www.mcdonalds.fi

Issued by R3

About this certificate

This digital certificate with serial number 04:fd:9d:77:5a:25:88:e0:d5:b1:c7:19:fd:ce:b6:7c:f8:f9 was issued on by Let's Encrypt.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mcdonalds.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:9d:77:5a:25:88:e0:d5:b1:c7:19:fd:ce:b6:7c:f8:f9
Serial Number (int): 434749891065093483390803963109823896942841
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 53:2f:be:55:e1:b6:ef:83:78:3e:9d:80:8d:08:37:70:d4:ad:03:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:d2:25:6c:b5:55:8f:c8:10:70:41:44:0b:fb:16:a2:ee:91:39:b6
Fingerprint (sha256): 62:21:ea:91:bb:8c:17:a1:c7:a2:07:e3:b3:ef:a3:0d:6d:07:e8:c2:bf:29:7c:a6:44:22:ce:a8:7a:7c:01:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mcdonalds.fi

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mcdonalds.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap-passiveloc-stg2.api.mcd.com
ap-stg2.api.mcd.com
appdeeplinks.mcdonalds.ca
apps-ca-uat.mcd.com
atomchockey.ca
cms-staging.rmhccanada.ca
cms.rmhccanada.ca
cms32.mcdonalds.ca
equipemcdo.ca
eu-mte.api.mcd.com
eu-passiveloc-prod.api.mcd.com
eu-prod.api.mcd.com
gmal.mcdonalds.it
iw-ca.mcd.com
iwdev-ca.mcd.com
iwuat-ca.mcd.com
link.dev-brz-eu.mcdonalds.com
link.dev-brz.mcdonalds.com
link.my.mcdonalds.com.au
link.news.mcdonalds.de
link.service.mcdonalds.de
m.mcdonalds.ie
m.mcdonalds.it
mccafe.ca
mcdelivery-awspoc.mcd.com
mcdeliverycanada.ca
mclivraison.ca
rmhc.ca
rmhccanada.ca
stage-appdeeplinks.mcdonalds.ca
stg.rmhccanada.ca
stg32.mcdonalds.ca
www.atomchockey.ca
www.equipemcdo.ca
www.mccafe.ca
www.mcdeliverycanada.ca
www.mcdonalds.com.tw
www.mcdonalds.fi
www.mcdonalds.ie
www.mcdonalds.it
www.mclivraison.ca
www.rmhc.ca
www.rmhccanada.ca
www4.mcdonalds.ca

Other certificates including the domain name mcdonalds.fi

(limited to 100 certificates)
www.mcdonalds.fi
san-9-s50.tlsprovisioning.exacttarget.com
image.email.opcomobilites.fr
www.mcdonalds.fi
www.mcdonalds.fi
burgey.mcd.com
cloud.markkinointi.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
akamai-san219.exacttarget.com
www.mcdonalds.fi
image.email.opcomobilites.fr
businessschool.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
burgey.mcd.com
www.mcdonalds.fi
image.email.opcomobilites.fr
cloud.markkinointi.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
kontakt.mcdonalds.dk
www.mcdonalds.fi
image.email.opcomobilites.fr
image.email.opcomobilites.fr
www.mcdonalds.fi
burgey.mcd.com
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
burgey.mcd.com
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
view.marketing.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
san-9-s50.tlsprovisioning.exacttarget.com
www.mcdonalds.fi
kampanja.mcdonalds.fi
cloud.marketing.mcdonalds.fi
burgey.mcd.com
akamai-san219.exacttarget.com
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
kampanja.mcdonalds.fi
burgey.mcd.com
www.mcdonalds.fi
image.email.opcomobilites.fr
image.email.opcomobilites.fr
www.mcdonalds.fi
businessschool.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
burgey.mcd.com
image.email.opcomobilites.fr
image.email.opcomobilites.fr
www.mcdonalds.fi
image.email.opcomobilites.fr
san-9-s50.tlsprovisioning.exacttarget.com
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
san-9-s50.tlsprovisioning.exacttarget.com
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
businessschool.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
kampanja.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
akamai-san219.exacttarget.com

Certificate

The complete raw certificate details for www.mcdonalds.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP7MCnbluM58yUpHGE+h
Xrkjx7R8tiPmNZLJGCy3amoi2fu4hY+R9PQBO7JFGwFF//WIicDU18L4+weAFTGL
kyBs/uuPb6TpB7V+MXr2834EPGMu9b4VK5Oj0rqt3iWJHXSVO6rWo178oG6RZQq4
hi2aK77NhzKjuUQiGw4qNQ3ULqXmD4J+UUrZLzpnQCCrZznAgsR8z7PU3cZHIxZS
ARexy7xEdaE0uq29wawFcYVznUQdiOt0nzYvBVhWLAM/ex+4MwpbX0xgIXLzmH4W
UOkFV87dRZItEvKMyiQ+UQXkXBkj7yoKPOrBdfuuWDydUzZD747Mfz+4q/MyxhTK
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434749891065093483390803963109823896942841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 17:14:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 17:14:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mcdonalds.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23353493214409924578498170259045842183040353094910980947234955184619363008088232133713277045538870344835416973220367760790287610140871810844587237243160940723352527999049275440898351329474350213621437115304719814072399017011520369560082188461697481252290981613260295399689559915630703377727958563575369371969721002484714177138566650807245133286410231705088099805239537032381294203005917863362048263914542159140842482958994367994877100262404011745080631812715570396563558664889224898866061125204173258136658499599737047912254195927984581542294098356949650435687076166853483935100129810535659907937048644487902469081763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							532fbe55e1b6ef83783e9d808d083770d4ad032e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-passiveloc-stg2.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-stg2.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdeeplinks.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-ca-uat.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomchockey.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-staging.rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms32.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equipemcdo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-mte.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-passiveloc-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmal.mcdonalds.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iw-ca.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwdev-ca.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwuat-ca.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.dev-brz-eu.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.dev-brz.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.my.mcdonalds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.news.mcdonalds.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.service.mcdonalds.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonalds.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonalds.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccafe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdelivery-awspoc.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdeliverycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclivraison.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-appdeeplinks.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg32.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atomchockey.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equipemcdo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccafe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdeliverycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mclivraison.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.mcdonalds.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b39b2085600000403004730450221008b4f33ba1c687d125e969d5b2524cf0a3be6fad0d5b4e7d0f9619bb148053b5202203267caf129e2d6d3e6217dcbadfc4f1f59f3a48d8fcd552896084d72ff0c9ae7007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b39b20850000004030046304402206074c7c050e916c3f79448ad25409eda5ae39be28639855f434fdd36a0f92cdd02202e0470239d62da170f1d6157a4737ffe42642ff5cba792715b0298d7170e5a07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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