9b8f92f368e7fb56b98237f4bd1bbe607ac402204b0463420fdf87f193e8cb7aa594cacb46205d315ca362b6ed06517bfa832d6a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d17972ccc0000040300473045022012e162ec427be8a354a457b68d77133b6b5b03a0f7b731914561addb234cead3022100f2c43b377298f0546ed8d03bbdda986ee0614bd27c69856c398594e74f2f781d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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