communityvotes.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:47:7d:48:49:ed:51:f4:94:94:3a:50:f5:15:35:64:3e was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=communityvotes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:47:7d:48:49:ed:51:f4:94:94:3a:50:f5:15:35:64:3e
Serial Number (int): 289675319940717272639540363154119791567934
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:86:36:a6:6f:c9:65:09:05:51:2d:f4:db:f0:b2:db:c8:ee:0c:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:b5:04:a5:95:f8:80:57:06:07:62:7b:da:91:06:70:a7:ae:a1:ba
Fingerprint (sha256): 73:de:02:2c:23:29:23:ca:7f:41:70:45:40:6f:86:08:6c:fa:ed:94:21:f3:e1:3f:32:d4:53:4c:e5:99:55:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate communityvotes.com

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for communityvotes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajaxpickeringnewsadvertiserreaderschoice.durhamregion.com
auth.communityvotes.com
barrieadvancereaderschoice.simcoe.com
brightonindependentreaderschoice.durhamregion.com
caledon.communityvotes.com
calgary.metrocommunitychoice.com
cambridgetimeschoice.ca
claringtonthisweekreaderschoice.durhamregion.com
cmv.to
cmvt.ca
cmvtdemo.communityvotes.com
communityvotes.com
dufferin.communityvotes.com
edmonton.metrocommunitychoice.com
forteriepost.communityvotes.com
grimsbylincolnnews.communityvotes.com
guelphmercurytribune.communityvotes.com
halifax.metrocommunitychoice.com
haltonhills.communityvotes.com
kawarthalakesthisweek.communityvotes.com
kitchenerreaderschoice.ca
metrocommunitychoice.com
niagara.communityvotes.com
niagaraonthelakeadvance.communityvotes.com
niagarathisweekniagarafalls.communityvotes.com
niagarathisweekstcatharinesthorold.communityvotes.com
niagarathisweekwellandpelham.communityvotes.com
northumberlandnewsreaderschoice.durhamregion.com
oshawawhitbythisweekreaderschoice.durhamregion.com
peterboroughexaminer.communityvotes.com
peterboroughthisweek.communityvotes.com
portcolborneleader.communityvotes.com
portperrystarreaderschoice.durhamregion.com
readerawards.therecord.com
readerschoice.bramptonguardian.com
readerschoice.burlingtonpost.com
readerschoice.flamboroughreview.com
readerschoice.hamiltonnews.com
readerschoice.kamloopsthisweek.com
readerschoice.miltoncanadianchampion.com
readerschoice.mississauganews.com
readerschoice.niagarafallsreview.ca
readerschoice.oakvillebeaver.com
readerschoice.stcatharinesstandard.ca
readerschoice.thespec.com
readerschoice.torstar.com
readerschoice.wellandtribune.ca
region1.cmvtregiondemo.communityvotes.com
region2.cmvtregiondemo.communityvotes.com
sachem.communityvotes.com
sarnia.communityvotes.com
scarboroughmirrorreaderschoice.toronto.com
southerngeorgianbayreaderschoice.simcoe.com
src.toronto.com
uxbridgetimesjournalreaderschoice.durhamregion.com
waterlooreaderschoice.ca
www.cmv.to
www.cmvt.ca
www.communityvotes.com
www.readerschoice.kamloopsthisweek.com

Other certificates including the domain name communityvotes.com

(limited to 100 certificates)
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
www.scarboroughrc.insidetoronto.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com
communityvotes.com

Certificate

The complete raw certificate details for communityvotes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaisVPV0E1ssNSSlInfq
tHgCJSfozCWeXgaxGgrCvAZL4kmlgJo69ED29iNCv52RgxGZS4SYayWRttvdQ7lT
HZ8BcAhWD8n13hbBPovHolO67R9ZamnOZ1DgCXwEg3iukecTnW+3Cbrpt1x+eYuf
LQO+LKdlkvJe3t7nWpbvA6dz1nWV5FViPYXFubyM8m3iYn0Apu/jPPWsm3Eq3HHr
O1EeJYNFa0jzti2I76WneGTresZh4wdxxC61POm53Q48GOX41ZkGGwqWaE0eM9O1
zklXv0p/FnGBmIrQoRUTVxoHgOKvaP1XSleecsujd18v2+U5YHbk6L3a9C/UdCKV
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289675319940717272639540363154119791567934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 15:52:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 15:52:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'communityvotes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20407542940343258693233786001243606789102960364801901340206263929048354822501252751838428102385499042966772670286651950170642455075625960200200009765634697305088070569344328577956087216171860536835859156186232647424385641391202011308294655829560170016744878675865392308847023572680294661379980132074533113059438647328525936611027609467599055949600439814362334984628858662989523653682277762467263094377679918487251072186297215028898221588430279924418469729212679235444933262764351720871422681146586215101060751045043295065424229617900073667539792976049198488557879895920753253210714244481999701396734152172395038938619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e68636a66fc9650905512df4dbf0b2dbc8ee0ce1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajaxpickeringnewsadvertiserreaderschoice.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrieadvancereaderschoice.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightonindependentreaderschoice.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caledon.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calgary.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgetimeschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claringtonthisweekreaderschoice.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmv.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmvtdemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dufferin.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmonton.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forteriepost.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grimsbylincolnnews.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guelphmercurytribune.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifax.metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haltonhills.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawarthalakesthisweek.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenerreaderschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrocommunitychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagara.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagaraonthelakeadvance.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekniagarafalls.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekstcatharinesthorold.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarathisweekwellandpelham.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northumberlandnewsreaderschoice.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshawawhitbythisweekreaderschoice.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughexaminer.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterboroughthisweek.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portcolborneleader.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portperrystarreaderschoice.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerawards.therecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.bramptonguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.burlingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.flamboroughreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.hamiltonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.miltoncanadianchampion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.mississauganews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.niagarafallsreview.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.oakvillebeaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.stcatharinesstandard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.thespec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.torstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readerschoice.wellandtribune.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region1.cmvtregiondemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region2.cmvtregiondemo.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachem.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarnia.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarboroughmirrorreaderschoice.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerngeorgianbayreaderschoice.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxbridgetimesjournalreaderschoice.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterlooreaderschoice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmv.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmvt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communityvotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readerschoice.kamloopsthisweek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b94b3a9b60000040300473045022046ab3b69a059bf7049cab940c808015d2f7bde9ce2c00eec95ed84b988b5cd84022100e9d5a372d94e6fe4055e6dc346a7f6475666c2037c931fb27ad34c73d07ba6d000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b94b3a9d2000004030048304602210085fd83f4130918bb9cfdf74ca47ac5ca2f4fa1a708a32717a837f1e66bb0b8a8022100a2ea8b2c21edf6a8c998ae4004bfddbb9afb0bc93f37a5b0d7f48fc8ae617bc2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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