*.alamogordonews.com

Issued by R3

About this certificate

This digital certificate with serial number 04:78:d9:3e:9c:fd:b1:f6:41:f5:89:72:87:ee:f2:6f:98:0f was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.alamogordonews.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:78:d9:3e:9c:fd:b1:f6:41:f5:89:72:87:ee:f2:6f:98:0f
Serial Number (int): 389571795339199857945576290560251823888399
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:8c:57:e7:e3:a7:27:15:a3:7c:a0:f1:85:ed:1f:9c:e3:da:84:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:20:1c:4a:65:94:3f:0c:62:4a:c1:45:0e:f8:30:56:9f:eb:2b:2e
Fingerprint (sha256): 00:18:41:be:33:68:f4:9d:73:53:03:fd:81:57:be:e4:d7:c9:54:af:29:92:b3:11:dc:8f:bd:a4:8d:74:29:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.alamogordonews.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.alamogordonews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alamogordonews.com
*.app.com
*.argusleader.com
*.azcentral.com
*.battlecreekenquirer.com
*.baxterbulletin.com
*.blackmountainnews.com
*.bucyrustelegraphforum.com
*.burlingtonfreepress.com
*.caller.com
*.centralfloridafuture.com
*.chillicothegazette.com
*.cincinnati.com
*.citizen-times.com
*.clarionledger.com
*.coloradoan.com
*.commercialappeal.com
*.coshoctontribune.com
*.courier-journal.com
*.courierpostonline.com
*.courierpress.com
*.currentargus.com
*.daily-times.com
*.dailyrecord.com
*.dailyworld.com
*.delawarebeaches.com
*.delawareonline.com
*.delmarvanow.com
*.demingheadlight.com
*.democratandchronicle.com
*.desertsun.com
*.desmoinesregister.com
*.detroitnews.com
*.dmjuice.com
*.dnj.com
*.elpasotimes.com
*.elpasoymas.com
*.elsoldesalinas.com
*.eveningsun.com
*.farmersadvance.com
*.fdlreporter.com
*.flipsidepa.com
*.floridatoday.com
*.freep.com
*.fsunews.com
*.gametimepa.com
*.gosanangelo.com
*.greatfallstribune.com
*.greenbaypressgazette.com
*.greenvilleonline.com
*.hattiesburgamerican.com
*.hawkcentral.com
*.hometownlife.com
*.htrnews.com
*.independentmail.com
*.indystar.com
*.inyork.com
*.ithacajournal.com
*.jacksonsun.com
*.jconline.com
*.jsonline.com
*.kitsapsun.com
*.knoxnews.com
*.lancastereaglegazette.com
*.lansingstatejournal.com
*.lavozarizona.com
*.lcsun-news.com
*.ldnews.com
*.livingstondaily.com
*.lohud.com
*.mansfieldnewsjournal.com
*.marconews.com
*.marionstar.com
*.marshfieldnewsherald.com
*.metroparentmagazine.com
*.montgomeryadvertiser.com
*.mycentraljersey.com
*.naplesnews.com
*.newarkadvocate.com
*.news-leader.com
*.news-press.com
*.newsleader.com
*.northjersey.com
*.packersnews.com
*.pal-item.com
*.pnj.com
*.portclintonnewsherald.com
*.postcrescent.com
*.poughkeepsiejournal.com
*.press-citizen.com
*.pressconnects.com
*.publicopiniononline.com
*.redding.com
*.reno.com
*.reporternews.com
*.rgj.com
*.ruidosonews.com
*.wp-staging-us-east1-public.gke-steve-starr-svc.gannettdigital.com

Other certificates including the domain name alamogordonews.com

(limited to 100 certificates)
*.alamogordonews.com
gannett.com
gannett.com
*.usatodaynetwork.com
gannett.com
*.gannett.com
consent.computerweekly.com
jobs.thejobnetwork.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
hiring.sanduskyregister.com
hiring.sanduskyregister.com
gannett.com
gannett.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
sp.alamogordonews.com
realestate.alamogordonews.com
gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
sp.alamogordonews.com
gannett.com
gannett.com
sp.alamogordonews.com
gannett.com
gannett.com
gannett.com
tickets.indystar.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
jobs.usatoday.com
jobs.thejobnetwork.com
gannett.com
*.gannett.com
gannett.com
realestate.alamogordonews.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
flyertown.ca
profile.alamogordonews.com
gannett.com
tickets.indystar.com
gannett.com
gannett.com
www.democratandchronicle.com
*.alamogordonews.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
jobs.thejobnetwork.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.alamogordonews.com
gannett.com
*.gannett.com
gannett.com
jobs.usatoday.com
gannett.com
gannett.com
consent.computerweekly.com
gannett.com
*.gannett.com
hiring.timesposttribune.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
jobs.usatoday.com
gannett.com
gannett.com
realestate.alamogordonews.com
gannett.com
gannett.com
gannett.com
gannett.com

Certificate

The complete raw certificate details for *.alamogordonews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMIjCCCwqgAwIBAgISBHjZPpz9sfZB9Ylyh+7yb5gPMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEwMjIxNTM3MzVaFw0yMjAxMjAxNTM3MzRaMB8xHTAbBgNVBAMM
FCouYWxhbW9nb3Jkb25ld3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsm7X1/WKXjQP52pAgonKcVMl4BsvyVTJ63w2EK/eugx+G2Rxubm8zigr
7LWjurwBscE7vfzdgW33bvEVNDEXuv7oIermGv6AB3D5YGL/pk+EIZPg7whObFKL
Y3mzFvAbg/rLgR9VVMRo0W0SLJF9pn+NCJSWk+hYVZ98sgm4auhu3LqNoTmW43YL
vIsNMuG96DzjX2OPErqG8S9KmZM0rxyy9NbsIf0LGMVT8kZ+z1/gznFx/0BYCx8V
sLfbW8OQzmm2q/ILPf6Zk7yWfcrG9zQQwAhA4zK7ZVsV2Kq3vXwuXztBoKh5zZBG
1g6qyHBb3B4hUHpJ3iaCLi1ilMcyZwIDAQABo4IJQzCCCT8wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBT2jFfn46cnFaN8oPGF7R+c49qEWzAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCCAQGA1UdEQSCB/swggf3ghQqLmFsYW1vZ29yZG9uZXdzLmNvbYIJ
Ki5hcHAuY29tghEqLmFyZ3VzbGVhZGVyLmNvbYIPKi5hemNlbnRyYWwuY29tghkq
LmJhdHRsZWNyZWVrZW5xdWlyZXIuY29tghQqLmJheHRlcmJ1bGxldGluLmNvbYIX
Ki5ibGFja21vdW50YWlubmV3cy5jb22CGyouYnVjeXJ1c3RlbGVncmFwaGZvcnVt
LmNvbYIZKi5idXJsaW5ndG9uZnJlZXByZXNzLmNvbYIMKi5jYWxsZXIuY29tghoq
LmNlbnRyYWxmbG9yaWRhZnV0dXJlLmNvbYIYKi5jaGlsbGljb3RoZWdhemV0dGUu
Y29tghAqLmNpbmNpbm5hdGkuY29tghMqLmNpdGl6ZW4tdGltZXMuY29tghMqLmNs
YXJpb25sZWRnZXIuY29tghAqLmNvbG9yYWRvYW4uY29tghYqLmNvbW1lcmNpYWxh
cHBlYWwuY29tghYqLmNvc2hvY3RvbnRyaWJ1bmUuY29tghUqLmNvdXJpZXItam91
cm5hbC5jb22CFyouY291cmllcnBvc3RvbmxpbmUuY29tghIqLmNvdXJpZXJwcmVz
cy5jb22CEiouY3VycmVudGFyZ3VzLmNvbYIRKi5kYWlseS10aW1lcy5jb22CESou
ZGFpbHlyZWNvcmQuY29tghAqLmRhaWx5d29ybGQuY29tghUqLmRlbGF3YXJlYmVh
Y2hlcy5jb22CFCouZGVsYXdhcmVvbmxpbmUuY29tghEqLmRlbG1hcnZhbm93LmNv
bYIVKi5kZW1pbmdoZWFkbGlnaHQuY29tghoqLmRlbW9jcmF0YW5kY2hyb25pY2xl
LmNvbYIPKi5kZXNlcnRzdW4uY29tghcqLmRlc21vaW5lc3JlZ2lzdGVyLmNvbYIR
Ki5kZXRyb2l0bmV3cy5jb22CDSouZG1qdWljZS5jb22CCSouZG5qLmNvbYIRKi5l
bHBhc290aW1lcy5jb22CECouZWxwYXNveW1hcy5jb22CFCouZWxzb2xkZXNhbGlu
YXMuY29tghAqLmV2ZW5pbmdzdW4uY29tghQqLmZhcm1lcnNhZHZhbmNlLmNvbYIR
Ki5mZGxyZXBvcnRlci5jb22CECouZmxpcHNpZGVwYS5jb22CEiouZmxvcmlkYXRv
ZGF5LmNvbYILKi5mcmVlcC5jb22CDSouZnN1bmV3cy5jb22CECouZ2FtZXRpbWVw
YS5jb22CESouZ29zYW5hbmdlbG8uY29tghcqLmdyZWF0ZmFsbHN0cmlidW5lLmNv
bYIaKi5ncmVlbmJheXByZXNzZ2F6ZXR0ZS5jb22CFiouZ3JlZW52aWxsZW9ubGlu
ZS5jb22CGSouaGF0dGllc2J1cmdhbWVyaWNhbi5jb22CESouaGF3a2NlbnRyYWwu
Y29tghIqLmhvbWV0b3dubGlmZS5jb22CDSouaHRybmV3cy5jb22CFSouaW5kZXBl
bmRlbnRtYWlsLmNvbYIOKi5pbmR5c3Rhci5jb22CDCouaW55b3JrLmNvbYITKi5p
dGhhY2Fqb3VybmFsLmNvbYIQKi5qYWNrc29uc3VuLmNvbYIOKi5qY29ubGluZS5j
b22CDiouanNvbmxpbmUuY29tgg8qLmtpdHNhcHN1bi5jb22CDioua25veG5ld3Mu
Y29tghsqLmxhbmNhc3RlcmVhZ2xlZ2F6ZXR0ZS5jb22CGSoubGFuc2luZ3N0YXRl
am91cm5hbC5jb22CEioubGF2b3phcml6b25hLmNvbYIQKi5sY3N1bi1uZXdzLmNv
bYIMKi5sZG5ld3MuY29tghUqLmxpdmluZ3N0b25kYWlseS5jb22CCyoubG9odWQu
Y29tghoqLm1hbnNmaWVsZG5ld3Nqb3VybmFsLmNvbYIPKi5tYXJjb25ld3MuY29t
ghAqLm1hcmlvbnN0YXIuY29tghoqLm1hcnNoZmllbGRuZXdzaGVyYWxkLmNvbYIZ
Ki5tZXRyb3BhcmVudG1hZ2F6aW5lLmNvbYIaKi5tb250Z29tZXJ5YWR2ZXJ0aXNl
ci5jb22CFSoubXljZW50cmFsamVyc2V5LmNvbYIQKi5uYXBsZXNuZXdzLmNvbYIU
Ki5uZXdhcmthZHZvY2F0ZS5jb22CESoubmV3cy1sZWFkZXIuY29tghAqLm5ld3Mt
cHJlc3MuY29tghAqLm5ld3NsZWFkZXIuY29tghEqLm5vcnRoamVyc2V5LmNvbYIR
Ki5wYWNrZXJzbmV3cy5jb22CDioucGFsLWl0ZW0uY29tggkqLnBuai5jb22CGyou
cG9ydGNsaW50b25uZXdzaGVyYWxkLmNvbYISKi5wb3N0Y3Jlc2NlbnQuY29tghkq
LnBvdWdoa2VlcHNpZWpvdXJuYWwuY29tghMqLnByZXNzLWNpdGl6ZW4uY29tghMq
LnByZXNzY29ubmVjdHMuY29tghkqLnB1YmxpY29waW5pb25vbmxpbmUuY29tgg0q
LnJlZGRpbmcuY29tggoqLnJlbm8uY29tghIqLnJlcG9ydGVybmV3cy5jb22CCSou
cmdqLmNvbYIRKi5ydWlkb3NvbmV3cy5jb22CQyoud3Atc3RhZ2luZy11cy1lYXN0
MS1wdWJsaWMuZ2tlLXN0ZXZlLXN0YXJyLXN2Yy5nYW5uZXR0ZGlnaXRhbC5jb20w
TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBAIJf+s/yHVnW5/ocJdAwVGlEXE6wsy4NkgXT
AO81LYdpNKcuj8P+hJlhTQi0GKa3HYxMa0JP8uyHTwmy6EoOCE3Pqbqsb2ifOo9+
Iz0PjvlJDrVsq0PJxeUL4pX6uGitj2jykWmogzoeHOKqqVK2f+G8HuteCHOWbKcn
UnWEbBbyPBkJtD2hUAqZb8o/OzLDZvWhL5R8MrIKL8ihqTmEHSpHmHSmb9BfLOWd
dhLLJx79XElu0QOyY2ID8EvIwLgBLRldsE9nCmJ/vewaBovTdzuMztPihP/0/3qp
z4i8H1Fhi3Drm6/Frs8OxPvWA1Whs2yPO2AJx2xuTzRnRYPbQbE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm7X1/WKXjQP52pAgonK
cVMl4BsvyVTJ63w2EK/eugx+G2Rxubm8zigr7LWjurwBscE7vfzdgW33bvEVNDEX
uv7oIermGv6AB3D5YGL/pk+EIZPg7whObFKLY3mzFvAbg/rLgR9VVMRo0W0SLJF9
pn+NCJSWk+hYVZ98sgm4auhu3LqNoTmW43YLvIsNMuG96DzjX2OPErqG8S9KmZM0
rxyy9NbsIf0LGMVT8kZ+z1/gznFx/0BYCx8VsLfbW8OQzmm2q/ILPf6Zk7yWfcrG
9zQQwAhA4zK7ZVsV2Kq3vXwuXztBoKh5zZBG1g6qyHBb3B4hUHpJ3iaCLi1ilMcy
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389571795339199857945576290560251823888399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-22 15:37:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-20 15:37:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.alamogordonews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22525077072972628226101359322454804695502869635439965587818490446168399361621359389415752569970370203488236309022962429304055674955489461500623421592007102195223952593656260706782863264375351660917620173633593064850907666600834761010257758615957238436321206500644679078910266050635315192827088724821535170714202465374485383516688699871610328044805393999703192300855470240177812252578749314526714160067714165158712727655966017926754007104292621917815971518784531917333032213685815591196484757035410968248667630395733096633584407732637053041129556904591333527114674584683676713691532601033003500374104198266212690899559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f68c57e7e3a72715a37ca0f185ed1f9ce3da845b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2043 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alamogordonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argusleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlecreekenquirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baxterbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackmountainnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucyrustelegraphforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burlingtonfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centralfloridafuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chillicothegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cincinnati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citizen-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarionledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coloradoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercialappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coshoctontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courierpostonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courierpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currentargus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daily-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delawarebeaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delawareonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delmarvanow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demingheadlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.democratandchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desertsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desmoinesregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detroitnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmjuice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpasotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpasoymas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsoldesalinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eveningsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmersadvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdlreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipsidepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floridatoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsunews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gametimepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gosanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatfallstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenbaypressgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenvilleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hattiesburgamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawkcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hometownlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ithacajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacksonsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitsapsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knoxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lancastereaglegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lansingstatejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavozarizona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lcsun-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ldnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingstondaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lohud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mansfieldnewsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marconews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marionstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marshfieldnewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metroparentmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montgomeryadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycentraljersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naplesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newarkadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news-press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.packersnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pal-item.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portclintonnewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postcrescent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poughkeepsiejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.press-citizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pressconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.publicopiniononline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporternews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rgj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruidosonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp-staging-us-east1-public.gke-steve-starr-svc.gannettdigital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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