marysvillebaptist.ca
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a7:87:78:6e:bd:07:2c:cf:8d:c9:f9:b2:94:ae:db:bf:5a was issued on by Let's Encrypt.
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=marysvillebaptist.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a7:87:78:6e:bd:07:2c:cf:8d:c9:f9:b2:94:ae:db:bf:5aSerial Number (int): 318344084172172850845242621188374928277338
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e6:5e:f2:22:bb:d4:c5:fc:0a:93:ea:8e:d4:d0:7c:e9:9b:e8:3a:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a0:7b:0e:54:31:00:24:d4:77:c1:e9:23:52:09:a1:59:d7:85:82:f0
Fingerprint (sha256): 6c:8c:00:a4:f8:92:70:ba:0a:d3:d9:c9:3c:b5:cc:9b:58:49:b5:b6:ce:f3:2e:63:69:73:d4:4d:2f:dd:61:ba
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate marysvillebaptist.ca
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for marysvillebaptist.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.downrightdomestic.com
autodiscover.groomingtails.ca
autodiscover.marysvillebaptist.ca
downrightdomestic.com
downrightdomestic.mkmlive.ca
groomingtails.ca
groomingtails.mkmlive.ca
mail.downrightdomestic.com
mail.groomingtails.ca
mail.marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.mkmlive.ca
webdisk.downrightdomestic.com
webdisk.groomingtails.ca
webdisk.marysvillebaptist.ca
www.downrightdomestic.com
www.downrightdomestic.mkmlive.ca
www.groomingtails.ca
www.groomingtails.mkmlive.ca
www.marysvillebaptist.ca
www.marysvillebaptist.mkmlive.ca
autodiscover.groomingtails.ca
autodiscover.marysvillebaptist.ca
downrightdomestic.com
downrightdomestic.mkmlive.ca
groomingtails.ca
groomingtails.mkmlive.ca
mail.downrightdomestic.com
mail.groomingtails.ca
mail.marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.mkmlive.ca
webdisk.downrightdomestic.com
webdisk.groomingtails.ca
webdisk.marysvillebaptist.ca
www.downrightdomestic.com
www.downrightdomestic.mkmlive.ca
www.groomingtails.ca
www.groomingtails.mkmlive.ca
www.marysvillebaptist.ca
www.marysvillebaptist.mkmlive.ca
Other certificates including the domain name marysvillebaptist.ca
(limited to 100 certificates)
marysvillebaptist.ca
downrightdomestic.com
marysvillebaptist.ca
downrightdomestic.com
groomingtails.ca
downrightdomestic.com
marysvillebaptist.ca
mkmlive.ca
www.blackhorseranch.mkmlive.ca
capitalcityballhockey.ca
marysvillebaptist.ca
www.capitalcityballhockey.ca
capitalcityballhockey.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
downrightdomestic.com
marysvillebaptist.ca
downrightdomestic.com
groomingtails.ca
downrightdomestic.com
marysvillebaptist.ca
mkmlive.ca
www.blackhorseranch.mkmlive.ca
capitalcityballhockey.ca
marysvillebaptist.ca
www.capitalcityballhockey.ca
capitalcityballhockey.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
marysvillebaptist.ca
Certificate
The complete raw certificate details for marysvillebaptist.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgISA6eHeG69ByzPjcn5spSu279aMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMjQwNTMxNDNaFw0x ODAxMjIwNTMxNDNaMB8xHTAbBgNVBAMTFG1hcnlzdmlsbGViYXB0aXN0LmNhMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCDMMBc3JeXMN0dmGLq4+6p6 KWC+X81go465PrqHYThGSEVvWF6TOAY/HU5cVnQSOt37vRQB3PKLS2oJdmGWOlVw MUdijroz6iDLGirl5m8srV9ZxXc0kKGcLMkKEy5hlJLoB09K2s6DrXXzgnChOSw0 bl6vsRQJsgAlSm8XcExocLKzBcSRD8ANk7xHlA1rTDihKyK7YHJvOI8+qTw7Ru2L B9bPPFCZ+LlOhmajNYt6lo38ktxpde1a0xYGtuv1Qc6eih1lbGCDdvw2XewTlWUE ITG4ZxNd9FdEMoinO+RXD1aaVjPC+3bmkzTrYs540nu+JU1e8EPl3m4/Ib2sCQID AQABo4IEUTCCBE0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTmXvIiu9TF/AqT6o7U 0Hzpm+g62DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j cnlwdC5vcmcvMIICWgYDVR0RBIICUTCCAk2CImF1dG9kaXNjb3Zlci5kb3ducmln aHRkb21lc3RpYy5jb22CHWF1dG9kaXNjb3Zlci5ncm9vbWluZ3RhaWxzLmNhgiFh dXRvZGlzY292ZXIubWFyeXN2aWxsZWJhcHRpc3QuY2GCFWRvd25yaWdodGRvbWVz dGljLmNvbYIcZG93bnJpZ2h0ZG9tZXN0aWMubWttbGl2ZS5jYYIQZ3Jvb21pbmd0 YWlscy5jYYIYZ3Jvb21pbmd0YWlscy5ta21saXZlLmNhghptYWlsLmRvd25yaWdo dGRvbWVzdGljLmNvbYIVbWFpbC5ncm9vbWluZ3RhaWxzLmNhghltYWlsLm1hcnlz dmlsbGViYXB0aXN0LmNhghRtYXJ5c3ZpbGxlYmFwdGlzdC5jYYIcbWFyeXN2aWxs ZWJhcHRpc3QubWttbGl2ZS5jYYIdd2ViZGlzay5kb3ducmlnaHRkb21lc3RpYy5j b22CGHdlYmRpc2suZ3Jvb21pbmd0YWlscy5jYYIcd2ViZGlzay5tYXJ5c3ZpbGxl YmFwdGlzdC5jYYIZd3d3LmRvd25yaWdodGRvbWVzdGljLmNvbYIgd3d3LmRvd25y aWdodGRvbWVzdGljLm1rbWxpdmUuY2GCFHd3dy5ncm9vbWluZ3RhaWxzLmNhghx3 d3cuZ3Jvb21pbmd0YWlscy5ta21saXZlLmNhghh3d3cubWFyeXN2aWxsZWJhcHRp c3QuY2GCIHd3dy5tYXJ5c3ZpbGxlYmFwdGlzdC5ta21saXZlLmNhMIH+BgNVHSAE gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAIAS4bwA14Rd8LlaosRPjpfy3AlP AhADs60cGeZzS/nQ+LR/Tv8XcVQtxtmzTQFBv5a0ZTMcFzQjvfoRcoPzER8hXpiK lktYo8soBOcLSHesGCkp2Hps/UPOdhZwXC0jH4NK73ZvBoVNodtqAbW2NY2kcsOt c1WlziFqfbWZlH+hWVW4nljxAIh7ALcMWMSj4c5w2ZTzZ+Nth2tIvVG5tIJdsqVi 0tR1mFDFGXrGBwA1IngW5sKaFNzY7l+BFrvon6YtPkRrelkqfSekCawg8XCuRuIm X25jGFihzcvPm1sYK4kay9p+Vh+DxKXB58IGP2AmUf46AqTYx2vuM+fY6PI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCDMMBc3JeXMN0dmGLq4 +6p6KWC+X81go465PrqHYThGSEVvWF6TOAY/HU5cVnQSOt37vRQB3PKLS2oJdmGW OlVwMUdijroz6iDLGirl5m8srV9ZxXc0kKGcLMkKEy5hlJLoB09K2s6DrXXzgnCh OSw0bl6vsRQJsgAlSm8XcExocLKzBcSRD8ANk7xHlA1rTDihKyK7YHJvOI8+qTw7 Ru2LB9bPPFCZ+LlOhmajNYt6lo38ktxpde1a0xYGtuv1Qc6eih1lbGCDdvw2XewT lWUEITG4ZxNd9FdEMoinO+RXD1aaVjPC+3bmkzTrYs540nu+JU1e8EPl3m4/Ib2s CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318344084172172850845242621188374928277338 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-24 05:31:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-22 05:31:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marysvillebaptist.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20719255118115495292522331220242612871772235711897107482691750844863706618385291112179761937219206133703972892282449460414249753559157623188800415880105323713543198686274717912932145931417879006164018345564420869334425657596861952812384370823256572310076481595780645877097499324841138488020683755446255207767953489250702767351308818104007238714600223912947738731316463970430684583521030421206194413213559426900177287892804398834397598585248653053432893858734819785036100382421923418176184085927155861263219236757753314044907245932448044789130406299585198905562188730940450005839754363480971692837248455446178633198601 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e65ef222bbd4c5fc0a93ea8ed4d07ce99be83ad8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (593 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.downrightdomestic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.groomingtails.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.marysvillebaptist.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downrightdomestic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downrightdomestic.mkmlive.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groomingtails.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groomingtails.mkmlive.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.downrightdomestic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.groomingtails.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.marysvillebaptist.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marysvillebaptist.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marysvillebaptist.mkmlive.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.downrightdomestic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.groomingtails.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.marysvillebaptist.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downrightdomestic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downrightdomestic.mkmlive.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groomingtails.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groomingtails.mkmlive.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marysvillebaptist.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marysvillebaptist.mkmlive.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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