thinkradiant.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:98:81:f8:ab:76:ce:0d:24:f5:a7:fd:c6:e4:a2:3e:cf:df was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thinkradiant.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:98:81:f8:ab:76:ce:0d:24:f5:a7:fd:c6:e4:a2:3e:cf:df
Serial Number (int): 400344825077805539021499442150404746301407
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: af:2c:d0:9a:b5:2b:01:dc:36:c9:fa:a1:3c:91:5c:bb:39:7f:87:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d9:e3:08:93:70:57:51:ab:a7:43:0f:42:ea:fd:66:8b:0c:9b:db:2f
Fingerprint (sha256): 41:a2:e7:77:ca:a6:29:93:55:02:fa:00:d6:36:ca:29:4e:0d:f7:3d:5d:b1:bc:7e:a1:c9:95:55:91:45:a9:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thinkradiant.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thinkradiant.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

awakeningnc.org
butlercitychurch.com
communitybible.ca
communitybiblestudy.ca
createchange.emcc.ca
discipleshipessentials.org
emcc.ca
faithway.ca
forestcliff.ca
gatewayssm.ca
highlandsbaptistchurch.ca
hissecretplace.ca
hissecretplace.org
lead.emcc.ca
mikelee.photography
mtcbc.net
newbeginningscommunitychurchwindsor.com
one27.blog
orangevillechiropractor.com
oshawa-temple.org
overflow.emcc.ca
parklandinthesoo.ca
pitmanroadcoc.com
planifionspourproteger.com
plantoprotect.ca
plantoprotect.com
riveroflifemidland.ca
sanctuary7d0.com
sanjacintoaog.org
sjag.church
smithvillecrc.ca
spaconline.com
stjohnsuc.ca
sunnysidebaptistchurch.org
sunsetcov.org
taylorsvillemethodist.org
teameffort.org
theneighbourhoodchurch.com
theweekend.emcc.ca
thinkradiant.com
twr.ca
twrcanada.org
twrequip.ca
unitychristian.ca
us.plantoprotect.com
westsidebaptist.us
worldpartners.emcc.ca
www.awakeningnc.org
www.butlercitychurch.com
www.communitybible.ca
www.communitybiblestudy.ca
www.discipleshipessentials.org
www.emcc.ca
www.faithway.ca
www.forestcliff.ca
www.gatewayssm.ca
www.highlandsbaptistchurch.ca
www.hissecretplace.ca
www.hissecretplace.org
www.mikelee.photography
www.mtcbc.net
www.newbeginningscommunitychurchwindsor.com
www.one27.blog
www.orangevillechiropractor.com
www.oshawa-temple.org
www.parklandinthesoo.ca
www.pitmanroadcoc.com
www.planifionspourproteger.com
www.plantoprotect.ca
www.plantoprotect.com
www.riveroflifemidland.ca
www.sanctuary7d0.com
www.sanjacintoaog.org
www.sjag.church
www.smithvillecrc.ca
www.spaconline.com
www.stjohnsuc.ca
www.sunnysidebaptistchurch.org
www.sunsetcov.org
www.taylorsvillemethodist.org
www.teameffort.org
www.theneighbourhoodchurch.com
www.thinkradiant.com
www.twr.ca
www.twrcanada.org
www.twrequip.ca
www.unitychristian.ca
www.us.plantoprotect.com
www.westsidebaptist.us
youth.emcc.ca

Other certificates including the domain name thinkradiant.com

(limited to 100 certificates)
thinkradiant.com
1p7vq.thinkradiant.com
1p7vq.thinkradiant.com
3o6co.thinkradiant.com
thinkradiant.com
thinkradiant.com
www.thinkradiant.com
1p7vq.thinkradiant.com
1p7vq.thinkradiant.com
build.radiantwebtools.com
thinkradiant.com
8d0e3.thinkradiant.com
www.thinkradiant.com
build.radiantwebtools.com
warriorvip.global
warriorvip.global
thinkradiant.com
thinkradiant.com
warriorvip.global
warriorvip.global
warriorvip.global
thinkradiant.com
8d0e3.thinkradiant.com
thinkradiant.com
thinkradiant.com
warriorvip.global
thinkradiant.com
thinkradiant.com
build.radiantwebtools.com
8d0e3.thinkradiant.com
thinkradiant.com
thinkradiant.com
8d0e3.thinkradiant.com
8d0e3.thinkradiant.com
8d0e3.thinkradiant.com
info.sandycove.org
8d0e3.thinkradiant.com
1p7vq.thinkradiant.com
thinkradiant.com
8d0e3.thinkradiant.com
thinkradiant.com
8d0e3.thinkradiant.com
8d0e3.thinkradiant.com
www.thinkradiant.com
thinkradiant.com
thinkradiant.com
1p7vq.thinkradiant.com
8d0e3.thinkradiant.com
thinkradiant.com
build.radiantwebtools.com
www.thinkradiant.com
thinkradiant.com
thinkradiant.com
thinkradiant.com
1p7vq.thinkradiant.com
thinkradiant.com
thinkradiant.com
8d0e3.thinkradiant.com
www.thinkradiant.com
www.thinkradiant.com
thinkradiant.com
build.radiantwebtools.com
thinkradiant.com
build.radiantwebtools.com
build.radiantwebtools.com
www.thinkradiant.com
warriorvip.global
1p7vq.thinkradiant.com
thinkradiant.com
www.thinkradiant.com
www.thinkradiant.com
www.thinkradiant.com
3o6co.thinkradiant.com
8d0e3.thinkradiant.com
3o6co.thinkradiant.com
thinkradiant.com
8d0e3.thinkradiant.com
8d0e3.thinkradiant.com
build.radiantwebtools.com
warriorvip.global
thinkradiant.com
8d0e3.thinkradiant.com
thinkradiant.com
thinkradiant.com
8d0e3.thinkradiant.com
thinkradiant.com
warriorvip.global
thinkradiant.com
3o6co.thinkradiant.com
8d0e3.thinkradiant.com
build.radiantwebtools.com
1p7vq.thinkradiant.com
8d0e3.thinkradiant.com
thinkradiant.com
thinkradiant.com
1p7vq.thinkradiant.com
thinkradiant.com
thinkradiant.com
warriorvip.global
thinkradiant.com

Certificate

The complete raw certificate details for thinkradiant.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMxTCCC62gAwIBAgISBJiB+Kt2zg0k9af9xuSiPs/fMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMDExNDI5NDZaFw0x
OTA1MzAxNDI5NDZaMBsxGTAXBgNVBAMTEHRoaW5rcmFkaWFudC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCewO95GsygE3indFxk36IZLPtNqgJ2
7soqVQ3GHZWohOd2BGA+EQ4W2sc4n5eIZLxa/7023eAg1VWPXSmkEUw1tSqFmoIA
UF38OIAYJ3b1VwKEj4pAGO75avOrypnRVNJKErG1N7zeQg0NizGSYVg8jkij+0Tu
3tT96biXyPuonPCFuh7RA4kZld7aoc727tUmp+WCJFoC0CbRRZWFnehLRYa7UcBo
LkTy+oPbWRYc4cUrboDdjeAV0jC/MqLdeHqywWRn0iHXQwDAe6QZZir+C5wyDYKV
d21ByGbQKHPus81YBTfgoXRcVkTrTg6F9j9dBgs2fYqe+owkcFd4PAojAgMBAAGj
ggnSMIIJzjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFK8s0Jq1KwHcNsn6oTyRXLs5
f4eMMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wggeHBgNVHREEggd+MIIHeoIPYXdha2VuaW5nbmMub3JnghRidXRsZXJj
aXR5Y2h1cmNoLmNvbYIRY29tbXVuaXR5YmlibGUuY2GCFmNvbW11bml0eWJpYmxl
c3R1ZHkuY2GCFGNyZWF0ZWNoYW5nZS5lbWNjLmNhghpkaXNjaXBsZXNoaXBlc3Nl
bnRpYWxzLm9yZ4IHZW1jYy5jYYILZmFpdGh3YXkuY2GCDmZvcmVzdGNsaWZmLmNh
gg1nYXRld2F5c3NtLmNhghloaWdobGFuZHNiYXB0aXN0Y2h1cmNoLmNhghFoaXNz
ZWNyZXRwbGFjZS5jYYISaGlzc2VjcmV0cGxhY2Uub3JnggxsZWFkLmVtY2MuY2GC
E21pa2VsZWUucGhvdG9ncmFwaHmCCW10Y2JjLm5ldIInbmV3YmVnaW5uaW5nc2Nv
bW11bml0eWNodXJjaHdpbmRzb3IuY29tggpvbmUyNy5ibG9nghtvcmFuZ2V2aWxs
ZWNoaXJvcHJhY3Rvci5jb22CEW9zaGF3YS10ZW1wbGUub3JnghBvdmVyZmxvdy5l
bWNjLmNhghNwYXJrbGFuZGludGhlc29vLmNhghFwaXRtYW5yb2FkY29jLmNvbYIa
cGxhbmlmaW9uc3BvdXJwcm90ZWdlci5jb22CEHBsYW50b3Byb3RlY3QuY2GCEXBs
YW50b3Byb3RlY3QuY29tghVyaXZlcm9mbGlmZW1pZGxhbmQuY2GCEHNhbmN0dWFy
eTdkMC5jb22CEXNhbmphY2ludG9hb2cub3JnggtzamFnLmNodXJjaIIQc21pdGh2
aWxsZWNyYy5jYYIOc3BhY29ubGluZS5jb22CDHN0am9obnN1Yy5jYYIac3Vubnlz
aWRlYmFwdGlzdGNodXJjaC5vcmeCDXN1bnNldGNvdi5vcmeCGXRheWxvcnN2aWxs
ZW1ldGhvZGlzdC5vcmeCDnRlYW1lZmZvcnQub3Jnghp0aGVuZWlnaGJvdXJob29k
Y2h1cmNoLmNvbYISdGhld2Vla2VuZC5lbWNjLmNhghB0aGlua3JhZGlhbnQuY29t
ggZ0d3IuY2GCDXR3cmNhbmFkYS5vcmeCC3R3cmVxdWlwLmNhghF1bml0eWNocmlz
dGlhbi5jYYIUdXMucGxhbnRvcHJvdGVjdC5jb22CEndlc3RzaWRlYmFwdGlzdC51
c4IVd29ybGRwYXJ0bmVycy5lbWNjLmNhghN3d3cuYXdha2VuaW5nbmMub3Jnghh3
d3cuYnV0bGVyY2l0eWNodXJjaC5jb22CFXd3dy5jb21tdW5pdHliaWJsZS5jYYIa
d3d3LmNvbW11bml0eWJpYmxlc3R1ZHkuY2GCHnd3dy5kaXNjaXBsZXNoaXBlc3Nl
bnRpYWxzLm9yZ4ILd3d3LmVtY2MuY2GCD3d3dy5mYWl0aHdheS5jYYISd3d3LmZv
cmVzdGNsaWZmLmNhghF3d3cuZ2F0ZXdheXNzbS5jYYIdd3d3LmhpZ2hsYW5kc2Jh
cHRpc3RjaHVyY2guY2GCFXd3dy5oaXNzZWNyZXRwbGFjZS5jYYIWd3d3Lmhpc3Nl
Y3JldHBsYWNlLm9yZ4IXd3d3Lm1pa2VsZWUucGhvdG9ncmFwaHmCDXd3dy5tdGNi
Yy5uZXSCK3d3dy5uZXdiZWdpbm5pbmdzY29tbXVuaXR5Y2h1cmNod2luZHNvci5j
b22CDnd3dy5vbmUyNy5ibG9ngh93d3cub3JhbmdldmlsbGVjaGlyb3ByYWN0b3Iu
Y29tghV3d3cub3NoYXdhLXRlbXBsZS5vcmeCF3d3dy5wYXJrbGFuZGludGhlc29v
LmNhghV3d3cucGl0bWFucm9hZGNvYy5jb22CHnd3dy5wbGFuaWZpb25zcG91cnBy
b3RlZ2VyLmNvbYIUd3d3LnBsYW50b3Byb3RlY3QuY2GCFXd3dy5wbGFudG9wcm90
ZWN0LmNvbYIZd3d3LnJpdmVyb2ZsaWZlbWlkbGFuZC5jYYIUd3d3LnNhbmN0dWFy
eTdkMC5jb22CFXd3dy5zYW5qYWNpbnRvYW9nLm9yZ4IPd3d3LnNqYWcuY2h1cmNo
ghR3d3cuc21pdGh2aWxsZWNyYy5jYYISd3d3LnNwYWNvbmxpbmUuY29tghB3d3cu
c3Rqb2huc3VjLmNhgh53d3cuc3VubnlzaWRlYmFwdGlzdGNodXJjaC5vcmeCEXd3
dy5zdW5zZXRjb3Yub3Jngh13d3cudGF5bG9yc3ZpbGxlbWV0aG9kaXN0Lm9yZ4IS
d3d3LnRlYW1lZmZvcnQub3Jngh53d3cudGhlbmVpZ2hib3VyaG9vZGNodXJjaC5j
b22CFHd3dy50aGlua3JhZGlhbnQuY29tggp3d3cudHdyLmNhghF3d3cudHdyY2Fu
YWRhLm9yZ4IPd3d3LnR3cmVxdWlwLmNhghV3d3cudW5pdHljaHJpc3RpYW4uY2GC
GHd3dy51cy5wbGFudG9wcm90ZWN0LmNvbYIWd3d3Lndlc3RzaWRlYmFwdGlzdC51
c4INeW91dGguZW1jYy5jYTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUI
Fy+jqh0HE9MMAAABaTngLC8AAAQDAEYwRAIgEUqtmDB0alvQ/3czN8nw1c1EHtBi
6tr7URUcDGuXurkCIDOq/9viJys50DB3PJa0ajYzH62TiOJlF+HerCYQM3S/AHYA
Y/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFpOeArtgAABAMARzBF
AiBZWYcIYqdVDqmA8n4L5di/XRzIpVTSjxKjYvAA/KLBpgIhAOnByNZISDtrduhG
R6RM5o1rFFMMzUVp+skf8GvUW0MWMA0GCSqGSIb3DQEBCwUAA4IBAQBIXYbxg2gc
mMpFLVSbtcINT8Pr94NRqkz/CMzd8kXcIEVSSGhtya5fIbx/1NAKl4bEArN28upw
JQ47oGyvVONcwilthlchIC34R7lV42hXjTFBdXwgAP7lFUyk6ex4I/If8b2tkHls
Oy1yYp7C/OC87g5YApu8t7AOXBEIdHkb0LHy/KMhTZIHAfJ1mCRdLXGvitUBRfEv
recvF6QE7TIWjYeZAHZ5ncXhQCYAdKEQu+Os3Ys1161hCyjFmA7nJfSKnOZRh19o
2+mwU/ZJ6ZbKzAdfGkG5LPNT51kUB2zdvIT1vIQy1Y685HSlNS1Yov5VX7+W8/NR
+p5WMO88GLBq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsDveRrMoBN4p3RcZN+i
GSz7TaoCdu7KKlUNxh2VqITndgRgPhEOFtrHOJ+XiGS8Wv+9Nt3gINVVj10ppBFM
NbUqhZqCAFBd/DiAGCd29VcChI+KQBju+Wrzq8qZ0VTSShKxtTe83kINDYsxkmFY
PI5Io/tE7t7U/em4l8j7qJzwhboe0QOJGZXe2qHO9u7VJqflgiRaAtAm0UWVhZ3o
S0WGu1HAaC5E8vqD21kWHOHFK26A3Y3gFdIwvzKi3Xh6ssFkZ9Ih10MAwHukGWYq
/gucMg2ClXdtQchm0Chz7rPNWAU34KF0XFZE604OhfY/XQYLNn2KnvqMJHBXeDwK
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400344825077805539021499442150404746301407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 14:29:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 14:29:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thinkradiant.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20040792196837037232524370562852576060543196935011262429168170416965815980501274584198531299757403937330323534729835879748730125755650383566483839122836759260054735741655713680295112975607893179859783004390585948390336807588067902110536679291440642446837408514301060393348335667299559065227124470021109549251602746752445983750868359997661823550202101290164539730801321292290157105491330329667072951224711897043152701254035377386605070492067263672841412524442496376084240305368197279052654815969850263657720636446097435529882306302351644432749152447518144328865240946372198698164495626309764097339688707848604409924131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af2cd09ab52b01dc36c9faa13c915cbb397f878c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awakeningnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butlercitychurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitybible.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitybiblestudy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createchange.emcc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discipleshipessentials.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emcc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestcliff.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewayssm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlandsbaptistchurch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hissecretplace.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hissecretplace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lead.emcc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikelee.photography'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtcbc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbeginningscommunitychurchwindsor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one27.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangevillechiropractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshawa-temple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overflow.emcc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandinthesoo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitmanroadcoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planifionspourproteger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantoprotect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantoprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riveroflifemidland.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanctuary7d0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjacintoaog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjag.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithvillecrc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnsuc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnysidebaptistchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunsetcov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylorsvillemethodist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teameffort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theneighbourhoodchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theweekend.emcc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkradiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twr.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twrcanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twrequip.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitychristian.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.plantoprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westsidebaptist.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpartners.emcc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awakeningnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butlercitychurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitybible.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitybiblestudy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discipleshipessentials.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emcc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forestcliff.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatewayssm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlandsbaptistchurch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hissecretplace.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hissecretplace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikelee.photography'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtcbc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newbeginningscommunitychurchwindsor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.one27.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orangevillechiropractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oshawa-temple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandinthesoo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitmanroadcoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planifionspourproteger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantoprotect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantoprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riveroflifemidland.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanctuary7d0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjacintoaog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjag.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smithvillecrc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spaconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnsuc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnysidebaptistchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunsetcov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taylorsvillemethodist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teameffort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theneighbourhoodchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkradiant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twr.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twrcanada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twrequip.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitychristian.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.plantoprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westsidebaptist.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youth.emcc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016939e02c2f00000403004630440220114aad9830746a5bd0ff773337c9f0d5cd441ed062eadafb51151c0c6b97bab9022033aaffdbe2272b39d030773c96b46a36331fad9388e26517e1deac26103374bf00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016939e02bb6000004030047304502205959870862a7550ea980f27e0be5d8bf5d1cc8a554d28f12a362f000fca2c1a6022100e9c1c8d648483b6b76e84647a44ce68d6b14530ccd4569fac91ff06bd45b4316
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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