communityvotes.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:46:36:60:30:1e:85:bc:96:83:8a:ae:76:88:d2:dc:7a:92 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=communityvotes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:36:60:30:1e:85:bc:96:83:8a:ae:76:88:d2:dc:7a:92
Serial Number (int): 285228901227991132528746991417480066136722
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:b3:c6:54:75:ba:dc:40:ae:de:18:0c:74:a8:d9:39:5b:4d:f0:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:3e:89:1a:54:2c:a1:d5:fc:31:18:39:2b:6f:f6:31:95:73:96:37
Fingerprint (sha256): 51:c5:8d:c2:c2:5a:f9:28:94:7f:fa:53:28:83:38:3e:8f:2c:89:25:f8:d0:97:b1:8d:6d:72:05:dc:65:fc:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate communityvotes.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for communityvotes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.communityvotes.com
caledon.communityvotes.com
calgary.metrocommunitychoice.com
cambridgetimes.communityvotes.com
cambridgetimeschoice.ca
cmv.to
cmvt.ca
cmvtdemo.communityvotes.com
communityvotes.com
dufferin.communityvotes.com
edmonton.metrocommunitychoice.com
forteriepost.communityvotes.com
goldenplates.kamloopsthisweek.com
grimsbylincolnnews.communityvotes.com
guelphmercurytribune.communityvotes.com
halifax.metrocommunitychoice.com
haltonhills.communityvotes.com
kawarthalakesthisweek.communityvotes.com
kelowna.communityvotes.com
kingston.communityvotes.com
kitchenerreaderschoice.ca
london.communityvotes.com
metrocommunitychoice.com
moncton.communityvotes.com
niagara.communityvotes.com
niagaraonthelakeadvance.communityvotes.com
niagarathisweekniagarafalls.communityvotes.com
niagarathisweekstcatharinesthorold.communityvotes.com
niagarathisweekwellandpelham.communityvotes.com
ourlondon.communityvotes.com
peterboroughexaminer.communityvotes.com
peterboroughthisweek.communityvotes.com
portcolborneleader.communityvotes.com
readerschoice.burlingtonpost.com
readerschoice.hamiltonnews.com
readerschoice.kamloopsthisweek.com
readerschoice.londoncommunitynews.com
readerschoice.ourlondon.ca
reddeer.communityvotes.com
regina.communityvotes.com
region1.cmvtregiondemo.communityvotes.com
region2.cmvtregiondemo.communityvotes.com
sachem.communityvotes.com
sarnia.communityvotes.com
saskatoon.communityvotes.com
saultstemarie.communityvotes.com
scarboroughmirrorreaderschoice.toronto.com
src.toronto.com
stjohns.communityvotes.com
sudbury.communityvotes.com
thunderbay.communityvotes.com
waterlooreaderschoice.ca
windsor.communityvotes.com
winnipeg.communityvotes.com
www.cmv.to
www.cmvt.ca
www.communityvotes.com
www.goldenplates.kamloopsthisweek.com
www.kelowna.communityvotes.com
www.kingston.communityvotes.com
www.london.communityvotes.com
www.moncton.communityvotes.com
www.niagara.communityvotes.com
www.readerschoice.kamloopsthisweek.com
www.reddeer.communityvotes.com
www.regina.communityvotes.com
www.sarnia.communityvotes.com
www.saskatoon.communityvotes.com
www.saultstemarie.communityvotes.com
www.stjohns.communityvotes.com
www.sudbury.communityvotes.com
www.thunderbay.communityvotes.com
www.windsor.communityvotes.com
www.winnipeg.communityvotes.com

Other certificates including the domain name communityvotes.com

(limited to 100 certificates)
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com

Certificate

The complete raw certificate details for communityvotes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOezCCDWOgAwIBAgISA0Y2YDAehbyWg4qudojS3HqSMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTYyMDIxNTNaFw0y
MDA1MTYyMDIxNTNaMB0xGzAZBgNVBAMTEmNvbW11bml0eXZvdGVzLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANwnEzxo2/vYaQnDl6XTZrN5Qep/
LIFenmSwj9GmaKAVGu88KkIkrGi43J2TLl3Vu1SPygyAwbHucVgN8hJuBr072N+M
YByw9BJ5RGb/OPcyUm5SXOwWRRfTUfU7wyg6jwWSG6ekSVJ6xL1y1KRfF1mWRdKH
JcnMTM1pwG3YfLDlsV1HhDoOnK2gjjxi94CgrzEtP35i2ny3Wa3+U7DaP7J7AXey
gQKx9FRGsKUGwYA7ESghQ2vevAg8xmLVX+oGidPt0BL7z90kUnOfAaa8DrhAypUT
6bxJ+9Kbyp/XiCVz6SqwHqIGBMx5HMuBv1tjvnGWmOC7mWHSEIWS3qzgMOMCAwEA
AaOCC4YwgguCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUSrPGVHW63ECu3hgMdKjZ
OVtN8KowHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCCTsGA1UdEQSCCTIwggkughdhdXRoLmNvbW11bml0eXZvdGVzLmNv
bYIaY2FsZWRvbi5jb21tdW5pdHl2b3Rlcy5jb22CIGNhbGdhcnkubWV0cm9jb21t
dW5pdHljaG9pY2UuY29tgiFjYW1icmlkZ2V0aW1lcy5jb21tdW5pdHl2b3Rlcy5j
b22CF2NhbWJyaWRnZXRpbWVzY2hvaWNlLmNhggZjbXYudG+CB2NtdnQuY2GCG2Nt
dnRkZW1vLmNvbW11bml0eXZvdGVzLmNvbYISY29tbXVuaXR5dm90ZXMuY29tghtk
dWZmZXJpbi5jb21tdW5pdHl2b3Rlcy5jb22CIWVkbW9udG9uLm1ldHJvY29tbXVu
aXR5Y2hvaWNlLmNvbYIfZm9ydGVyaWVwb3N0LmNvbW11bml0eXZvdGVzLmNvbYIh
Z29sZGVucGxhdGVzLmthbWxvb3BzdGhpc3dlZWsuY29tgiVncmltc2J5bGluY29s
bm5ld3MuY29tbXVuaXR5dm90ZXMuY29tgidndWVscGhtZXJjdXJ5dHJpYnVuZS5j
b21tdW5pdHl2b3Rlcy5jb22CIGhhbGlmYXgubWV0cm9jb21tdW5pdHljaG9pY2Uu
Y29tgh5oYWx0b25oaWxscy5jb21tdW5pdHl2b3Rlcy5jb22CKGthd2FydGhhbGFr
ZXN0aGlzd2Vlay5jb21tdW5pdHl2b3Rlcy5jb22CGmtlbG93bmEuY29tbXVuaXR5
dm90ZXMuY29tghtraW5nc3Rvbi5jb21tdW5pdHl2b3Rlcy5jb22CGWtpdGNoZW5l
cnJlYWRlcnNjaG9pY2UuY2GCGWxvbmRvbi5jb21tdW5pdHl2b3Rlcy5jb22CGG1l
dHJvY29tbXVuaXR5Y2hvaWNlLmNvbYIabW9uY3Rvbi5jb21tdW5pdHl2b3Rlcy5j
b22CGm5pYWdhcmEuY29tbXVuaXR5dm90ZXMuY29tgipuaWFnYXJhb250aGVsYWtl
YWR2YW5jZS5jb21tdW5pdHl2b3Rlcy5jb22CLm5pYWdhcmF0aGlzd2Vla25pYWdh
cmFmYWxscy5jb21tdW5pdHl2b3Rlcy5jb22CNW5pYWdhcmF0aGlzd2Vla3N0Y2F0
aGFyaW5lc3Rob3JvbGQuY29tbXVuaXR5dm90ZXMuY29tgi9uaWFnYXJhdGhpc3dl
ZWt3ZWxsYW5kcGVsaGFtLmNvbW11bml0eXZvdGVzLmNvbYIcb3VybG9uZG9uLmNv
bW11bml0eXZvdGVzLmNvbYIncGV0ZXJib3JvdWdoZXhhbWluZXIuY29tbXVuaXR5
dm90ZXMuY29tgidwZXRlcmJvcm91Z2h0aGlzd2Vlay5jb21tdW5pdHl2b3Rlcy5j
b22CJXBvcnRjb2xib3JuZWxlYWRlci5jb21tdW5pdHl2b3Rlcy5jb22CIHJlYWRl
cnNjaG9pY2UuYnVybGluZ3RvbnBvc3QuY29tgh5yZWFkZXJzY2hvaWNlLmhhbWls
dG9ubmV3cy5jb22CInJlYWRlcnNjaG9pY2Uua2FtbG9vcHN0aGlzd2Vlay5jb22C
JXJlYWRlcnNjaG9pY2UubG9uZG9uY29tbXVuaXR5bmV3cy5jb22CGnJlYWRlcnNj
aG9pY2Uub3VybG9uZG9uLmNhghpyZWRkZWVyLmNvbW11bml0eXZvdGVzLmNvbYIZ
cmVnaW5hLmNvbW11bml0eXZvdGVzLmNvbYIpcmVnaW9uMS5jbXZ0cmVnaW9uZGVt
by5jb21tdW5pdHl2b3Rlcy5jb22CKXJlZ2lvbjIuY212dHJlZ2lvbmRlbW8uY29t
bXVuaXR5dm90ZXMuY29tghlzYWNoZW0uY29tbXVuaXR5dm90ZXMuY29tghlzYXJu
aWEuY29tbXVuaXR5dm90ZXMuY29tghxzYXNrYXRvb24uY29tbXVuaXR5dm90ZXMu
Y29tgiBzYXVsdHN0ZW1hcmllLmNvbW11bml0eXZvdGVzLmNvbYIqc2NhcmJvcm91
Z2htaXJyb3JyZWFkZXJzY2hvaWNlLnRvcm9udG8uY29tgg9zcmMudG9yb250by5j
b22CGnN0am9obnMuY29tbXVuaXR5dm90ZXMuY29tghpzdWRidXJ5LmNvbW11bml0
eXZvdGVzLmNvbYIddGh1bmRlcmJheS5jb21tdW5pdHl2b3Rlcy5jb22CGHdhdGVy
bG9vcmVhZGVyc2Nob2ljZS5jYYIad2luZHNvci5jb21tdW5pdHl2b3Rlcy5jb22C
G3dpbm5pcGVnLmNvbW11bml0eXZvdGVzLmNvbYIKd3d3LmNtdi50b4ILd3d3LmNt
dnQuY2GCFnd3dy5jb21tdW5pdHl2b3Rlcy5jb22CJXd3dy5nb2xkZW5wbGF0ZXMu
a2FtbG9vcHN0aGlzd2Vlay5jb22CHnd3dy5rZWxvd25hLmNvbW11bml0eXZvdGVz
LmNvbYIfd3d3LmtpbmdzdG9uLmNvbW11bml0eXZvdGVzLmNvbYIdd3d3LmxvbmRv
bi5jb21tdW5pdHl2b3Rlcy5jb22CHnd3dy5tb25jdG9uLmNvbW11bml0eXZvdGVz
LmNvbYIed3d3Lm5pYWdhcmEuY29tbXVuaXR5dm90ZXMuY29tgiZ3d3cucmVhZGVy
c2Nob2ljZS5rYW1sb29wc3RoaXN3ZWVrLmNvbYIed3d3LnJlZGRlZXIuY29tbXVu
aXR5dm90ZXMuY29tgh13d3cucmVnaW5hLmNvbW11bml0eXZvdGVzLmNvbYIdd3d3
LnNhcm5pYS5jb21tdW5pdHl2b3Rlcy5jb22CIHd3dy5zYXNrYXRvb24uY29tbXVu
aXR5dm90ZXMuY29tgiR3d3cuc2F1bHRzdGVtYXJpZS5jb21tdW5pdHl2b3Rlcy5j
b22CHnd3dy5zdGpvaG5zLmNvbW11bml0eXZvdGVzLmNvbYIed3d3LnN1ZGJ1cnku
Y29tbXVuaXR5dm90ZXMuY29tgiF3d3cudGh1bmRlcmJheS5jb21tdW5pdHl2b3Rl
cy5jb22CHnd3dy53aW5kc29yLmNvbW11bml0eXZvdGVzLmNvbYIfd3d3Lndpbm5p
cGVnLmNvbW11bml0eXZvdGVzLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ALIeBcyLos2KIE6HZvkruYol
IGdr2vpw57JJUy3vi5BeAAABcE/hCqMAAAQDAEYwRAIgLWz8gbNaJb7HG+bufSt8
OFvS/1FKseb+aLWjqUkXujUCICYI1gs+ESMx1rDkrfGvCkQ+xNWL+51NUNy/jG0D
Tnc+AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFwT+EK2AAA
BAMARzBFAiBX/KfzCaEpO43HiWKIt9h6Yy48I0YyalQCzkcgTWkL/AIhAMGqB6VV
VKT9sv+WTePvRDt71FJ1ckhl6e75RVeV7bFDMA0GCSqGSIb3DQEBCwUAA4IBAQBP
OWD3K4Zho6+Zzx9vmYfjCq2fwQtt1k1R0U57WMhr2LBt4l/Dx2MO5IOkycNmg5ye
UsyPPrfD5dJBsuTFWl5EHSDiiPAI0vueiyxyBJgWhhZirgHqG5aAXX56hg+e7Za0
lKZ7fJla5xb9BJJQXpp+pN3/rP6ffdnxh7AFiSAnJX9HAVYjrstDdUXDfcZv85oj
HnsuG3BmIqB+wABad5a3w3vikDVibAZHQfBaIRKzYVVIXBWccAcwRuqDvUo4Vysq
ToDOu/Ow761PsgHOrf5QTlmt0toc9w40A+UpCaxnwcGjihKxPXHNfaWgIPYONCVk
KH3rylrQQa7Y22whOgpK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CcTPGjb+9hpCcOXpdNm
s3lB6n8sgV6eZLCP0aZooBUa7zwqQiSsaLjcnZMuXdW7VI/KDIDBse5xWA3yEm4G
vTvY34xgHLD0EnlEZv849zJSblJc7BZFF9NR9TvDKDqPBZIbp6RJUnrEvXLUpF8X
WZZF0oclycxMzWnAbdh8sOWxXUeEOg6craCOPGL3gKCvMS0/fmLafLdZrf5TsNo/
snsBd7KBArH0VEawpQbBgDsRKCFDa968CDzGYtVf6gaJ0+3QEvvP3SRSc58BprwO
uEDKlRPpvEn70pvKn9eIJXPpKrAeogYEzHkcy4G/W2O+cZaY4LuZYdIQhZLerOAw
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285228901227991132528746991417480066136722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 20:21:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 20:21:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'communityvotes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27791695762480144148391841534487564190711121099793028576503284167400466744510580170804551963222307919367299077323425851409292584653527729843890234460061776221199523944418211253041826644025403174789315932327406645257206514278677009837276061643820477840416535769831942575516114922128533906779898303734690724299385111689040871020177597590314264467018253324773011159151248734958124273529559334902820110951741111878556260180439557981402185312606409755163685076826444299732991468027149539872071646751626047526896552520557408174557739007277288969275708983209640048578302128716981450650269487206733018501623630777719908741347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ab3c65475badc40aede180c74a8d9395b4df0aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caledon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calgary.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgetimes.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgetimeschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmv.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvtdemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dufferin.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmonton.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forteriepost.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenplates.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grimsbylincolnnews.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guelphmercurytribune.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifax.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haltonhills.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawarthalakesthisweek.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelowna.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingston.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenerreaderschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'london.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncton.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagara.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagaraonthelakeadvance.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekniagarafalls.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekstcatharinesthorold.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekwellandpelham.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourlondon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughexaminer.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughthisweek.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portcolborneleader.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.burlingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.hamiltonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.londoncommunitynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.ourlondon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddeer.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regina.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region1.cmvtregiondemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region2.cmvtregiondemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachem.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarnia.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saskatoon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saultstemarie.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarboroughmirrorreaderschoice.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohns.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudbury.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thunderbay.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterlooreaderschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windsor.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winnipeg.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmv.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldenplates.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelowna.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingston.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.london.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moncton.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niagara.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readerschoice.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddeer.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regina.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarnia.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saskatoon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saultstemarie.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohns.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sudbury.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thunderbay.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windsor.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winnipeg.communityvotes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704fe10aa3000004030046304402202d6cfc81b35a25bec71be6ee7d2b7c385bd2ff514ab1e6fe68b5a3a94917ba3502202608d60b3e112331d6b0e4adf1af0a443ec4d58bfb9d4d50dcbf8c6d034e773e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001704fe10ad80000040300473045022057fca7f309a1293b8dc7896288b7d87a632e3c2346326a5402ce47204d690bfc022100c1aa07a55554a4fdb2ff964de3ef443b7bd45275724865e9eef9455795edb143
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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