idrc.ocadu.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:39:12:f8:9f:14:5e:62:6e:43:5b:c3:1b:07:5d:07:3b was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=idrc.ocadu.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:39:12:f8:9f:14:5e:62:6e:43:5b:c3:1b:07:5d:07:3b
Serial Number (int): 270600346201890435634467319809311917279035
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:9a:a6:15:02:d2:d1:9d:84:7f:2b:15:66:af:a7:82:16:78:81:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:c3:0c:88:1e:e5:dd:6b:ec:60:5e:f2:50:e9:36:ec:f3:bd:af:1f
Fingerprint (sha256): 67:03:d0:b0:76:43:f3:96:34:ed:5c:df:51:75:c2:e1:22:a7:35:b7:97:3c:d3:a9:9b:4b:41:d2:15:c1:14:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate idrc.ocadu.ca

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idrc.ocadu.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adod.idrc.ocad.ca
adod.idrc.ocadu.ca
aegis.idrc.ocad.ca
aegis.idrc.ocadu.ca
aha.idrc.ocad.ca
aha.idrc.ocadu.ca
bell-community.idrc.ocad.ca
bell-community.idrc.ocadu.ca
clinic.idrc.ocad.ca
clinic.idrc.ocadu.ca
cnice.idrc.ocad.ca
cnice.idrc.ocadu.ca
courses.idrc.ocad.ca
courses.idrc.ocadu.ca
culturall.idrc.ocad.ca
culturall.idrc.ocadu.ca
culturall1.idrc.ocad.ca
culturall1.idrc.ocadu.ca
culturall2.idrc.ocad.ca
culturall2.idrc.ocadu.ca
deep-dev.idrc.ocadu.ca
deep.idrc.ocad.ca
deep.idrc.ocadu.ca
idrc.ocad.ca
idrc.ocadu.ca
ilc.idrc.ocad.ca
ilc.idrc.ocadu.ca
jan.idrc.ocad.ca
jan.idrc.ocadu.ca
lists.idrc.ocad.ca
lists.idrc.ocadu.ca
mobile-accessibility.idrc.ocad.ca
mobile-accessibility.idrc.ocadu.ca
nide.idrc.ocad.ca
nide.idrc.ocadu.ca
opencaps.idrc.ocad.ca
opencaps.idrc.ocadu.ca
opendoors.idrc.ocad.ca
opendoors.idrc.ocadu.ca
outside-in.idrc.ocad.ca
outside-in.idrc.ocadu.ca
pipedaproject.idrc.ocad.ca
pipedaproject.idrc.ocadu.ca
static.idrc.ocad.ca
static.idrc.ocadu.ca
stretch.idrc.ocad.ca
stretch.idrc.ocadu.ca
stretch2.idrc.ocad.ca
stretch2.idrc.ocadu.ca
timetrack.idrc.ocad.ca
timetrack.idrc.ocadu.ca
tts.idrc.ocad.ca
tts.idrc.ocadu.ca
websavvy.idrc.ocad.ca
websavvy.idrc.ocadu.ca
wiki.mobile-accessibility.idrc.ocad.ca
wiki.mobile-accessibility.idrc.ocadu.ca
www.idrc.ocad.ca
www.idrc.ocadu.ca

Other certificates including the domain name ocadu.ca

(limited to 100 certificates)
webco-its.ocadu.ca
idrc.ocadu.ca
designjam.ocadu.ca
5745189578604544-fe1.pantheonsite.io
ocad.ca
www2.ocadu.ca
wlan-login.its.ocadu.ca
designjam.ocadu.ca
snow.idrc.ocadu.ca
eportfolio.ocadu.ca
slab.ocadu.ca
www2.ocadu.ca
idrc.ocadu.ca
adfs.ocadu.ca
apply.ocadu.ca
courses.idrc.ocadu.ca
www1.ocadu.ca
snow.idrc.ocadu.ca
www2.ocadu.ca
adod.idrc.ocad.ca
www1.ocadu.ca
eportfolio.ocadu.ca
idrc.ocadu.ca
continuingstudies.ocadu.ca
5745189578604544-fe1.pantheonsite.io
achecker.ca
admissions.ocadu.ca
*.ocadu.ca
apply.ocadu.ca
opendoors.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
www2.ocadu.ca
continuingstudies-staff.ocadu.ca
snow.idrc.ocadu.ca
wireless-login.ocadu.ca
ocad.ca
snow.idrc.ocadu.ca
idrc.ocadu.ca
eportfolio.ocadu.ca
clown.idrc.ocadu.ca
achecker.ca
idrc.ocadu.ca
www2.ocadu.ca
infodrive.ocadu.ca
webco-its.ocadu.ca
webco-its.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
csa-its.ocadu.ca
snow.idrc.ocadu.ca
cnice.idrc.ocad.ca
snow.idrc.ocadu.ca
adfs.ocadu.ca
snow.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
infodrive.ocadu.ca
webco-its.ocadu.ca
achecker.ca
*.ocadu.ca
clown.idrc.ocadu.ca
5768714657988608-fe2.pantheonsite.io
snow.idrc.ocadu.ca
ocad.ca
*.ocadu.ca
*.ocadu.ca
ocad.ca
5745189578604544-fe1.pantheonsite.io
openresearch.ocadu.ca
*.ocadu.ca
snow.idrc.ocadu.ca
webco-its.ocadu.ca
legacy.idrc.ocadu.ca
hybrid.ocadu.ca
5745189578604544-fe1.pantheonsite.io
slab.ocadu.ca
infodrive.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
*.ocadu.ca
slab.ocadu.ca
wlan-login.its.ocadu.ca
adfs.ocadu.ca
adod.idrc.ocad.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
*.ocadu.ca
adfs.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
idrc.ocadu.ca
vpn.ocadu.ca
5745189578604544-fe1.pantheonsite.io
continuingstudies-staff.ocadu.ca
www2.ocadu.ca
5768714657988608-fe2.pantheonsite.io
www2.ocadu.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
clown.idrc.ocadu.ca

Certificate

The complete raw certificate details for idrc.ocadu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxutCvSLGJLdYvr/6KWOq
U+mS1pfSnw9PiyZUocDlOTag2rHksKjmvsgRjMTOiDEmfE69oXq8wX8yK+G5h7Vn
sS4k8JDBvTW3uu5guKO/bHwOFdpTG2VcQADj16N9Wu+fNNP2VjNvfzPoRdpwT1jb
+Rl1pdA+6wkCwca+BP1t0UPLDqzadFxamEgWRtFfMsM+RSet+kBOmH7ZTK8fzVou
kaQ/tcajjp0muJGwECCJabtL1P5yODcANAMX6pW3QTNjq8sSducfKimuQrow3F4n
Il26gw50rNgNmUuZ1h3iViYc7r2JNESB6CZ7g61kNoeaTyWzVFxdMBA4x6B9XaHb
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270600346201890435634467319809311917279035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 23:24:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 23:24:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'idrc.ocadu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25111195757505111172505502523579751103458284989734809598069511090847872808860003075787976395559353793714436516167665256289897255646295849336133781914215223460928492550432836030089331077138953458399845137562003074590958808553163973732180777521798352790679921463190402947544420687474177283733902201062566119354133398684518256531160257288424817536995926576595939514023915494431883460124280713136557685750323205288891758792432552893794010904797137835371071354039051670537070237769717993284923131057659245831503292165955038985921435449530881118297296383614416942622253026010414621174608641644847493969192150323385094757151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe9aa61502d2d19d847f2b1566afa7821678814b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adod.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adod.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegis.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegis.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aha.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aha.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell-community.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell-community.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinic.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinic.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnice.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnice.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall1.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall1.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall2.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturall2.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep-dev.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deep.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilc.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilc.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-accessibility.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-accessibility.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nide.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nide.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencaps.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencaps.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendoors.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendoors.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outside-in.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outside-in.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipedaproject.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipedaproject.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch2.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretch2.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetrack.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetrack.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tts.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tts.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websavvy.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websavvy.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.mobile-accessibility.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.mobile-accessibility.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idrc.ocad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170b787c57000000403004830460221008d53eb0d79b1a3847a69050b6484102f88a8e6f85028a55ea952acc90d73e3fd022100eac103e775d71c74d8a7fe511b28a53df26a5aac747756cffb7996885c8631bf0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170b787c5920000040300473045022100ca1bc3388cbc7461275d2091fb0ca2285ba286df928b603b902b5b64a6a3f750022008598b5c15a7784adb444f2067c601ad969ef4bbc8d2cd7ead041c3b02ee5cf0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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