decisia.lexum.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:84:db:fa:e7:df:ef:0e:91:bb:92:ce:66:76:49:fd:ef:40 was issued on by Let's Encrypt.
With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=decisia.lexum.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:84:db:fa:e7:df:ef:0e:91:bb:92:ce:66:76:49:fd:ef:40Serial Number (int): 306546533937114630614839064013399322914624
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 94:39:1e:3e:f7:3b:69:f7:00:04:27:fc:6e:c9:25:e6:fa:37:63:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8c:f0:01:a7:40:12:8c:99:51:be:e6:d2:86:ea:0e:b7:67:f2:e8:bf
Fingerprint (sha256): 1f:97:a1:a0:cc:a3:44:f7:52:72:a6:cb:64:6b:bc:e3:0a:90:be:a8:39:59:64:3f:68:39:b0:76:a2:71:9e:0d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate decisia.lexum.com
55
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for decisia.lexum.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
csc.lexum.com
decisia-api.lexum.com
decisia-demo-api.lexum.com
decisia-demo.lexum.com
decisia-fja-cmf.lexum.com
decisia.jmc-cmj.forces.gc.ca
decisia.judiciary.gov.rw
decisia.lexum.com
decision.tcc-cci.gc.ca
decisions.abcouncil.ab.ca
decisions.aglc.ca
decisions.cai.gouv.qc.ca
decisions.cart-crac.gc.ca
decisions.cb-cda.gc.ca
decisions.chrt-tcdp.gc.ca
decisions.cisro-ocra.com
decisions.citt-tcce.gc.ca
decisions.civilresolutionbc.ca
decisions.cmac-cacm.ca
decisions.courts.ns.ca
decisions.fca-caf.gc.ca
decisions.fct-cf.gc.ca
decisions.fpslreb-crtespf.gc.ca
decisions.grc-rcmp.gc.ca
decisions.grc.gc.ca
decisions.icm.mb.ca
decisions.ipc.on.ca
decisions.opic-cipo.gc.ca
decisions.osc.gov.on.ca
decisions.psdpt-tpfd.gc.ca
decisions.rcmp-grc.gc.ca
decisions.rcmp.gc.ca
decisions.scc-csc.ca
decisions.surfacerightsboard.bc.ca
decisions.tatc.gc.ca
docs.mbsecurities.ca
nmonesource.com
opinions.arcourts.gov
recueil.cmf-fja.gc.ca
recueil.cmf.gc.ca
recueil.fja-cmf.gc.ca
recueil.fja.gc.ca
reports.cmf-fja.gc.ca
reports.cmf.gc.ca
reports.fja-cmf.gc.ca
reports.fja.gc.ca
scc-csc-api.lexum.com
scc-csc.lexum.com
scc.lexum.com
www.energyregtracker.ca
www.energyregtracker.com
www.nmonesource.com
www.ordersdecisions.bcuc.com
www.trackenergyregs.ca
www.trackenergyregs.com
decisia-api.lexum.com
decisia-demo-api.lexum.com
decisia-demo.lexum.com
decisia-fja-cmf.lexum.com
decisia.jmc-cmj.forces.gc.ca
decisia.judiciary.gov.rw
decisia.lexum.com
decision.tcc-cci.gc.ca
decisions.abcouncil.ab.ca
decisions.aglc.ca
decisions.cai.gouv.qc.ca
decisions.cart-crac.gc.ca
decisions.cb-cda.gc.ca
decisions.chrt-tcdp.gc.ca
decisions.cisro-ocra.com
decisions.citt-tcce.gc.ca
decisions.civilresolutionbc.ca
decisions.cmac-cacm.ca
decisions.courts.ns.ca
decisions.fca-caf.gc.ca
decisions.fct-cf.gc.ca
decisions.fpslreb-crtespf.gc.ca
decisions.grc-rcmp.gc.ca
decisions.grc.gc.ca
decisions.icm.mb.ca
decisions.ipc.on.ca
decisions.opic-cipo.gc.ca
decisions.osc.gov.on.ca
decisions.psdpt-tpfd.gc.ca
decisions.rcmp-grc.gc.ca
decisions.rcmp.gc.ca
decisions.scc-csc.ca
decisions.surfacerightsboard.bc.ca
decisions.tatc.gc.ca
docs.mbsecurities.ca
nmonesource.com
opinions.arcourts.gov
recueil.cmf-fja.gc.ca
recueil.cmf.gc.ca
recueil.fja-cmf.gc.ca
recueil.fja.gc.ca
reports.cmf-fja.gc.ca
reports.cmf.gc.ca
reports.fja-cmf.gc.ca
reports.fja.gc.ca
scc-csc-api.lexum.com
scc-csc.lexum.com
scc.lexum.com
www.energyregtracker.ca
www.energyregtracker.com
www.nmonesource.com
www.ordersdecisions.bcuc.com
www.trackenergyregs.ca
www.trackenergyregs.com
Other certificates including the domain name lexum.com
(limited to 100 certificates)
decisia.lexum.com
decisia-us.lexum.com
qweri.lexum.com
caij.lexum.com
mail.lexum.com
decisia.lexum.com
lexum.ca
decisia.lexum.com
lexum.com
lexum.com
qweri.lexum.com
*.lexum.com
decisia.lexum.com
lexum.ca
qweri.lexum.com
qweri.lexum.com
decisia.lexum.com
lexum.ca
*.lexum.com
decisia.lexum.com
qweri.lexum.com
decisia-us.lexum.com
decisia.lexum.com
decisia.lexum.com
qweri.lexum.com
*.lexum.com
decisia.lexum.com
decisia-us.lexum.com
lexum.com
qweri.lexum.com
lexum.ca
app.mylexbox.com
qweri.lexum.com
decisia.lexum.com
aaa.mpac.ca
mail.lexum.com
app.mylexbox.com
decisia.lexum.com
*.lexum.com
jira.lexum.com
jira.lexum.com
qweri.lexum.com
*.lexum.com
intranet.lexum.com
lexum.com
mail.lexum.com
qweri.lexum.com
*.lexum.com
decisia-us.lexum.com
decisia.lexum.com
mail.lexum.com
mail.lexum.com
mail.lexum.com
decisia.lexum.com
decisia-waperc.lexum.com
mail.lexum.com
*.lexum.com
qweri.lexum.com
caij.lexum.com
decisia.lexum.com
intranet.lexum.com
app.mylexbox.com
decisia.lexum.com
aaa.mpac.ca
qweri.lexum.com
*.lexum.com
decisia.lexum.com
decisia.lexum.com
decisia.lexum.com
decisia.lexum.com
lexum.com
intranet.lexum.com
decisia-us.lexum.com
jira.lexum.com
intranet.lexum.com
qweri.lexum.com
app.mylexbox.com
qweri.lexum.com
aaa.mpac.ca
lexum.ca
app.mylexbox.com
jira.lexum.com
lexum.com
qweri.lexum.com
qweri.lexum.com
*.lexum.com
lexum.com
decisia.lexum.com
lexum.ca
lexum.com
jira.lexum.com
decisia.lexum.com
decisia.lexum.com
aaa.mpac.ca
qweri.lexum.com
*.lexum.com
decisia.lexum.com
mail.lexum.com
intranet.lexum.com
*.lexum.com
decisia-us.lexum.com
qweri.lexum.com
caij.lexum.com
mail.lexum.com
decisia.lexum.com
lexum.ca
decisia.lexum.com
lexum.com
lexum.com
qweri.lexum.com
*.lexum.com
decisia.lexum.com
lexum.ca
qweri.lexum.com
qweri.lexum.com
decisia.lexum.com
lexum.ca
*.lexum.com
decisia.lexum.com
qweri.lexum.com
decisia-us.lexum.com
decisia.lexum.com
decisia.lexum.com
qweri.lexum.com
*.lexum.com
decisia.lexum.com
decisia-us.lexum.com
lexum.com
qweri.lexum.com
lexum.ca
app.mylexbox.com
qweri.lexum.com
decisia.lexum.com
aaa.mpac.ca
mail.lexum.com
app.mylexbox.com
decisia.lexum.com
*.lexum.com
jira.lexum.com
jira.lexum.com
qweri.lexum.com
*.lexum.com
intranet.lexum.com
lexum.com
mail.lexum.com
qweri.lexum.com
*.lexum.com
decisia-us.lexum.com
decisia.lexum.com
mail.lexum.com
mail.lexum.com
mail.lexum.com
decisia.lexum.com
decisia-waperc.lexum.com
mail.lexum.com
*.lexum.com
qweri.lexum.com
caij.lexum.com
decisia.lexum.com
intranet.lexum.com
app.mylexbox.com
decisia.lexum.com
aaa.mpac.ca
qweri.lexum.com
*.lexum.com
decisia.lexum.com
decisia.lexum.com
decisia.lexum.com
decisia.lexum.com
lexum.com
intranet.lexum.com
decisia-us.lexum.com
jira.lexum.com
intranet.lexum.com
qweri.lexum.com
app.mylexbox.com
qweri.lexum.com
aaa.mpac.ca
lexum.ca
app.mylexbox.com
jira.lexum.com
lexum.com
qweri.lexum.com
qweri.lexum.com
*.lexum.com
lexum.com
decisia.lexum.com
lexum.ca
lexum.com
jira.lexum.com
decisia.lexum.com
decisia.lexum.com
aaa.mpac.ca
qweri.lexum.com
*.lexum.com
decisia.lexum.com
mail.lexum.com
intranet.lexum.com
*.lexum.com
Certificate
The complete raw certificate details for decisia.lexum.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKcDCCCVigAwIBAgISA4Tb+uff7w6Ru5LOZnZJ/e9AMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjcyMjAyMjBaFw0x OTExMjUyMjAyMjBaMBwxGjAYBgNVBAMTEWRlY2lzaWEubGV4dW0uY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dvSzsyOcOM5cINjvhqSOzcLj7+g Z2lO0VOfWc/sjIbSbPHlR+3Y15U654MJAX/l766UKAo6PtHLKZvUHeGi7yvDSCnt M/NvWPr8UvrRT6R9V40Fi/ZDsKtBoqqeAhqyepaSVpNDo/YWQx7A+/SM4O3yIZsV BJfjZN9LWy5QBY7DwWXpEW8kma/XhhFk3+0WZ6dnLKWQCHSNGe9kd0vrDRFWpF7R 2so/SpXPxcBfqSADGcGeP1Sxch3r5y02+wl3jPYw5l1ah9rndRuFB/YN1yJ5timL +VTpPquFnqzA9epLt5RofPi7qBxzcw/sBCbt87sQegTGFylU549t4cb+jQIDAQAB o4IHfDCCB3gwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSUOR4+9ztp9wAEJ/xuySXm +jdjRzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMIIFMQYDVR0RBIIFKDCCBSSCDWNzYy5sZXh1bS5jb22CFWRlY2lzaWEt YXBpLmxleHVtLmNvbYIaZGVjaXNpYS1kZW1vLWFwaS5sZXh1bS5jb22CFmRlY2lz aWEtZGVtby5sZXh1bS5jb22CGWRlY2lzaWEtZmphLWNtZi5sZXh1bS5jb22CHGRl Y2lzaWEuam1jLWNtai5mb3JjZXMuZ2MuY2GCGGRlY2lzaWEuanVkaWNpYXJ5Lmdv di5yd4IRZGVjaXNpYS5sZXh1bS5jb22CFmRlY2lzaW9uLnRjYy1jY2kuZ2MuY2GC GWRlY2lzaW9ucy5hYmNvdW5jaWwuYWIuY2GCEWRlY2lzaW9ucy5hZ2xjLmNhghhk ZWNpc2lvbnMuY2FpLmdvdXYucWMuY2GCGWRlY2lzaW9ucy5jYXJ0LWNyYWMuZ2Mu Y2GCFmRlY2lzaW9ucy5jYi1jZGEuZ2MuY2GCGWRlY2lzaW9ucy5jaHJ0LXRjZHAu Z2MuY2GCGGRlY2lzaW9ucy5jaXNyby1vY3JhLmNvbYIZZGVjaXNpb25zLmNpdHQt dGNjZS5nYy5jYYIeZGVjaXNpb25zLmNpdmlscmVzb2x1dGlvbmJjLmNhghZkZWNp c2lvbnMuY21hYy1jYWNtLmNhghZkZWNpc2lvbnMuY291cnRzLm5zLmNhghdkZWNp c2lvbnMuZmNhLWNhZi5nYy5jYYIWZGVjaXNpb25zLmZjdC1jZi5nYy5jYYIfZGVj aXNpb25zLmZwc2xyZWItY3J0ZXNwZi5nYy5jYYIYZGVjaXNpb25zLmdyYy1yY21w LmdjLmNhghNkZWNpc2lvbnMuZ3JjLmdjLmNhghNkZWNpc2lvbnMuaWNtLm1iLmNh ghNkZWNpc2lvbnMuaXBjLm9uLmNhghlkZWNpc2lvbnMub3BpYy1jaXBvLmdjLmNh ghdkZWNpc2lvbnMub3NjLmdvdi5vbi5jYYIaZGVjaXNpb25zLnBzZHB0LXRwZmQu Z2MuY2GCGGRlY2lzaW9ucy5yY21wLWdyYy5nYy5jYYIUZGVjaXNpb25zLnJjbXAu Z2MuY2GCFGRlY2lzaW9ucy5zY2MtY3NjLmNhgiJkZWNpc2lvbnMuc3VyZmFjZXJp Z2h0c2JvYXJkLmJjLmNhghRkZWNpc2lvbnMudGF0Yy5nYy5jYYIUZG9jcy5tYnNl Y3VyaXRpZXMuY2GCD25tb25lc291cmNlLmNvbYIVb3BpbmlvbnMuYXJjb3VydHMu Z292ghVyZWN1ZWlsLmNtZi1mamEuZ2MuY2GCEXJlY3VlaWwuY21mLmdjLmNhghVy ZWN1ZWlsLmZqYS1jbWYuZ2MuY2GCEXJlY3VlaWwuZmphLmdjLmNhghVyZXBvcnRz LmNtZi1mamEuZ2MuY2GCEXJlcG9ydHMuY21mLmdjLmNhghVyZXBvcnRzLmZqYS1j bWYuZ2MuY2GCEXJlcG9ydHMuZmphLmdjLmNhghVzY2MtY3NjLWFwaS5sZXh1bS5j b22CEXNjYy1jc2MubGV4dW0uY29tgg1zY2MubGV4dW0uY29tghd3d3cuZW5lcmd5 cmVndHJhY2tlci5jYYIYd3d3LmVuZXJneXJlZ3RyYWNrZXIuY29tghN3d3cubm1v bmVzb3VyY2UuY29tghx3d3cub3JkZXJzZGVjaXNpb25zLmJjdWMuY29tghZ3d3cu dHJhY2tlbmVyZ3lyZWdzLmNhghd3d3cudHJhY2tlbmVyZ3lyZWdzLmNvbTBMBgNV HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA 7wB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbNVQ16EAAAQD AEcwRQIhAM6PHfjKgT2dbslWrGeb1LL5Kv8+Cp3Ub8h6TedmZftzAiAo3bL1dkRH kLC3qHs0TVRNMgYW4+GAhArLFYJxb7tlKgB1AOJpS64m6OlACeiGG7Y7g9Q+5/50 iPukjyiTAZ3d8dv+AAABbNVQ15wAAAQDAEYwRAIgGyvY6xMBjFGuucuvpO+I8bn8 ztst2EHqL/7c738JTW4CIAhb4zP0JHQAZNGpnwi0UTXYU/xm99K55dd6E9iEgMGl MA0GCSqGSIb3DQEBCwUAA4IBAQBD/8wo5o1qo4s2kudewJbPEsRu7wkGXuh8xPmz hbgNxZp1xj/PYOY7gNCrkYvuJ3vIRgbgtP4V6/W91DKRDMI7etFp+z7nnMye2y1N RBzvL8hrwgoe/FVSA1PQHAGr3wlgyqwa8GnEfhGqlZp/v7wGg5jfECZ5OvTt5jQM NoCxS1J9DFrZ0APsY7CEJ2TDSqWjxW5P7B5hnXlFuXubHcKF9F36pWQ8hoMQIHYH lvEJXmRIJXU7A1hDvgyacuo6uD0sxHiXUTEh55pM+nH+1DkfgGyyxFyHcAsrzTc0 XiY/CAcayZMptDSbsuiXWzmoD+Mjt8MpacIzWRuit32muV0p -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dvSzsyOcOM5cINjvhqS OzcLj7+gZ2lO0VOfWc/sjIbSbPHlR+3Y15U654MJAX/l766UKAo6PtHLKZvUHeGi 7yvDSCntM/NvWPr8UvrRT6R9V40Fi/ZDsKtBoqqeAhqyepaSVpNDo/YWQx7A+/SM 4O3yIZsVBJfjZN9LWy5QBY7DwWXpEW8kma/XhhFk3+0WZ6dnLKWQCHSNGe9kd0vr DRFWpF7R2so/SpXPxcBfqSADGcGeP1Sxch3r5y02+wl3jPYw5l1ah9rndRuFB/YN 1yJ5timL+VTpPquFnqzA9epLt5RofPi7qBxzcw/sBCbt87sQegTGFylU549t4cb+ jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306546533937114630614839064013399322914624 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 22:02:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 22:02:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'decisia.lexum.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27502111169792794452394898844838259133270983851436024004731059094467901334863370029384038056196104244027885543094825216003627802974298905455630915183422156785719564306532191672229964735711307382113521432160849641678707117707689128795927223562933780135421701367462246269562424490997956032509278769913529285553248769259965106681037293487105920982028822525747496342252172666548896186377241839240016205480240624123022924467728384972802297007756491650699257445169362216023693611678504016135076343535974603778812400693927860978770364603711986719618758458917190030989105260070624776071995602551865093356763515131424991018637 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 94391e3ef73b69f7000427fc6ec925e6fa376347 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1320 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.lexum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia-api.lexum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia-demo-api.lexum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia-demo.lexum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia-fja-cmf.lexum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia.jmc-cmj.forces.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia.judiciary.gov.rw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisia.lexum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decision.tcc-cci.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.abcouncil.ab.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.aglc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cai.gouv.qc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cart-crac.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cb-cda.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.chrt-tcdp.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cisro-ocra.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.citt-tcce.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.civilresolutionbc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.cmac-cacm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.courts.ns.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.fca-caf.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.fct-cf.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.fpslreb-crtespf.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.grc-rcmp.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.grc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.icm.mb.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.ipc.on.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.opic-cipo.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.osc.gov.on.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.psdpt-tpfd.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.rcmp-grc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.rcmp.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.scc-csc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.surfacerightsboard.bc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decisions.tatc.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.mbsecurities.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmonesource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opinions.arcourts.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recueil.cmf-fja.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recueil.cmf.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recueil.fja-cmf.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recueil.fja.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.cmf-fja.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.cmf.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.fja-cmf.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.fja.gc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scc-csc-api.lexum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scc-csc.lexum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scc.lexum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyregtracker.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyregtracker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nmonesource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordersdecisions.bcuc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trackenergyregs.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trackenergyregs.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cd550d7a10000040300473045022100ce8f1df8ca813d9d6ec956ac679bd4b2f92aff3e0a9dd46fc87a4de76665fb73022028ddb2f576444790b0b7a87b344d544d320616e3e180840acb1582716fbb652a007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cd550d79c000004030046304402201b2bd8eb13018c51aeb9cbafa4ef88f1b9fccedb2dd841ea2ffedcef7f094d6e0220085be333f424740064d1a99f08b45135d853fc66f7d2b9e5d77a13d88480c1a5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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