local.panolawatchman.com

Issued by R3

About this certificate

This digital certificate with serial number 04:11:12:c7:90:ff:c2:4b:8a:2d:5c:ad:95:e0:68:77:62:27 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.panolawatchman.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:11:12:c7:90:ff:c2:4b:8a:2d:5c:ad:95:e0:68:77:62:27
Serial Number (int): 354258906276626213162626427885545359630887
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:af:4b:8f:17:37:ad:29:83:29:94:61:3c:d8:b8:f9:50:62:38:de
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:17:f7:ed:e5:36:91:8f:6c:3b:28:96:91:43:c8:b7:78:b7:99:42
Fingerprint (sha256): 05:99:21:91:04:e4:00:26:49:d8:2c:31:f5:f6:f5:d1:9a:92:61:cc:ae:7f:f6:5c:fe:d8:eb:5f:3b:8a:ec:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.panolawatchman.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.panolawatchman.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advertisertribune.wanderful.ownlocal.com
arnprior.insideottawavalley.com
ashland.apg-wi.com
aurora.yorkregion.com
burlington.insidehalton.com
businessdirectory.triblive.com
feilding-rangitikei-herald.origami.neighbourly.co.nz
forestlake.presspubs.com
georgetown.communityimpact.com
kalamazooshopping.mlive.com
king.yorkregion.com
lakehouston.communityimpact.com
local.advertiser.vernonpublishing.com
local.airgunshooting.co.uk
local.angliaafloat.co.uk
local.ansonrecord.com
local.bensonnews-sun.com
local.bentoncourier.com
local.bigspringherald.com
local.bladenjournal.com
local.cityweekly.net
local.clintonnc.com
local.coloradocommunitymedia.com
local.cranbrookherald.com
local.djournal.com
local.duluth.com
local.elystandard.co.uk
local.eveningnews24.co.uk
local.exmouthjournal.co.uk
local.falmouthoutlook.com
local.fauquier.com
local.fergusfallsjournal.com
local.frontiersman.com
local.granthamjournal.co.uk
local.hawaiitribune-herald.com
local.huntervalleynews.net.au
local.insidebiz.com
local.insideottawavalley.com
local.ipswichstar.co.uk
local.jamestownsun.com
local.janesvillemarketplace.com
local.kemmerergazette.com
local.kentnews.co.uk
local.kentweddingday.co.uk
local.lebanondemocrat.com
local.livingedge.co.uk
local.maconcountytimes.com
local.midweeknews.com
local.muswellbrookchronicle.com.au
local.myheraldreview.com
local.news-journal.com
local.newtondailynews.com
local.omakchronicle.com
local.ottawasun.com
local.panolawatchman.com
local.pilotweb.aero
local.pinecitymn.com
local.pinecountynews.com
local.postbulletin.com
local.sachem.ca
local.sequoyahcountytimes.com
local.sierrasun.com
local.silverbelt.com
local.sweetwaterreporter.com
local.the-messenger.com
local.theabingtonjournal.com
local.thecarrollnews.com
local.thefloridavillager.com
local.thegazette.com
local.thesunchronicle.com
local.travelnewmex.com
local.victoriaadvocate.com
local.wapakdailynews.com
local.whatsuppub.com
local.yourdailyjournal.com
marketplace-ep.tj.news
marketplace-kr.tj.news
marketplace-ml.tj.news
matamata-chronicle.origami.neighbourly.co.nz
muskegonshopping.mlive.com
muskokaregion.muskokaregion.com
mylocal.dailypress.com
nashvillemetro.communityimpact.com
newhomes.yorkregion.com
northern-news.origami.neighbourly.co.nz
northern-outlook.origami.neighbourly.co.nz
orillia.simcoe.com
perth.insideottawavalley.com
richmondhill.yorkregion.com
sanmarcos.communityimpact.com
scarborough.toronto.com
shopping.cleveland.com
shopping.nj.com
shopping.oregonlive.com
shoreview.presspubs.com
sugarland.communityimpact.com
the-nelson-leader.origami.neighbourly.co.nz
thornhill.yorkregion.com
torrancedaily.wanderful.ownlocal.com
western-leader.origami.neighbourly.co.nz

Other certificates including the domain name panolawatchman.com

(limited to 100 certificates)
local.panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
local.mexicoledger.com
panolawatchman.com
conroe.communityimpact.com
panolawatchman.com
panolawatchman.com
portperry.durhamregion.com
local.ottawasun.com
panolawatchman.com
local.sachem.ca
local.hutchnews.com
panolawatchman.com
local.northamptonchron.co.uk
panolawatchman.com
panolawatchman.com
panolawatchman.com
admin.adforge.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
local.todmordennews.co.uk
panolawatchman.com
austinmetro.communityimpact.com
panolawatchman.com
panolawatchman.com
local.starkvilledailynews.com
panolawatchman.com
local.mywebtimes.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
panolawatchman.com
shopping.nola.com
panolawatchman.com
panolawatchman.com
local.saukvalley.com
panolawatchman.com
panolawatchman.com
local.carrickfergustimes.co.uk
panolawatchman.com

Certificate

The complete raw certificate details for local.panolawatchman.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUp0rIUOO2r4uglNxwwn
FsxwTyLIdgILwojbiixEC03qgdSUBGeuyoTh6V4lUrld1haiAF3r28qHWJXZlOr5
KyS/C71E6/uTdsqAy+Ruk36f2uHoW7DMdumKDT+/bXjzuGmCqFLSm7RqJTu7qLje
9DGeJXpLDtW0efXaweHPsliYVryBuSJaLgNhj8ueJ+6JKy7t3wpSDwYpulmbhqNW
NSWgUd/wrdlHgn/ETY4qgWt8Sgayq0OisvOsSRATczegvD98GFv2H6vSCRI4vQ9J
hnGd0tNngs4EKW+UMytrYy9t1Z86Q4EusEvBGlQBqewYynGRc/XhaC8TtcE0Zvmp
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354258906276626213162626427885545359630887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-24 09:51:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-22 09:51:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.panolawatchman.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22885848701256997013673951771525079862163327854641342310922380349351487729923380750293633300747459544827485335790802625060945515214571579292449232747097984608534070851372178917360970736927438027734186052061773424786458780908084573789368534615590382638773743913635622951043147167249111164093202146088149409013195818914045201899098594761473506621768923551710474597787098576895353190869453817223330962376079602911126643754580451251684423302530372386519016096069982488679222938200852155907842748923637111193523542606245241478384974190530178436490696553525818496274305631364547526106875958368998978650874597414532600670663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eaf4b8f1737ad29832994613cd8b8f9506238de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2768 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertisertribune.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnprior.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashland.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burlington.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessdirectory.triblive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feilding-rangitikei-herald.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestlake.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgetown.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalamazooshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'king.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakehouston.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.advertiser.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.airgunshooting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.angliaafloat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ansonrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bensonnews-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bentoncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bigspringherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bladenjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cityweekly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clintonnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coloradocommunitymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cranbrookherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.djournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elystandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.falmouthoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fauquier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fergusfallsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.frontiersman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.granthamjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hawaiitribune-herald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ipswichstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.janesvillemarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kemmerergazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kentnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kentweddingday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lebanondemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maconcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midweeknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muswellbrookchronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myheraldreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newtondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.omakchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ottawasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.panolawatchman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotweb.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinecitymn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinecountynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sachem.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sequoyahcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sierrasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.silverbelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sweetwaterreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the-messenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theabingtonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thecarrollnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thefloridavillager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesunchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.travelnewmex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.victoriaadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wapakdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whatsuppub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourdailyjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-ep.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-kr.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-ml.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamata-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskegonshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokaregion.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashvillemetro.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhomes.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northern-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northern-outlook.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orillia.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perth.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanmarcos.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarborough.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreview.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarland.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-nelson-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thornhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrancedaily.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'western-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017863dcbad3000004030047304502205e198547d73771612c71c26e3b365f1d172aa451c5af1f6c19fc218f83a12246022100bce792ecc2e4af87aeb506dc217122f3e0cda79f65a0eb2bb84915f54a602419007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017863dcbabf000004030046304402203b25583479d41a2a46db0e9322d2efa730dd6f2d231e59dded634e5c47cb3745022052537c3607dcc593d12fe1e528b40c2453a4679f99cc0eb0b3b09786ad633d2c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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