*.alamogordonews.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9b:f9:84:9d:d2:29:2d:05:17:96:ea:2f:bf:e1:84:58:43 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.alamogordonews.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:f9:84:9d:d2:29:2d:05:17:96:ea:2f:bf:e1:84:58:43
Serial Number (int): 314412291023150937638714083988335535347779
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:80:de:42:21:af:4e:c6:4a:e0:a2:cd:4f:be:da:14:2f:53:c3:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:af:b8:35:f6:cf:9d:e0:30:6f:8a:26:40:13:31:6d:fe:4c:d6:82
Fingerprint (sha256): 05:29:ce:a1:4d:9b:2a:b7:e6:da:d1:4a:a6:98:ef:0c:09:d9:9b:73:f3:1b:40:0f:9d:da:03:76:79:e2:3b:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.alamogordonews.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.alamogordonews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alamogordonews.com
*.app.com
*.argusleader.com
*.azcentral.com
*.battlecreekenquirer.com
*.blackmountainnews.com
*.bucyrustelegraphforum.com
*.burlingtonfreepress.com
*.caller.com
*.centralfloridafuture.com
*.chillicothegazette.com
*.cincinnati.com
*.citizen-times.com
*.clarionledger.com
*.coloradoan.com
*.commercialappeal.com
*.coshoctontribune.com
*.courier-journal.com
*.courierpostonline.com
*.courierpress.com
*.currentargus.com
*.daily-times.com
*.dailyrecord.com
*.dailyworld.com
*.delawarebeaches.com
*.delawareonline.com
*.delmarvanow.com
*.demingheadlight.com
*.democratandchronicle.com
*.desertsun.com
*.desmoinesregister.com
*.detroitnews.com
*.dmjuice.com
*.dnj.com
*.elpasotimes.com
*.elpasoymas.com
*.elsoldesalinas.com
*.eveningsun.com
*.farmersadvance.com
*.fdlreporter.com
*.flipsidepa.com
*.floridatoday.com
*.freep.com
*.fsunews.com
*.gametimepa.com
*.gosanangelo.com
*.greatfallstribune.com
*.greenbaypressgazette.com
*.greenvilleonline.com
*.hattiesburgamerican.com
*.hawkcentral.com
*.hometownlife.com
*.htrnews.com
*.independentmail.com
*.indystar.com
*.inyork.com
*.ithacajournal.com
*.jacksonsun.com
*.jconline.com
*.jsonline.com
*.kitsapsun.com
*.knoxnews.com
*.lancastereaglegazette.com
*.lansingstatejournal.com
*.lavozarizona.com
*.lcsun-news.com
*.ldnews.com
*.livingstondaily.com
*.lohud.com
*.mansfieldnewsjournal.com
*.marconews.com
*.marionstar.com
*.marshfieldnewsherald.com
*.metroparentmagazine.com
*.montgomeryadvertiser.com
*.mycentraljersey.com
*.naplesnews.com
*.newarkadvocate.com
*.news-leader.com
*.news-press.com
*.newsleader.com
*.northjersey.com
*.packersnews.com
*.pal-item.com
*.pnj.com
*.portclintonnewsherald.com
*.postcrescent.com
*.poughkeepsiejournal.com
*.press-citizen.com
*.pressconnects.com
*.publicopiniononline.com
*.redding.com
*.reno.com
*.reporternews.com
*.rgj.com
*.ruidosonews.com
*.wp-prod-us-east1-public.gke-ernest-poole-svc.gannettdigital.com

Other certificates including the domain name alamogordonews.com

(limited to 100 certificates)
*.alamogordonews.com
gannett.com
gannett.com
*.usatodaynetwork.com
gannett.com
*.gannett.com
consent.computerweekly.com
jobs.thejobnetwork.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
hiring.sanduskyregister.com
hiring.sanduskyregister.com
gannett.com
gannett.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
sp.alamogordonews.com
realestate.alamogordonews.com
gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
sp.alamogordonews.com
gannett.com
gannett.com
sp.alamogordonews.com
gannett.com
gannett.com
gannett.com
tickets.indystar.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
jobs.usatoday.com
jobs.thejobnetwork.com
gannett.com
*.gannett.com
gannett.com
realestate.alamogordonews.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
flyertown.ca
profile.alamogordonews.com
gannett.com
tickets.indystar.com
gannett.com
gannett.com
www.democratandchronicle.com
*.alamogordonews.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
jobs.thejobnetwork.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.alamogordonews.com
gannett.com
*.gannett.com
gannett.com
jobs.usatoday.com
gannett.com
gannett.com
consent.computerweekly.com
gannett.com
*.gannett.com
hiring.timesposttribune.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
jobs.usatoday.com
gannett.com
gannett.com
realestate.alamogordonews.com
gannett.com
gannett.com
gannett.com
gannett.com

Certificate

The complete raw certificate details for *.alamogordonews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdU+yPXXkV9ugL2zk75H
B/vOl8mxcdUwuPrnN9ce1FkuMgZAU1oXnXQmazN5mgF+aauHGjBMdDxc7UXdWfEH
CPC+9mIBseZw2gw0VM7iQb/9CIWOczkwAoYPUupowB9LY8jeINVJTJYr56+FDAiM
K8lpDefw22XE1urZ5PNA1F9U6wtSrXFYGB0Hez62Y0nhj5MFnSf/HRKNdpcpC3LZ
kEnE4aYwMoY49eRCdvBIrCWWbC877r3PsXn5XOzFEEwFwuy7bIsdKPuLCSgE2IVc
PTdDhCmDGIUqaJYa907BbeGXplJQebEO4gVq9FUgltHztWLGkOdfbFMEe+Y1Rqja
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314412291023150937638714083988335535347779
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-13 16:08:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-11 16:08:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.alamogordonews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22449335132882216990530081467855343212352174200626537704889823688365604011725645965752086549801885203023898973106491653695807473860539569924570872076988737415222537651527353681349752505224656109634809659456851978929370601712710895417957594009706794053678462541927784623050877552760487379485395658522520103609176407026890449569803707732032963007908017364415346821676866727091580008893164958059203128678115488568389241285149893802418060625077781040655378828764638509620509729217189050793976256441228772973718123932717068756543096126501283437189545785634805228562343553736805633699267369213264438442209647306707206461987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e680de4221af4ec64ae0a2cd4fbeda142f53c3e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2019 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alamogordonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argusleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlecreekenquirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackmountainnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucyrustelegraphforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burlingtonfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centralfloridafuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chillicothegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cincinnati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citizen-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarionledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coloradoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercialappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coshoctontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courierpostonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courierpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currentargus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daily-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delawarebeaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delawareonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delmarvanow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demingheadlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.democratandchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desertsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desmoinesregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detroitnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmjuice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpasotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpasoymas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsoldesalinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eveningsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmersadvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdlreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipsidepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floridatoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsunews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gametimepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gosanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatfallstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenbaypressgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenvilleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hattiesburgamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawkcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hometownlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ithacajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacksonsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitsapsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knoxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lancastereaglegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lansingstatejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavozarizona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lcsun-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ldnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingstondaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lohud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mansfieldnewsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marconews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marionstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marshfieldnewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metroparentmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montgomeryadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycentraljersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naplesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newarkadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news-press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.packersnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pal-item.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portclintonnewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postcrescent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poughkeepsiejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.press-citizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pressconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.publicopiniononline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporternews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rgj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruidosonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp-prod-us-east1-public.gke-ernest-poole-svc.gannettdigital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000182982df6c40000040300463044022001817c84f103f3815f43826e1fb72b995082a3b1d6411ee1e836a7e529490df3022059b639152c3306318fb1fa22309e3bf73b10c3867a3fcce429777a234bb06d820076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000182982df6b90000040300473045022100e455c18c8d72ebb2871f67bcedcf9109b246bb8b108b321deae6ce9036126d8f022048d084e0d9d37063d795371d72599969d598175a633749b43c386a3e684cb045
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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