idrc.ocadu.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:6b:d8:7e:59:f6:4a:03:a0:db:86:c5:97:65:f5:fa:2b was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=idrc.ocadu.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:6b:d8:7e:59:f6:4a:03:a0:db:86:c5:97:65:f5:fa:2b
Serial Number (int): 343828542084529416933117922329784990693931
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:be:57:6a:48:39:a2:21:b3:a0:21:ad:0c:0b:41:10:88:c1:11:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:77:80:4c:9a:7e:a5:f5:4f:0c:f6:56:cc:c5:40:da:42:42:f1:f3
Fingerprint (sha256): 35:e1:ee:06:dc:73:d6:a4:41:df:e7:3d:38:7f:e0:f9:23:5b:fc:01:35:ae:1e:db:9a:ba:47:20:92:ca:b6:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate idrc.ocadu.ca

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idrc.ocadu.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adod.idrc.ocad.ca
adod.idrc.ocadu.ca
aegis.idrc.ocad.ca
aegis.idrc.ocadu.ca
aha.idrc.ocad.ca
aha.idrc.ocadu.ca
bell-community.idrc.ocad.ca
bell-community.idrc.ocadu.ca
clinic.idrc.ocad.ca
clinic.idrc.ocadu.ca
cnice.idrc.ocad.ca
cnice.idrc.ocadu.ca
courses.idrc.ocad.ca
courses.idrc.ocadu.ca
culturall.idrc.ocad.ca
culturall.idrc.ocadu.ca
culturall1.idrc.ocad.ca
culturall1.idrc.ocadu.ca
culturall2.idrc.ocad.ca
culturall2.idrc.ocadu.ca
deep-dev.idrc.ocadu.ca
deep.idrc.ocad.ca
deep.idrc.ocadu.ca
idrc.ocad.ca
idrc.ocadu.ca
ilc.idrc.ocad.ca
ilc.idrc.ocadu.ca
jan.idrc.ocad.ca
jan.idrc.ocadu.ca
lists.idrc.ocad.ca
lists.idrc.ocadu.ca
mobile-accessibility.idrc.ocad.ca
mobile-accessibility.idrc.ocadu.ca
nide.idrc.ocad.ca
nide.idrc.ocadu.ca
opencaps.idrc.ocad.ca
opencaps.idrc.ocadu.ca
opendoors.idrc.ocad.ca
opendoors.idrc.ocadu.ca
outside-in.idrc.ocad.ca
outside-in.idrc.ocadu.ca
pipedaproject.idrc.ocad.ca
pipedaproject.idrc.ocadu.ca
static.idrc.ocad.ca
static.idrc.ocadu.ca
stretch.idrc.ocad.ca
stretch.idrc.ocadu.ca
stretch2.idrc.ocad.ca
stretch2.idrc.ocadu.ca
timetrack.idrc.ocad.ca
timetrack.idrc.ocadu.ca
tts.idrc.ocad.ca
tts.idrc.ocadu.ca
websavvy.idrc.ocad.ca
websavvy.idrc.ocadu.ca
wiki.mobile-accessibility.idrc.ocad.ca
wiki.mobile-accessibility.idrc.ocadu.ca
www.idrc.ocad.ca
www.idrc.ocadu.ca

Other certificates including the domain name ocadu.ca

(limited to 100 certificates)
webco-its.ocadu.ca
idrc.ocadu.ca
designjam.ocadu.ca
5745189578604544-fe1.pantheonsite.io
ocad.ca
www2.ocadu.ca
wlan-login.its.ocadu.ca
designjam.ocadu.ca
snow.idrc.ocadu.ca
eportfolio.ocadu.ca
slab.ocadu.ca
www2.ocadu.ca
idrc.ocadu.ca
adfs.ocadu.ca
apply.ocadu.ca
courses.idrc.ocadu.ca
www1.ocadu.ca
snow.idrc.ocadu.ca
www2.ocadu.ca
adod.idrc.ocad.ca
www1.ocadu.ca
eportfolio.ocadu.ca
idrc.ocadu.ca
continuingstudies.ocadu.ca
5745189578604544-fe1.pantheonsite.io
achecker.ca
admissions.ocadu.ca
*.ocadu.ca
apply.ocadu.ca
opendoors.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
www2.ocadu.ca
continuingstudies-staff.ocadu.ca
snow.idrc.ocadu.ca
wireless-login.ocadu.ca
ocad.ca
snow.idrc.ocadu.ca
idrc.ocadu.ca
eportfolio.ocadu.ca
clown.idrc.ocadu.ca
achecker.ca
idrc.ocadu.ca
www2.ocadu.ca
infodrive.ocadu.ca
webco-its.ocadu.ca
webco-its.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
csa-its.ocadu.ca
snow.idrc.ocadu.ca
cnice.idrc.ocad.ca
snow.idrc.ocadu.ca
adfs.ocadu.ca
snow.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
infodrive.ocadu.ca
webco-its.ocadu.ca
achecker.ca
*.ocadu.ca
clown.idrc.ocadu.ca
5768714657988608-fe2.pantheonsite.io
snow.idrc.ocadu.ca
ocad.ca
*.ocadu.ca
*.ocadu.ca
ocad.ca
5745189578604544-fe1.pantheonsite.io
openresearch.ocadu.ca
*.ocadu.ca
snow.idrc.ocadu.ca
webco-its.ocadu.ca
legacy.idrc.ocadu.ca
hybrid.ocadu.ca
5745189578604544-fe1.pantheonsite.io
slab.ocadu.ca
infodrive.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
*.ocadu.ca
slab.ocadu.ca
wlan-login.its.ocadu.ca
adfs.ocadu.ca
adod.idrc.ocad.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
*.ocadu.ca
adfs.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
idrc.ocadu.ca
vpn.ocadu.ca
5745189578604544-fe1.pantheonsite.io
continuingstudies-staff.ocadu.ca
www2.ocadu.ca
5768714657988608-fe2.pantheonsite.io
www2.ocadu.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
clown.idrc.ocadu.ca

Certificate

The complete raw certificate details for idrc.ocadu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl4tBrM6OJJC5hFPh6Wr
64pCfcpBnBzbeso3pWC7//CDLHNdlewl8SEu/MM4411LqK+APoXWEoZ3amZvUMWx
nZBq3/ZBtBOyan7V3rKXPRQ9lP3wFKcEvVPloz4Q2c96uokck9alj8bdqPcwXeOB
c6Ln28LJe3TZByu5Yg1GdmtqmAlxlwXqUcUU529zmTlQf1VS2ypyWwvpRz8rvIVd
wP8Jy30ZZes27XwErQ/C/KwJkyiftcD+wlas0kHs22Z7tMPqBSuLXid2q44SYwKU
1/ri7IhDVUm2lSVMCat4h5hPL4pt+pxNkxc3+xOXhx2TltZUaksJSKKDiyTmSFZz
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343828542084529416933117922329784990693931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 23:26:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 23:26:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idrc.ocadu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24031717802535096264875633509595545983238446335556999213880042993580908884405867101816408109359626032822371163933311864568086050276545952605715524853450952706937524077599072079574236473762273266783231893157755077428857098886501747806629208700809830090490292889500395526857841138225477476176537909216551745985090797855598366236306406492148957651399004071172155681703484302414069561283617217393044095668710103972384739056930539549049115947451983622932184339748524439414689163246902201837117101838703060847886642171551670819021233670071445827127990802657246004326254088316567935978183750126331800207269670011332428460927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08be576a4839a221b3a021ad0c0b411088c11163
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adod.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adod.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegis.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegis.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aha.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aha.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell-community.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell-community.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinic.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinic.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnice.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnice.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall1.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall1.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall2.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall2.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep-dev.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilc.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilc.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-accessibility.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-accessibility.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nide.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nide.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencaps.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencaps.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendoors.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendoors.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outside-in.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outside-in.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipedaproject.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipedaproject.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch2.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch2.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetrack.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetrack.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tts.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tts.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websavvy.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websavvy.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.mobile-accessibility.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.mobile-accessibility.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016be392aa7400000403004630440220308f313c4cd43167d9787bccd804b1a0edaf8e4927c4a4b049c6243cf43f8a9202204b92321a494f1531d5e8b351aad8a15cfdbc96a8d0b4d4bc1fa3ffa5fcca2f6100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016be392aa75000004030047304502202367e6e8b2af9e91aaab70fff2f853db422a9f9d5a9bf4ceeb059a4f3e81877c022100fcf8c6682b04527f1a6e938721208f23dc613f15ce683126262fe306724bd192
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ea6b506c79864cc9b643166546ea2abe74cdf79db898b29ec6c0db9c2dc587b647ba085c0efdd2ed43166bf096212f6df0524a9b61ce37dcea6750c0f318ed4fa5a7855c476def9afff2b69c3b7434928d9938dcdfffee1cabc94edcb7c2b4ae0b366dc7645917f606aace37897af32b30ffd9a308849a46b326823823a81b07b466e84626c5ef73b53bd688ee0dd38179b31982d2530732cde60c5c968b0ce1ed8c7ceca55bc07242147ca4e4fcab518d5dc7d311226579370aa49e9f679890252d7e9d2e340fcddd5b3351ce7e2e7f3f30b84550f1aeeb8b932939012933dc8ab5db67ae9973af16cbe81a2661137827146dbfa68ec038d2cccf5cc5886a9