stg2.theglobeandmail.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:27:73:15:3e:7a:6c:20:98:7d:c9:34:aa:73:a8:d7:d7 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stg2.theglobeandmail.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:27:73:15:3e:7a:6c:20:98:7d:c9:34:aa:73:a8:d7:d7
Serial Number (int): 329786050983244349961915410780503732180951
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:4a:f0:c4:99:3f:8b:fa:fd:12:19:35:54:91:dd:b1:cd:02:ae:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:d6:95:a8:4b:6d:2b:9f:fe:f2:73:97:a7:98:c2:05:ff:56:ed:92
Fingerprint (sha256): 1e:67:79:52:d3:79:d5:e5:23:64:93:f5:cf:de:23:8e:86:5b:30:b5:20:59:b3:38:60:ab:24:7e:54:59:db:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stg2.theglobeandmail.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stg2.theglobeandmail.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

images.qa1.theglobeandmail.com
images.qa2.theglobeandmail.com
images.qa3.theglobeandmail.com
images.qa4.theglobeandmail.com
images.qa5.theglobeandmail.com
images.stg1.theglobeandmail.com
images.stg2.theglobeandmail.com
qa1.theglobeandmail.com
qa2.theglobeandmail.com
qa3.theglobeandmail.com
qa4.theglobeandmail.com
qa5.theglobeandmail.com
static.qa1.theglobeandmail.ca
static.qa2.theglobeandmail.ca
static.qa3.theglobeandmail.ca
static.qa4.theglobeandmail.ca
static.qa5.theglobeandmail.ca
static.stg1.theglobeandmail.ca
static.stg2.theglobeandmail.ca
stg1.theglobeandmail.com
stg2.theglobeandmail.com

Other certificates including the domain name theglobeandmail.com

(limited to 100 certificates)
sp.theglobeandmail.com
star.arcpublishing.com
visit.theglobeandmail.com
modcom-elb.theglobeandmail.com
investor.theglobeandmail.com
sec.theglobeandmail.com
*.theglobeandmail.com
pr.theglobeandmail.com
securepayment.theglobeandmail.com
myglobe-prd.theglobeandmail.com
star2.arcpublishing.com
dashboard.theglobeandmail.com
sec.theglobeandmail.com
somniture.theglobeandmail.com
datastore.theglobeandmail.com
mi.theglobeandmail.com
ask.theglobeandmail.com
markets365.theglobeandmail.com
star.arcpublishing.com
*.theglobeandmail.com
sp.theglobeandmail.com
investor.theglobeandmail.com
star.arcpublishing.com
ellipsis-revision-history-stg.theglobeandmail.com
www.theglobeandmail.com
star.arcpublishing.com
sec.theglobeandmail.com
hermes.theglobeandmail.com
fbads.theglobeandmail.com
pr.theglobeandmail.com
star2.arcpublishing.com
prostation.theglobeandmail.com
datastore.theglobeandmail.com
star.arcpublishing.com
assets.theglobeandmail.com
datastore.theglobeandmail.com
sec.theglobeandmail.com
tgam.web.arc-cdn.net
*.theglobeandmail.com
star.arcpublishing.com
sophiapi.theglobeandmail.com
analytics.theglobeandmail.com
star.arcpublishing.com
cicero-dev.theglobeandmail.com
datastore.theglobeandmail.com
api.services.theglobeandmail.com
elbstreambeacon02.theglobeandmail.com
markets365.theglobeandmail.com
star.arcpublishing.com
datastore.theglobeandmail.com
star2.arcpublishing.com
prod-delphi-api.theglobeandmail.com
star2.arcpublishing.com
ask.theglobeandmail.com
stg2.theglobeandmail.com
prod-househubapi.theglobeandmail.com
star2.arcpublishing.com
sophi-stg.theglobeandmail.com
pr.theglobeandmail.com
sec.theglobeandmail.com
tgam.cdn.arcpublishing.com
*.theglobeandmail.com
gig.theglobeandmail.com
pr.theglobeandmail.com
star2.arcpublishing.com
*.theglobeandmail.com
investor.theglobeandmail.com
sophi.theglobeandmail.com
tracker.theglobeandmail.com
markets365.theglobeandmail.com
sec.theglobeandmail.com
*.theglobeandmail.com
star.arcpublishing.com
www.theglobeandmail.com
sophiadminapi.theglobeandmail.com
sec.images.theglobeandmail.com
datastore.theglobeandmail.com
tgam.web.arc-cdn.net
stg-househubapi.theglobeandmail.com
*.theglobeandmail.com
datastage.theglobeandmail.com
sophi.theglobeandmail.com
datastore.theglobeandmail.com
star.arcpublishing.com
*.theglobeandmail.com
somniture.theglobeandmail.com
advisor.theglobeandmail.com
*.theglobeandmail.com
athena.theglobeandmail.com
sophiapi.theglobeandmail.com
data.theglobeandmail.com
star.arcpublishing.com
star2.arcpublishing.com
star.arcpublishing.com
modcom-elb.theglobeandmail.com
star2.arcpublishing.com
datastore.theglobeandmail.com
star2.arcpublishing.com
d1ctp1t7g37fjp.theglobeandmail.com
star2.arcpublishing.com

Certificate

The complete raw certificate details for stg2.theglobeandmail.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbTCCBlWgAwIBAgISA8kncxU+emwgmH3JNKpzqNfXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA5MTkxMzIzMDBaFw0x
NzEyMTgxMzIzMDBaMCMxITAfBgNVBAMTGHN0ZzIudGhlZ2xvYmVhbmRtYWlsLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO1d+F+etHE4+h74+MUe
A1hmeeA4gdQBU0lv6UKFr2chb9wmGOQzW0TSol6IhBXsMUvt5gWarSbhCSBbmOUF
skByF7u79kXDcH+S4+0vvjgDtpQOp5E9yaUltjx2n+jukxefFpiTHdEdse0M2W5D
7wPuyU0k0O5Gw5Xs6MC34LlkMIwAuR5LWqzpPo1U6aTqgRJU+ltkZ72VDkbENyWy
omz07tXnGF+0PZcaOgAKhE6PygIQo8SQSIrlclwhkIfinPExaFu3y08IfzP0apwG
dusFCcolp8PgpaiBcC6PRmawjBzzoGzGjqD+F3nFb2+jKtSb39o6dM7xZ0Zqn+pL
P2kCAwEAAaOCBHIwggRuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUE0rwxJk/i/r9
Ehk1VJHdsc0CrscwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCAnsGA1UdEQSCAnIwggJugh5pbWFnZXMucWExLnRoZWds
b2JlYW5kbWFpbC5jb22CHmltYWdlcy5xYTIudGhlZ2xvYmVhbmRtYWlsLmNvbYIe
aW1hZ2VzLnFhMy50aGVnbG9iZWFuZG1haWwuY29tgh5pbWFnZXMucWE0LnRoZWds
b2JlYW5kbWFpbC5jb22CHmltYWdlcy5xYTUudGhlZ2xvYmVhbmRtYWlsLmNvbYIf
aW1hZ2VzLnN0ZzEudGhlZ2xvYmVhbmRtYWlsLmNvbYIfaW1hZ2VzLnN0ZzIudGhl
Z2xvYmVhbmRtYWlsLmNvbYIXcWExLnRoZWdsb2JlYW5kbWFpbC5jb22CF3FhMi50
aGVnbG9iZWFuZG1haWwuY29tghdxYTMudGhlZ2xvYmVhbmRtYWlsLmNvbYIXcWE0
LnRoZWdsb2JlYW5kbWFpbC5jb22CF3FhNS50aGVnbG9iZWFuZG1haWwuY29tgh1z
dGF0aWMucWExLnRoZWdsb2JlYW5kbWFpbC5jYYIdc3RhdGljLnFhMi50aGVnbG9i
ZWFuZG1haWwuY2GCHXN0YXRpYy5xYTMudGhlZ2xvYmVhbmRtYWlsLmNhgh1zdGF0
aWMucWE0LnRoZWdsb2JlYW5kbWFpbC5jYYIdc3RhdGljLnFhNS50aGVnbG9iZWFu
ZG1haWwuY2GCHnN0YXRpYy5zdGcxLnRoZWdsb2JlYW5kbWFpbC5jYYIec3RhdGlj
LnN0ZzIudGhlZ2xvYmVhbmRtYWlsLmNhghhzdGcxLnRoZWdsb2JlYW5kbWFpbC5j
b22CGHN0ZzIudGhlZ2xvYmVhbmRtYWlsLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeB
DAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNh
dGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFu
ZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5
IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0G
CSqGSIb3DQEBCwUAA4IBAQAXDCtaVNr3dTxyw/+lLbNmOB+Bs59UGMp5182aGwR8
zXDNouTB7f5QHil914saaFBrjT+MWjnaMqqQRlkqsWeQ4ex8gXwT0m/4KqiJ3wNn
8UHrldQNAYR7q+s5y3qHMYYCADjT2EY0Bo/pooJjZ8lk7Y308iXDQoJlhsX/u8h0
w+Z/W77dw27PXvKzZrO/wzDht2CLzqpkljJQ5xg4HBgJ9CWwVQnfteemfHXMrtDv
/3B9mN5PggVm/K0V7FOzlwbu7lR5FmfdumvB4WdQkjKLuZtPbGAmfpFBNM61igIc
TCbsUViYHgAhng2oarIfNdU72n1t1PuLWZzB3wJ76X4F
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V34X560cTj6Hvj4xR4D
WGZ54DiB1AFTSW/pQoWvZyFv3CYY5DNbRNKiXoiEFewxS+3mBZqtJuEJIFuY5QWy
QHIXu7v2RcNwf5Lj7S++OAO2lA6nkT3JpSW2PHaf6O6TF58WmJMd0R2x7QzZbkPv
A+7JTSTQ7kbDlezowLfguWQwjAC5HktarOk+jVTppOqBElT6W2RnvZUORsQ3JbKi
bPTu1ecYX7Q9lxo6AAqETo/KAhCjxJBIiuVyXCGQh+Kc8TFoW7fLTwh/M/RqnAZ2
6wUJyiWnw+ClqIFwLo9GZrCMHPOgbMaOoP4XecVvb6Mq1Jvf2jp0zvFnRmqf6ks/
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329786050983244349961915410780503732180951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-19 13:23:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-18 13:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg2.theglobeandmail.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29964816714092943450875147426038208721167053004615943878901708972999732981333067606664275794699402291391147520723145224435223623246769263674794406073095469650401933468377074041330637901678314535144710522222965657801655118965541010844304209949763220788464914643027170061161971376281759267019132820676498088275681294217749608193998761852909185851271140335187419668488987049488836079637813240660975179603190817683614134340689814159346112770627747863512828795194864100208782991259409664398754286749162836013227322982984311306957399989365842930400498660142449203427957032288459628677099360078593804388485265512111530524521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							134af0c4993f8bfafd1219355491ddb1cd02aec7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.qa1.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.qa2.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.qa3.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.qa4.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.qa5.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.stg1.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.stg2.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa4.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa5.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.qa1.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.qa2.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.qa3.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.qa4.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.qa5.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.stg1.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.stg2.theglobeandmail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg1.theglobeandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg2.theglobeandmail.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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