portal.guillevinmilestones.com

Issued by R11

About this certificate

This digital certificate with serial number 04:c4:69:91:aa:7f:6e:08:88:9a:24:25:25:29:26:cf:6d:12 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=portal.guillevinmilestones.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c4:69:91:aa:7f:6e:08:88:9a:24:25:25:29:26:cf:6d:12
Serial Number (int): 415284812924252492069645750336501513678098
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 70:1b:ad:12:89:a6:a1:61:fa:73:26:15:59:84:12:13:bc:6c:92:cb
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 43:e2:19:39:58:34:2d:e5:f5:01:44:dc:3e:eb:2a:3c:86:87:b5:af
Fingerprint (sha256): 16:22:e0:1b:64:c2:1e:24:41:e2:50:35:52:35:c0:98:d9:28:23:10:e4:59:c9:29:0e:51:fe:cb:73:0e:81:b5

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate portal.guillevinmilestones.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.guillevinmilestones.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barobertson.mecrewards.ca
barobinson.mecrewards.ca
bartlegibson.mecrewards.ca
beaulieulamoureux.mecrewards.ca
birdstairs.mecrewards.ca
birdstairsrewards.com
bws.mecrewards.ca
cde.mecrewards.ca
cdepoints.ca
daviessg.mecrewards.ca
demo.mecrewards.ca
diversifiedventures.mecrewards.ca
dubo.mecrewards.ca
duboxtra.com
dvrewards.ca
eddy.mecrewards.ca
eddyrewards.com
egpenner.mecrewards.ca
electromall.mecrewards.ca
electrozad.mecrewards.ca
ewel.mecrewards.ca
ews.mecrewards.ca
futech.mecrewards.ca
gberewards.com
gerrie.mecrewards.ca
greybruceelectric.mecrewards.ca
guillevin-catalog.mecrewards.ca
guillevin-demo.mecrewards.ca
guillevin.mecrewards.ca
guillevinmilestones.com
hudco.mecrewards.ca
idealsupply.mecrewards.ca
iesrewards.mecrewards.ca
iesupply.mecrewards.ca
independent.mecrewards.ca
inside.birdstairsrewards.com
inside.cdepoints.ca
inside.duboxtra.com
inside.dvrewards.ca
inside.eddyrewards.com
inside.gberewards.com
inside.mclrewards.ca
inside.pennerpoints.com
inside.provincepoints.com
inside.westernequipmentrewards.com
insideportal.duboxtra.com
insideportal.mclrewards.ca
macmor.mecrewards.ca
marcustransformer-rewards.mecrewards.ca
master.mecrewards.ca
mc.mecrewards.com
mcloughlan.mecrewards.ca
mclrewards.ca
mercurylighting.mecrewards.ca
nationalfire.mecrewards.ca
next.mecrewards.ca
oneil.mecrewards.ca
oneil.mecrewards.com
pareelectric.mecrewards.ca
pennerpoints.com
portal.duboxtra.com
portal.guillevinmilestones.com
powrmatic.mecrewards.ca
prestonhardware.mecrewards.ca
primerewards.gerrie.com
province-electric.mecrewards.ca
provincepoints.com
robertson.mecrewards.ca
robertsondemo.mecrewards.ca
robertsonrewards.ca
rrportal.onemotion.ca
rrstage.onemotion.ca
scscanada.mecrewards.ca
sdi.mecrewards.ca
sego.mecrewards.ca
signify.mecrewards.ca
tecfilles.mecrewards.ca
test.mecrewards.ca
toolway.mecrewards.ca
tradelco.mecrewards.ca
westernequipment.mecrewards.ca
westernequipmentrewards.com
wolseley.mecrewards.ca
www.guillevinmilestones.com
www.mclrewards.ca
www.provincepoints.com
www.robertsonrewards.ca

Other certificates including the domain name guillevinmilestones.com

(limited to 100 certificates)
portal.guillevinmilestones.com
master.mecrewards.ca
master.mecrewards.ca
electrozad.mecrewards.ca
inside.gberewards.com

Certificate

The complete raw certificate details for portal.guillevinmilestones.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29vybACd8Od1cxU9wkm5
9zFf5x0n+Wk4ojT9JryTGQr9IrYVux5j0VZf319Rqh7tN44Utay7NwnteCyHMImw
wDR5SMPN3Wgb9k1xYceknRhrYfNyoh2hcvBmadlI9o16g1nR5UAWqnymg2Zsd46b
T5TgVgMbhJcfSGZPJiUlTIxvtY6+y55YIqM4blKw0GlzLv0Aij8wdfNpYe7BfcD4
fRYgKtypIsxfLUra12AuLN88AuP2NprE90wcCM4FbypUAQfVWdlmcTP/SpifxiF0
oL3h2JuOQHYpObeWXlU/sVRzX01EmywYSxuXwcqzBEiMSwaw+Ld2q9LLm6IjYgHX
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415284812924252492069645750336501513678098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 13:51:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-17 13:51:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.guillevinmilestones.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27754648676137886466402366351384978812066590091422255660643068922661400450630392619953698940613275717612975248640903707958517642600337244488061130564843493044258114954966255354369636254749768940331964978461018475662998244006194549110038242828980253887813662249789006749829981885274885639310894054891072891091196811941182112209800109584141684724847081945235758849236756736970352051326665440657227667857562990136110446470898808008790048753219830838363377327186698001990780854055871989222768108571230400783092691377598484593975728328883619064596159264324383294905194571155233204248677891984123619389335708830975593142031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							701bad1289a6a161fa73261559841213bc6c92cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barobertson.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barobinson.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartlegibson.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaulieulamoureux.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdstairs.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdstairsrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bws.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdepoints.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daviessg.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversifiedventures.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubo.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duboxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddy.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egpenner.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electromall.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrozad.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewel.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ews.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futech.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gberewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerrie.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greybruceelectric.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guillevin-catalog.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guillevin-demo.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guillevin.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guillevinmilestones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudco.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idealsupply.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iesrewards.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iesupply.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independent.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.birdstairsrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.cdepoints.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.duboxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.dvrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.eddyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gberewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.mclrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.pennerpoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.provincepoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.westernequipmentrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insideportal.duboxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insideportal.mclrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macmor.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcustransformer-rewards.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.mecrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcloughlan.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercurylighting.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalfire.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneil.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneil.mecrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pareelectric.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennerpoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.duboxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.guillevinmilestones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powrmatic.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestonhardware.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primerewards.gerrie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'province-electric.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincepoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertson.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertsondemo.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertsonrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrportal.onemotion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrstage.onemotion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scscanada.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdi.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sego.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signify.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecfilles.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolway.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradelco.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernequipment.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernequipmentrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolseley.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guillevinmilestones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mclrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provincepoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertsonrewards.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019030fb3ae40000040300483046022100ee823d5d2b81da85819da0a974cd252e4715b3753a76f28f053f17fc1d7c0b26022100cc23f4fb5b1e1291ecf91c4aa0adf5ed361b32e80429e24060cad9936e649c32007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000019030fb3aed0000040300483046022100c5553f47ab3d9471a5af19f417dcf98a20b40c18a705038b491aa0d8ad0a459c0221009cfbc4cab0860626dc4a20c637ca47a8e7a4ce1e41aa1ea0653d8e6f94fa1a42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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