login.pennlive.com
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number fe:3a:56:1e:0a:dc:0f:c3:46:b7:65:c4:97:04:f4:c7 was issued on by Sectigo Limited.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=login.pennlive.com
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): fe:3a:56:1e:0a:dc:0f:c3:46:b7:65:c4:97:04:f4:c7Serial Number (int): 337926810814595329407845009290370020551
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 4e:9d:55:74:62:ba:aa:87:11:c6:2c:be:c2:a4:61:df:2c:ae:b6:84
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): f6:81:31:be:36:58:7b:2f:85:e4:18:45:5d:ac:e7:0b:3d:df:da:73
Fingerprint (sha256): 03:73:dc:78:d0:56:53:4f:48:23:9d:cb:4e:4b:50:ba:d7:df:1a:f4:b1:c1:41:0d:fd:99:c1:34:94:e1:94:c1
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate login.pennlive.com
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for login.pennlive.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
login.pennlive.com
login.AL.com
login.cleveland.com
login.gulflive.com
login.lehighvalleylive.com
login.mardigras.com
login.masslive.com
login.mlive.com
login.newyorkupstate.com
login.nj.com
login.nola.com
login.oregonlive.com
login.plaindealer.com
login.silive.com
login.syracuse.com
login.AL.com
login.cleveland.com
login.gulflive.com
login.lehighvalleylive.com
login.mardigras.com
login.masslive.com
login.mlive.com
login.newyorkupstate.com
login.nj.com
login.nola.com
login.oregonlive.com
login.plaindealer.com
login.silive.com
login.syracuse.com
Other certificates including the domain name pennlive.com
(limited to 100 certificates)
ssl374612.cloudflaressl.com
ssl374614.cloudflaressl.com
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
ssl374614.cloudflaressl.com
foreclosures.al.com
br.bikeradar.com
login.pennlive.com
businessfinder.al.com
hiring.mlive.com
star2.arcpublishing.com
dns-vetting1-marita-ardnek.map.fastly.net
autos.mlive.com
advancelocal.map.fastly.net
li.lisecurelink.com
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
local.thefirsthundredmiles.com
br.bikeradar.com
advancelocal.map.fastly.net
hiring.mlive.com
nj-skypeaccess.advancelocal.net
local.crestonnews.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.com
dns-vetting1-marita-ardnek.map.fastly.net
ezads.mlive.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
advancelocal.map.fastly.net
articles.pennlive.com
ezads.mlive.com
articles-dev.pennlive.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
li.lisecurelink.com
local.thegazette.com
dns-vetting1-marita-ardnek.map.fastly.net
ssl352182.cloudflaressl.com
advancelocal.map.fastly.net
jobs.thejobnetwork.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
sanssl2.stats.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.web.arc-cdn.net
nwajobfinder.com
hiring.mlive.com
al-skypeaccess.advancelocal.net
ssl121533.cloudflaressl.com
hiring.mlive.com
mobileobits.pennlive.com
dns-vetting1-marita-ardnek.map.fastly.net
ssl468952.cloudflaressl.com
autos.pennlive.com
local.summitdaily.com
star2.arcpublishing.com
ssl468954.cloudflaressl.com
login.al.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
mobileobits.pennlive.com
nwajobfinder.com
jobs.thejobnetwork.com
ezads.mlive.com
hiring.mlive.com
sanssl2.stats.com
local.ripongazette.co.uk
businessfinder.al.com
ssl374613.cloudflaressl.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
oasc18.247realmedia.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
br.bikeradar.com
nj-skypeaccess.advancelocal.net
star4.arcpublishing.com
li.lisecurelink.com
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
hiring.mlive.com
ssl374614.cloudflaressl.com
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
ssl374614.cloudflaressl.com
foreclosures.al.com
br.bikeradar.com
login.pennlive.com
businessfinder.al.com
hiring.mlive.com
star2.arcpublishing.com
dns-vetting1-marita-ardnek.map.fastly.net
autos.mlive.com
advancelocal.map.fastly.net
li.lisecurelink.com
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
local.thefirsthundredmiles.com
br.bikeradar.com
advancelocal.map.fastly.net
hiring.mlive.com
nj-skypeaccess.advancelocal.net
local.crestonnews.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.com
dns-vetting1-marita-ardnek.map.fastly.net
ezads.mlive.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
advancelocal.map.fastly.net
articles.pennlive.com
ezads.mlive.com
articles-dev.pennlive.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
li.lisecurelink.com
local.thegazette.com
dns-vetting1-marita-ardnek.map.fastly.net
ssl352182.cloudflaressl.com
advancelocal.map.fastly.net
jobs.thejobnetwork.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
sanssl2.stats.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.web.arc-cdn.net
nwajobfinder.com
hiring.mlive.com
al-skypeaccess.advancelocal.net
ssl121533.cloudflaressl.com
hiring.mlive.com
mobileobits.pennlive.com
dns-vetting1-marita-ardnek.map.fastly.net
ssl468952.cloudflaressl.com
autos.pennlive.com
local.summitdaily.com
star2.arcpublishing.com
ssl468954.cloudflaressl.com
login.al.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
mobileobits.pennlive.com
nwajobfinder.com
jobs.thejobnetwork.com
ezads.mlive.com
hiring.mlive.com
sanssl2.stats.com
local.ripongazette.co.uk
businessfinder.al.com
ssl374613.cloudflaressl.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
oasc18.247realmedia.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
br.bikeradar.com
nj-skypeaccess.advancelocal.net
star4.arcpublishing.com
li.lisecurelink.com
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
hiring.mlive.com
Certificate
The complete raw certificate details for login.pennlive.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG1DCCBbygAwIBAgIRAP46Vh4K3A/DRrdlxJcE9McwDQYJKoZIhvcNAQELBQAw gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0yMDAyMDcwMDAwMDBaFw0yMTAyMDYyMzU5NTlaMB0xGzAZBgNVBAMTEmxv Z2luLnBlbm5saXZlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALpIx7dkq7uPiRHw/LN2wWGdPWlzzGdh3Q+u7F3k0ieGmNwGigvp3DTXP3acafjN eSlG3LYzLfS+CFvpnNJVdxPIiiopv3a35GLrd9a5EjySpP04fKiLVyS1vSXHLF/9 5VYyoU539Y4imop+FCt24y2qH9Rql/BIEHVnoQxtfGUG/67LqATzPkYqX5kFzgZj K34Y3TD9633pbLs7XlaI/5srHwI1OqFrDuV2FzsmF2Dj5cVjbMbYx8k2uRO/2Ro/ Ed1mX5DYVD7tHnCHY/2624Fy6Gr7l3dDchFW7FKFxiGHYqFH6RmvDCXg5udKb6wM mwQ5HvflTGz25gHnbRrihN8CAwEAAaOCA5owggOWMB8GA1UdIwQYMBaAFI2MXsRU rYrhd+mb+ZsF4bgBjWHhMB0GA1UdDgQWBBROnVV0YrqqhxHGLL7CpGHfLK62hDAO BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUF BwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUF BwEBBHgwdjBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0 aWdvUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEF BQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggE5BgNVHREEggEwMIIBLIIS bG9naW4ucGVubmxpdmUuY29tggxsb2dpbi5BTC5jb22CE2xvZ2luLmNsZXZlbGFu ZC5jb22CEmxvZ2luLmd1bGZsaXZlLmNvbYIabG9naW4ubGVoaWdodmFsbGV5bGl2 ZS5jb22CE2xvZ2luLm1hcmRpZ3Jhcy5jb22CEmxvZ2luLm1hc3NsaXZlLmNvbYIP bG9naW4ubWxpdmUuY29tghhsb2dpbi5uZXd5b3JrdXBzdGF0ZS5jb22CDGxvZ2lu Lm5qLmNvbYIObG9naW4ubm9sYS5jb22CFGxvZ2luLm9yZWdvbmxpdmUuY29tghVs b2dpbi5wbGFpbmRlYWxlci5jb22CEGxvZ2luLnNpbGl2ZS5jb22CEmxvZ2luLnN5 cmFjdXNlLmNvbTCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AH0+8viP/4hVaCTC wMqeUol5K8UOeAl/LmqXaJl+IvDXAAABcB2cquAAAAQDAEgwRgIhAPgFGEnGzicI zRrbxzNt/r1OkB4ceBqrlIE8hCgG6VrQAiEA7L4yUUkSKgiaGBwjUY8PcvjM5OeD tG6kAD0qZQH+A5gAdwBElGUusO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAA AXAdnKrOAAAEAwBIMEYCIQCmXc4GBTmU/eZaQinJXWwbzV+Ib5QgmkUMBX4eFFdb 1wIhAPgYUuzjggAwltfbx6kyJza2jSkmmMzdsrG01bERLC4gMA0GCSqGSIb3DQEB CwUAA4IBAQCviiQCDD5XdVMq9RHS01qKCBhWoRu7dsY2UaFBuONwTEOFHiACSkho ZRV9PVpL4i2BZXwLqBNKEJBVVTmHtq638VbnGuV0x2EQxC7Pu9v9AmH1ZmCLElEu fwdWjlHOSYXdyU4EE5n68K9/0+BFH3b+QTnCRQKr37WIerufTpmkJZnQwVV1++3S Uecs63q261irLp/Y+Rv/UXP8txY901CRyjY0SwyISKvqC2sKdbXH8yRF7seDzLjy wmXnG5YI5bmi1zk2qEPInny7hd7stPdHsaHGs8m5AhMCwWfwpYu2ArMWyzeId+/+ 7XW1c1i30EtcU8llgMkdtE/8J8YDDrRW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukjHt2Sru4+JEfD8s3bB YZ09aXPMZ2HdD67sXeTSJ4aY3AaKC+ncNNc/dpxp+M15KUbctjMt9L4IW+mc0lV3 E8iKKim/drfkYut31rkSPJKk/Th8qItXJLW9JccsX/3lVjKhTnf1jiKain4UK3bj Laof1GqX8EgQdWehDG18ZQb/rsuoBPM+RipfmQXOBmMrfhjdMP3rfelsuzteVoj/ mysfAjU6oWsO5XYXOyYXYOPlxWNsxtjHyTa5E7/ZGj8R3WZfkNhUPu0ecIdj/brb gXLoavuXd0NyEVbsUoXGIYdioUfpGa8MJeDm50pvrAybBDke9+VMbPbmAedtGuKE 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337926810814595329407845009290370020551 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.pennlive.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23516213949370535697895200393893938435397139157708589721586824464765581912195287659523711648466568751674477084753016653910983410902171373526449888782168751126978407954246444430197660797425604560299111936294274111889167283402714691596805797722918349522772692631913052269954099336009322724297490978437953235688987947503583027408333580655655053508753913833712423903152779397591425324112381012892396804484853083110917531927187054781309996150508957921194203786076466576281817719785723365085441021562432466179507626844712596682255984470354471228111902854057958260967006927425097018326713488289865959776637945645483023303903 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4e9d557462baaa8711c62cbec2a461df2caeb684 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pennlive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.AL.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cleveland.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.gulflive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.lehighvalleylive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mardigras.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.masslive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mlive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.newyorkupstate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.nj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.nola.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.oregonlive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.plaindealer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.silive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.syracuse.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001701d9caae00000040300483046022100f8051849c6ce2708cd1adbc7336dfebd4e901e1c781aab94813c842806e95ad0022100ecbe325149122a089a181c23518f0f72f8cce4e783b46ea4003d2a6501fe03980077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001701d9caace0000040300483046022100a65dce06053994fde65a4229c95d6c1bcd5f886f94209a450c057e1e14575bd7022100f81852ece382003096d7dbc7a9322736b68d292698ccddb2b1b4d5b1112c2e20 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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