san.rogersmedia.com

- Rogers Communications Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:68:87:db:44:73:e3:02:01:c5:18:21:34:dd:fa:3a was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Rogers Communications Inc.

Organization: Rogers Communications Inc.
State / Province: Ontario
Locality: Toronto
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:68:87:db:44:73:e3:02:01:c5:18:21:34:dd:fa:3a
Serial Number (int): 8518122345446280061506961125578504762
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ab:17:6b:1c:21:58:46:35:8a:1f:ae:2f:ab:09:f3:da:85:59:30:5b
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 88:d8:36:50:b1:8a:02:42:b3:e3:a7:4a:dc:35:b7:e1:66:6b:08:90
Fingerprint (sha256): 3c:9b:64:32:f1:83:96:04:12:d0:1b:51:9b:fc:cf:54:bb:15:89:09:2c:78:f5:ec:3b:f4:8e:63:c7:10:1e:31

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate san.rogersmedia.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san.rogersmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san.rogersmedia.com
1310news.com
570news.com
660citynews.com
660news.com
680news.com
airmiles.rogersdigitalmedia.com
akamai-utility.rogersdigitalmedia.com
akamaiv3-utility.rogersmedia.com
allinforequality.ca
allinforequality.com
allinforequity.ca
allinforequity.com
amsmallbusiness.rogersdigitalmedia.com
analytics.rogersmedia.com
assets1.sportsnet.ca
assets2.sportsnet.ca
assets3.sportsnet.ca
assets4.sportsnet.ca
breakfasttelevision.ca
btcalgary.ca
btmontreal.ca
bttoronto.ca
btvancouver.ca
bugs.1310news.com
bugs.570news.com
bugs.660citynews.com
bugs.citynews1130.com
bugs.mymcmurray.com
bugs.news957.com
cityline.tv
citynews.ca
citynews1130.com
citytv.com
eyesandears.1310news.com
eyesandears.570news.com
eyesandears.660citynews.com
eyesandears.citynews1130.com
eyesandears.mymcmurray.com
eyesandears.news957.com
fonts.rogersdigitalmedia.com
fxnowcanada.ca
gamecenterlive.rogers.com
gamecentrelive.rogers.com
images.rogersdigitalmedia.com
int-www.allinforequity.ca
int-www.rogerssportsandmedia.com
macleans.ca
mobile-stats.sportsnet.ca
mymcmurray.com
news1130.com
news957.com
nextlabs.ca
nhllive.com
nhllive.rogers.com
nxt-labs.ca
nxtlabs.ca
nxtlabs.net
oln.ca
omnitv.ca
player.halifax.citynews.ca
player.kitchener.citynews.ca
player.ottawa.citynews.ca
player.rogersradio.ca
pmd.fan590.com
pmd.fan960.com
preprod-www.rogerssportsandmedia.com
radioadminassets.rogersdigitalmedia.com
rogersmedia.com
rogerssportsandmedia.com
san.thegrandslamofcurling.com
secure.gamecentrelive.rogers.com
secure.mobile.rogersdigitalmedia.com
snnow.ca
sportsnet.ca
sportsnet.rogersdigitalmedia.com
staging-player.halifax.citynews.ca
staging-player.kitchener.citynews.ca
staging-www.allinforequity.ca
staging-www.rogerssportsandmedia.com
static.rogersdigitalmedia.com
thegrandslamofcurling.com
www.allinforequality.ca
www.allinforequality.com
www.allinforequity.ca
www.allinforequity.com
www.nextlabs.ca
www.nhllive.rogers.com
www.nxt-labs.ca
www.nxtlabs.ca
www.nxtlabs.net
www.rogerssportsandmedia.com

Other certificates including the domain name rogersmedia.com

(limited to 100 certificates)
san.rogersmedia.com
san2.rogersmedia.com
li.lisecurelink.com
uc18.janrainengage.com
san2.rogersmedia.com
san.rogers.com
li.lisecurelink.com
san2.rogersmedia.com
san.rogersmedia.com
san.rogersmedia.com
san.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
shared.rogersmedia.com
li.lisecurelink.com
analytics.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
www.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
san2.rogersmedia.com
oms.rogersmedia.com
*.rogersmedia.com
www.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
oms.rogersmedia.com
san.rogersmedia.com
www.rogersmedia.com
uc18.janrainengage.com
li.lisecurelink.com
oms.rogersmedia.com
www.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
li.lisecurelink.com
oms.rogersmedia.com
*.rogersmedia.com
san.rogersmedia.com
li.lisecurelink.com
uc18.janrainengage.com
li.lisecurelink.com
san2.rogersmedia.com
san2.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
san2.rogersmedia.com
oms.rogersmedia.com
san.rogersmedia.com
*.rogersmedia.com
san2.rogersmedia.com
li.lisecurelink.com
www.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
uc18.janrainengage.com
oms.rogersmedia.com
li.lisecurelink.com
san.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
san2.rogersmedia.com
san2.rogersmedia.com
uc18.janrainengage.com
san2.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
analytics.rogersmedia.com
li.lisecurelink.com
*.rogersmedia.com
san.rogersmedia.com
li.lisecurelink.com
san.rogersmedia.com
san2.rogersmedia.com
uc18.janrainengage.com
san2.rogersmedia.com
li.lisecurelink.com
san.rogers.com
uc18.janrainengage.com
li.lisecurelink.com
li.lisecurelink.com
san.rogersmedia.com
watch.rogersmedia.com
san.rogersmedia.com
oms.rogersmedia.com
san.rogersmedia.com
san.rogers.com
san2.rogersmedia.com
li.lisecurelink.com
san.rogersmedia.com

Certificate

The complete raw certificate details for san.rogersmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiNIUXbmG68MIciqp8H5
apkx4kp+5AGgIsPqtbN/sIX+T3Nm7hR8ULfBH6J6iA52Q/76PupDDHqZ7wPGJYfM
OVlbNUnIKLcdfh5FAbj4LFmdXMASa521o28Xbvn1hKOEJPmNU4IBjy07cBKZVWAP
Ry1gUgW/KZ5aEWJQDTMwdv9Spc7mdBgbD6pPbI3/FSNLqsy+RLRKTDwe9FMJA4vG
/kLxxS6esm9nux3yFzdIPaheOxKcYfw7IPOah38DcMxUX2/m4y/7JmP9+1nv5JXZ
egSRUvpUcZivp0ZoKjNWPvxJZsaEioK+m5o+PC6+Fa1t4mKVnxefLqAilhJtjsWv
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8518122345446280061506961125578504762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rogers Communications Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san.rogersmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20468003850272833143079524312711089316439012191694398962545129843316121260836019863987295333750549446645400791191219843590000801278892213913493563052596294768664648388781251556268943256899348830300528779779786032507797157700630958815832710948275933238399367717093994399574742073011548283436189037542705659298932930945912572007495956262805367263029230319552698520894523822783871184503724983124319514868161970999916890810946991404661943636640547961398204873790225583902601263536528936006722620959848924709119150966921530863716899258324411689759581318304986888780600509118269819478834862825060189928349031582169502691099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab176b1c215846358a1fae2fab09f3da8559305b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san.rogersmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1310news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '570news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '660citynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '660news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '680news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airmiles.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai-utility.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaiv3-utility.rogersmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allinforequality.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allinforequality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allinforequity.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allinforequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsmallbusiness.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.rogersmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets1.sportsnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.sportsnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets3.sportsnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets4.sportsnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakfasttelevision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btmontreal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bttoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btvancouver.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.1310news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.570news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.660citynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.citynews1130.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.mymcmurray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.news957.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityline.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citynews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citynews1130.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyesandears.1310news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyesandears.570news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyesandears.660citynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyesandears.citynews1130.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyesandears.mymcmurray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyesandears.news957.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxnowcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamecenterlive.rogers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamecentrelive.rogers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-www.allinforequity.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-www.rogerssportsandmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-stats.sportsnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymcmurray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news1130.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news957.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextlabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhllive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhllive.rogers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxt-labs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxtlabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxtlabs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oln.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnitv.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.halifax.citynews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.kitchener.citynews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.ottawa.citynews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.rogersradio.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmd.fan590.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmd.fan960.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-www.rogerssportsandmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioadminassets.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogersmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerssportsandmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san.thegrandslamofcurling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.gamecentrelive.rogers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snnow.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsnet.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-player.halifax.citynews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-player.kitchener.citynews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-www.allinforequity.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-www.rogerssportsandmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegrandslamofcurling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allinforequality.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allinforequality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allinforequity.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allinforequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextlabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhllive.rogers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nxt-labs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nxtlabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nxtlabs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rogerssportsandmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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