electrozad.mecrewards.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:78:d7:f7:0a:0f:6f:fd:31:67:00:5b:f5:a5:e4:52:b0:4d was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=electrozad.mecrewards.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:78:d7:f7:0a:0f:6f:fd:31:67:00:5b:f5:a5:e4:52:b0:4d
Serial Number (int): 302457808546258347972424416241669515685965
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:61:8a:3a:ac:e6:d9:97:fa:fb:b0:45:57:c2:ab:b2:12:35:50:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 30:b7:5a:49:46:03:f2:74:f9:89:f4:55:a1:b5:e7:3e:30:f1:a9:55
Fingerprint (sha256): bf:51:89:57:d1:79:d2:f8:48:c9:bf:ce:a0:71:70:07:0c:99:5e:38:c6:7b:b2:cb:c3:b8:34:f9:ac:ba:79:30

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate electrozad.mecrewards.ca

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for electrozad.mecrewards.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barobertson.mecrewards.ca
barobinson.mecrewards.ca
bartlegibson.mecrewards.ca
beaulieulamoureux.mecrewards.ca
birdstairs.mecrewards.ca
birdstairsrewards.com
bws.mecrewards.ca
cde.mecrewards.ca
cdepoints.ca
daviessg.mecrewards.ca
demo.mecrewards.ca
diversifiedventures.mecrewards.ca
dubo.mecrewards.ca
duboxtra.com
dvrewards.ca
eddy.mecrewards.ca
eddyrewards.com
egpenner.mecrewards.ca
electromall.mecrewards.ca
electrozad.mecrewards.ca
ewel.mecrewards.ca
ews.mecrewards.ca
futech.mecrewards.ca
gberewards.com
gerrie.mecrewards.ca
greybruceelectric.mecrewards.ca
guillevin-catalog.mecrewards.ca
guillevin-demo.mecrewards.ca
guillevin.mecrewards.ca
guillevinmilestones.com
hudco.mecrewards.ca
idealsupply.mecrewards.ca
iesrewards.mecrewards.ca
iesupply.mecrewards.ca
independent.mecrewards.ca
inside.birdstairsrewards.com
inside.cdepoints.ca
inside.duboxtra.com
inside.dvrewards.ca
inside.eddyrewards.com
inside.gberewards.com
inside.mclrewards.ca
inside.pennerpoints.com
inside.provincepoints.com
inside.westernequipmentrewards.com
insideportal.duboxtra.com
insideportal.mclrewards.ca
macmor.mecrewards.ca
marcustransformer-rewards.mecrewards.ca
master.mecrewards.ca
mc.mecrewards.com
mcloughlan.mecrewards.ca
mclrewards.ca
mercurylighting.mecrewards.ca
nationalfire.mecrewards.ca
next.mecrewards.ca
oneil.mecrewards.ca
oneil.mecrewards.com
pareelectric.mecrewards.ca
pennerpoints.com
portal.duboxtra.com
portal.guillevinmilestones.com
powrmatic.mecrewards.ca
prestonhardware.mecrewards.ca
primerewards.gerrie.com
province-electric.mecrewards.ca
provincepoints.com
robertsondemo.mecrewards.ca
robertsonrewards.ca
rrportal.onemotion.ca
rrstage.onemotion.ca
scscanada.mecrewards.ca
sdi.mecrewards.ca
sego.mecrewards.ca
signify.mecrewards.ca
tecfilles.mecrewards.ca
test.mecrewards.ca
toolway.mecrewards.ca
tradelco.mecrewards.ca
westernequipment.mecrewards.ca
westernequipmentrewards.com
wolseley.mecrewards.ca
www.guillevinmilestones.com
www.mclrewards.ca
www.provincepoints.com
www.robertsonrewards.ca

Other certificates including the domain name mecrewards.ca

(limited to 100 certificates)
adrewards.ca
adrewards.ca
adrewards.ca
portal.guillevinmilestones.com
mc.mecrewards.com
mc.mecrewards.com
adrewards.ca
mecrewards.com
mc.mecrewards.com
mc.mecrewards.com
adrewards.ca
mc.mecrewards.com
mc.mecrewards.com
master.mecrewards.ca
adrewards.ca
adrewards.ca
adrewards.ca
mecrewards.com
mc.mecrewards.com
mc.mecrewards.com
mc.mecrewards.com
mecrewards.ca
adrewards.ca
mecrewards.ca
mc.mecrewards.com
mecrewards.ca
adrewards.ca
mc.mecrewards.com
mecrewards.com
adrewards.ca
adrewards.ca
adrewards.ca
adrewards.ca
mecrewards.ca
mc.mecrewards.com
adrewards.ca
mecrewards.ca
mc.mecrewards.com
figment.mecrewards.ca
adrewards.ca
mc.mecrewards.com
mecrewards.ca
master.mecrewards.ca
electrozad.mecrewards.ca
adrewards.ca
figment.mecrewards.ca
cdepoints.ca
adrewards.ca
inside.gberewards.com
adrewards.ca
mecrewards.com
adrewards.ca
adrewards.ca
adrewards.ca
mecrewards.com
adrewards.ca
adrewards.ca
adrewards.ca

Certificate

The complete raw certificate details for electrozad.mecrewards.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3kTnmrt3YiWgU7RWOWT
flDlxAtWIGvU+t88oCcTulPFt5xem9r0VI/b5/xA1uHenI1hhFz6WurXOys+xnUZ
K25rDwhLlWsNC5wIyM8KuGNcErt3j+P1N/pYv4TD+boHmt2ORdjlHKa5YMrvMS49
22c5hoIzDYpgaJyosUlDgCfFTzpjDuAXSG+m7hiL8LVrmGCCCthvEas/SXnfVAA/
rHmwKAbJSJZcl/VlVlsN/DcQ4I7S0Qj8MQssWXdRY0PtVqAMMtgmgBfEQKxJjU+x
o6HHvQzt4BhAqRBU7tujy3JHaTj8OIVvTCs0fE2htA4CSK8wYUmHmhjE7iZi6KXA
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302457808546258347972424416241669515685965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 04:51:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-25 04:51:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'electrozad.mecrewards.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25686081022567579360462258609949740382579947999085276127949134724991976282815314571591506167137228659038528037245156326237755284861015256285825844736640484679753950921652314258095948611411375690994522913572935532483156938525569563659016060567275808424916522241843797558114985125350674353733729183483347517312610059093067705619962188199003670359763706207367434403870879148657096473418485102724934611679800848777895752312094113583084287854998574293982663923601705023972563924161513953793594313529205118944724568927988738473444347808102837804817408327062697045146894687031172835217552703953038821653455489139452280160357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1618a3aace6d997fafbb04557c2abb21235500a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2091 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barobertson.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barobinson.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartlegibson.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaulieulamoureux.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdstairs.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdstairsrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bws.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdepoints.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daviessg.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversifiedventures.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubo.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duboxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddy.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egpenner.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electromall.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrozad.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewel.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ews.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futech.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gberewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerrie.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greybruceelectric.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guillevin-catalog.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guillevin-demo.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guillevin.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guillevinmilestones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudco.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idealsupply.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iesrewards.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iesupply.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independent.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.birdstairsrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.cdepoints.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.duboxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.dvrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.eddyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gberewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.mclrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.pennerpoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.provincepoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.westernequipmentrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insideportal.duboxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insideportal.mclrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macmor.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcustransformer-rewards.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.mecrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcloughlan.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercurylighting.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalfire.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneil.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneil.mecrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pareelectric.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennerpoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.duboxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.guillevinmilestones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powrmatic.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestonhardware.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primerewards.gerrie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'province-electric.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincepoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertsondemo.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertsonrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrportal.onemotion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrstage.onemotion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scscanada.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdi.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sego.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signify.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecfilles.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolway.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradelco.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernequipment.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernequipmentrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolseley.mecrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guillevinmilestones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mclrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provincepoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertsonrewards.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fb89a9a37000004030047304502201f8dd1f4e92e7fcc8f658f571c753a7378f1a0af286ff7c8162de9afd98e424d022100ddcf97b6bee58061d6419ffb7a8ff60d40372cb3aba40ed8d9a49f021655c204007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fb89a9af70000040300483046022100bf7f30cd1ecd2863553eae485855a170572207046c7733b1bb7df336bceb52bd022100d0daeb2e21e7a7754a8a2222083d4e42afc09088740e7df7bcd2f66cc8b69269
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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