communityvotes.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:45:23:1e:4c:8a:95:c8:36:e7:19:6f:4b:23:ea:7a:b6 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=communityvotes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:45:23:1e:4c:8a:95:c8:36:e7:19:6f:4b:23:ea:7a:b6
Serial Number (int): 342075677832178882162311585515590902250166
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:22:94:2d:94:89:f1:86:8f:39:53:75:71:ab:86:7d:38:21:ef:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:db:8d:af:28:79:cc:5f:f1:83:66:7c:f3:23:34:6b:a3:1b:35:15
Fingerprint (sha256): 4a:f5:c8:8a:97:48:32:62:61:4f:cc:e3:5b:9f:d0:f3:e4:a7:6a:60:3e:86:fe:28:70:47:ef:b2:41:ec:97:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate communityvotes.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for communityvotes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.communityvotes.com
caledon.communityvotes.com
calgary.metrocommunitychoice.com
cambridgetimes.communityvotes.com
cambridgetimeschoice.ca
cmv.to
cmvt.ca
cmvtdemo.communityvotes.com
communityvotes.com
dufferin.communityvotes.com
edmonton.metrocommunitychoice.com
forteriepost.communityvotes.com
goldenplates.kamloopsthisweek.com
grimsbylincolnnews.communityvotes.com
guelphmercurytribune.communityvotes.com
halifax.metrocommunitychoice.com
haltonhills.communityvotes.com
kawarthalakesthisweek.communityvotes.com
kelowna.communityvotes.com
kingston.communityvotes.com
kitchenerreaderschoice.ca
london.communityvotes.com
metrocommunitychoice.com
moncton.communityvotes.com
niagara.communityvotes.com
niagaraonthelakeadvance.communityvotes.com
niagarathisweekniagarafalls.communityvotes.com
niagarathisweekstcatharinesthorold.communityvotes.com
niagarathisweekwellandpelham.communityvotes.com
ourlondon.communityvotes.com
peterboroughexaminer.communityvotes.com
peterboroughthisweek.communityvotes.com
portcolborneleader.communityvotes.com
readerschoice.burlingtonpost.com
readerschoice.hamiltonnews.com
readerschoice.kamloopsthisweek.com
readerschoice.londoncommunitynews.com
readerschoice.ourlondon.ca
reddeer.communityvotes.com
regina.communityvotes.com
region1.cmvtregiondemo.communityvotes.com
region2.cmvtregiondemo.communityvotes.com
sachem.communityvotes.com
sarnia.communityvotes.com
saskatoon.communityvotes.com
saultstemarie.communityvotes.com
scarboroughmirrorreaderschoice.toronto.com
src.toronto.com
stjohns.communityvotes.com
sudbury.communityvotes.com
thunderbay.communityvotes.com
waterlooreaderschoice.ca
windsor.communityvotes.com
winnipeg.communityvotes.com
www.cmv.to
www.cmvt.ca
www.communityvotes.com
www.goldenplates.kamloopsthisweek.com
www.kelowna.communityvotes.com
www.kingston.communityvotes.com
www.london.communityvotes.com
www.moncton.communityvotes.com
www.niagara.communityvotes.com
www.readerschoice.kamloopsthisweek.com
www.reddeer.communityvotes.com
www.regina.communityvotes.com
www.sarnia.communityvotes.com
www.saskatoon.communityvotes.com
www.saultstemarie.communityvotes.com
www.stjohns.communityvotes.com
www.sudbury.communityvotes.com
www.thunderbay.communityvotes.com
www.windsor.communityvotes.com
www.winnipeg.communityvotes.com

Other certificates including the domain name communityvotes.com

(limited to 100 certificates)
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com

Certificate

The complete raw certificate details for communityvotes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdTkcrYjJRjB8AJJyHtQ
5pE3cnd6hBTv4tlY7iRSJbU3yV58CVs+5Kutzv7j7r+bwseNQ/4C31Our8ipuHKo
VXYNMjqa9YD5fCOnHueDQVj/iSLCf9Ii5++6+dTDyUY1KOxdL7RWqhHKNNVm+cGx
5qAGY84Y6IEM1ec5klMitTroBHjDYaZTbNpBZrc/62JxyXDIqnvN7SP51dw3ayvV
9JkVgSSn0pA7C3zbNsiDueTRCEN8mRPzCS48aZkIHoe+iTjCrS35v3Ev/n6lxgLr
pdElrlM5yqvjeXqBX0TOl3WkPB+4k+/ik3Kx3X6jKms1S67+Pq9AH793zEtn899n
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342075677832178882162311585515590902250166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 22:59:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 22:59:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'communityvotes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20934301462389573896506578369564881496547369509656335704270413212052772518875121333581579199281438174877855187119606535817367713258525754665684298911608831726551404339277809251800363748657296680339210980142955253887484416084924048695352206501462778302228126929944448017553236531573842397418358219476900979329883179955791625817829158777307235286447786927870661177436962791115059757568564894137440212384208816044191700485080228243046184666236487047020148569863826117660081214217663464074612825833939790047599214162385104369384553641865120921884510205311672686206897024952130134514471671559052058873307884415081475172271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d822942d9489f1868f39537571ab867d3821efa2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caledon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calgary.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgetimes.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgetimeschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmv.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvtdemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dufferin.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmonton.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forteriepost.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenplates.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grimsbylincolnnews.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guelphmercurytribune.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifax.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haltonhills.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawarthalakesthisweek.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelowna.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingston.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenerreaderschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'london.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncton.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagara.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagaraonthelakeadvance.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekniagarafalls.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekstcatharinesthorold.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekwellandpelham.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourlondon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughexaminer.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughthisweek.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portcolborneleader.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.burlingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.hamiltonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.londoncommunitynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.ourlondon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddeer.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regina.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region1.cmvtregiondemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region2.cmvtregiondemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachem.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarnia.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saskatoon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saultstemarie.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarboroughmirrorreaderschoice.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohns.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudbury.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thunderbay.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterlooreaderschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windsor.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winnipeg.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmv.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenplates.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelowna.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingston.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.london.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moncton.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niagara.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readerschoice.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddeer.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regina.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarnia.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saskatoon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saultstemarie.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohns.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sudbury.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thunderbay.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windsor.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winnipeg.communityvotes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a2d6f302000004030047304502210084b72c984b80901f350c65fb8128efd6fcc08af420a85618c39c2f2886ee6cd902200601415496455c9f000ef9258925125cc7df117c557c2a4cd7f3f7312dbcfda40075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a2d6f363000004030046304402201c20e18fbeb0618094c76a7bb41f9516132dce4473c83943329ad47d54a86a8602202c276d17b91844310911bdacb1170abaf686614431c91dfa190afea05a14f86f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0069681a5c12491c1e7d1f648ea707cb87ce130cb581262797eacf95839720fdcb071f609ab14236f3f44ca2cb9a6fb1e3e5e42ff228d2466c370d1da8d679e44e8de5b0b076ac7a4cd6a9e070cffd818ee80fe0cf45b14390481b89903a165ab6c56d8a9107d0760dffdb1890a0aa25950ee155bdb1381e815627f362ffd8ceef24c7b3e4f646eadbc2567a030f8170218574755eaa1fa2a46f86f89005bb8a82afd0bc50bc8e414bdee5e00f9c5da3aad59c37d642a0a98ba086af9536987bee8a9880a44330898df20b6b3ec69de54f2d84c0402a682936ec34503bc0b5ae1b6855d748c0916afeb76448b2bbb2c3befd63b0587300421a0ccf2cbbd1a3811a