decisia.lexum.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:db:fa:e7:df:ef:0e:91:bb:92:ce:66:76:49:fd:ef:40 was issued on by Let's Encrypt.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=decisia.lexum.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:db:fa:e7:df:ef:0e:91:bb:92:ce:66:76:49:fd:ef:40
Serial Number (int): 306546533937114630614839064013399322914624
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:39:1e:3e:f7:3b:69:f7:00:04:27:fc:6e:c9:25:e6:fa:37:63:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:f0:01:a7:40:12:8c:99:51:be:e6:d2:86:ea:0e:b7:67:f2:e8:bf
Fingerprint (sha256): 1f:97:a1:a0:cc:a3:44:f7:52:72:a6:cb:64:6b:bc:e3:0a:90:be:a8:39:59:64:3f:68:39:b0:76:a2:71:9e:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate decisia.lexum.com

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for decisia.lexum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

csc.lexum.com
decisia-api.lexum.com
decisia-demo-api.lexum.com
decisia-demo.lexum.com
decisia-fja-cmf.lexum.com
decisia.jmc-cmj.forces.gc.ca
decisia.judiciary.gov.rw
decisia.lexum.com
decision.tcc-cci.gc.ca
decisions.abcouncil.ab.ca
decisions.aglc.ca
decisions.cai.gouv.qc.ca
decisions.cart-crac.gc.ca
decisions.cb-cda.gc.ca
decisions.chrt-tcdp.gc.ca
decisions.cisro-ocra.com
decisions.citt-tcce.gc.ca
decisions.civilresolutionbc.ca
decisions.cmac-cacm.ca
decisions.courts.ns.ca
decisions.fca-caf.gc.ca
decisions.fct-cf.gc.ca
decisions.fpslreb-crtespf.gc.ca
decisions.grc-rcmp.gc.ca
decisions.grc.gc.ca
decisions.icm.mb.ca
decisions.ipc.on.ca
decisions.opic-cipo.gc.ca
decisions.osc.gov.on.ca
decisions.psdpt-tpfd.gc.ca
decisions.rcmp-grc.gc.ca
decisions.rcmp.gc.ca
decisions.scc-csc.ca
decisions.surfacerightsboard.bc.ca
decisions.tatc.gc.ca
docs.mbsecurities.ca
nmonesource.com
opinions.arcourts.gov
recueil.cmf-fja.gc.ca
recueil.cmf.gc.ca
recueil.fja-cmf.gc.ca
recueil.fja.gc.ca
reports.cmf-fja.gc.ca
reports.cmf.gc.ca
reports.fja-cmf.gc.ca
reports.fja.gc.ca
scc-csc-api.lexum.com
scc-csc.lexum.com
scc.lexum.com
www.energyregtracker.ca
www.energyregtracker.com
www.nmonesource.com
www.ordersdecisions.bcuc.com
www.trackenergyregs.ca
www.trackenergyregs.com

Other certificates including the domain name lexum.com

(limited to 100 certificates)
decisia.lexum.com
decisia-us.lexum.com
qweri.lexum.com
caij.lexum.com
mail.lexum.com
decisia.lexum.com
lexum.ca
decisia.lexum.com
lexum.com
lexum.com
qweri.lexum.com
*.lexum.com
decisia.lexum.com
lexum.ca
qweri.lexum.com
qweri.lexum.com
decisia.lexum.com
lexum.ca
*.lexum.com
decisia.lexum.com
qweri.lexum.com
decisia-us.lexum.com
decisia.lexum.com
decisia.lexum.com
qweri.lexum.com
*.lexum.com
decisia.lexum.com
decisia-us.lexum.com
lexum.com
qweri.lexum.com
lexum.ca
app.mylexbox.com
qweri.lexum.com
decisia.lexum.com
aaa.mpac.ca
mail.lexum.com
app.mylexbox.com
decisia.lexum.com
*.lexum.com
jira.lexum.com
jira.lexum.com
qweri.lexum.com
*.lexum.com
intranet.lexum.com
lexum.com
mail.lexum.com
qweri.lexum.com
*.lexum.com
decisia-us.lexum.com
decisia.lexum.com
mail.lexum.com
mail.lexum.com
mail.lexum.com
decisia.lexum.com
decisia-waperc.lexum.com
mail.lexum.com
*.lexum.com
qweri.lexum.com
caij.lexum.com
decisia.lexum.com
intranet.lexum.com
app.mylexbox.com
decisia.lexum.com
aaa.mpac.ca
qweri.lexum.com
*.lexum.com
decisia.lexum.com
decisia.lexum.com
decisia.lexum.com
decisia.lexum.com
lexum.com
intranet.lexum.com
decisia-us.lexum.com
jira.lexum.com
intranet.lexum.com
qweri.lexum.com
app.mylexbox.com
qweri.lexum.com
aaa.mpac.ca
lexum.ca
app.mylexbox.com
jira.lexum.com
lexum.com
qweri.lexum.com
qweri.lexum.com
*.lexum.com
lexum.com
decisia.lexum.com
lexum.ca
lexum.com
jira.lexum.com
decisia.lexum.com
decisia.lexum.com
aaa.mpac.ca
qweri.lexum.com
*.lexum.com
decisia.lexum.com
mail.lexum.com
intranet.lexum.com
*.lexum.com

Certificate

The complete raw certificate details for decisia.lexum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dvSzsyOcOM5cINjvhqS
OzcLj7+gZ2lO0VOfWc/sjIbSbPHlR+3Y15U654MJAX/l766UKAo6PtHLKZvUHeGi
7yvDSCntM/NvWPr8UvrRT6R9V40Fi/ZDsKtBoqqeAhqyepaSVpNDo/YWQx7A+/SM
4O3yIZsVBJfjZN9LWy5QBY7DwWXpEW8kma/XhhFk3+0WZ6dnLKWQCHSNGe9kd0vr
DRFWpF7R2so/SpXPxcBfqSADGcGeP1Sxch3r5y02+wl3jPYw5l1ah9rndRuFB/YN
1yJ5timL+VTpPquFnqzA9epLt5RofPi7qBxzcw/sBCbt87sQegTGFylU549t4cb+
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306546533937114630614839064013399322914624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 22:02:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 22:02:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'decisia.lexum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27502111169792794452394898844838259133270983851436024004731059094467901334863370029384038056196104244027885543094825216003627802974298905455630915183422156785719564306532191672229964735711307382113521432160849641678707117707689128795927223562933780135421701367462246269562424490997956032509278769913529285553248769259965106681037293487105920982028822525747496342252172666548896186377241839240016205480240624123022924467728384972802297007756491650699257445169362216023693611678504016135076343535974603778812400693927860978770364603711986719618758458917190030989105260070624776071995602551865093356763515131424991018637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94391e3ef73b69f7000427fc6ec925e6fa376347
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1320 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia-api.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia-demo-api.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia-demo.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia-fja-cmf.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia.jmc-cmj.forces.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia.judiciary.gov.rw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decision.tcc-cci.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.abcouncil.ab.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.aglc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cai.gouv.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cart-crac.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cb-cda.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.chrt-tcdp.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cisro-ocra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.citt-tcce.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.civilresolutionbc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cmac-cacm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.courts.ns.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.fca-caf.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.fct-cf.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.fpslreb-crtespf.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.grc-rcmp.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.grc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.icm.mb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.ipc.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.opic-cipo.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.osc.gov.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.psdpt-tpfd.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.rcmp-grc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.rcmp.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.scc-csc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.surfacerightsboard.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.tatc.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.mbsecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmonesource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opinions.arcourts.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recueil.cmf-fja.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recueil.cmf.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recueil.fja-cmf.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recueil.fja.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.cmf-fja.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.cmf.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.fja-cmf.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.fja.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scc-csc-api.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scc-csc.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scc.lexum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyregtracker.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyregtracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nmonesource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordersdecisions.bcuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trackenergyregs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trackenergyregs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cd550d7a10000040300473045022100ce8f1df8ca813d9d6ec956ac679bd4b2f92aff3e0a9dd46fc87a4de76665fb73022028ddb2f576444790b0b7a87b344d544d320616e3e180840acb1582716fbb652a007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cd550d79c000004030046304402201b2bd8eb13018c51aeb9cbafa4ef88f1b9fccedb2dd841ea2ffedcef7f094d6e0220085be333f424740064d1a99f08b45135d853fc66f7d2b9e5d77a13d88480c1a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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