legacy.denverpost.com

Issued by WR3

About this certificate

This digital certificate with serial number 1a:dd:78:26:d9:c3:8c:c5:09:75:78:cd:a3:22:63:83 was issued on by Google Trust Services.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=legacy.denverpost.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 1a:dd:78:26:d9:c3:8c:c5:09:75:78:cd:a3:22:63:83
Serial Number (int): 35709862463361275775954426097544881027
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 7a:a6:31:15:8e:c8:d9:ae:69:da:91:63:1f:aa:2e:78:57:33:14:07
AuthorityKeyId: c7:81:f5:fd:8e:88:d9:00:3c:4d:63:a2:50:31:24:a0:ce:23:fe:23

Fingerprint (sha1): 54:07:82:33:ce:b4:2e:79:20:05:cb:2d:a1:25:13:93:8a:89:58:30
Fingerprint (sha256): 07:84:c4:b6:f1:09:c9:17:44:da:0f:5b:ec:da:36:79:8d:22:fe:d8:44:e5:60:2e:61:f4:75:4d:b0:8b:5f:53

Issuing Certificate URL: http://i.pki.goog/wr3.crt

Revocation information

OCSP Server: http://o.pki.goog/s/wr3/Gt0
CRL Distribution Point: http://c.pki.goog/wr3/aQd59BNjD5A.crl

Check the revocation status for certificate legacy.denverpost.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.denverpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legacy.denverpost.com
mobileobits.advocate-news.com
obituaries.advocate-news.com
mobileobits.gazettes.com
obituaries.gazettes.com
mobileobits.mendocinobeacon.com
obituaries.mendocinobeacon.com
obituaries.nydailynews.com
obits.ocregister.com
obituaries.pilotonline.com
mobileobits.pvnews.com
obituaries.pvnews.com
dailytribune.rememberingmi.us
grandtraverse.rememberingmi.us
macombdaily.rememberingmi.us
morningstarpublishing.rememberingmi.us
sourcenewspapers.rememberingmi.us
theleader.rememberingmi.us
themorningsun.rememberingmi.us
theoaklandpress.rememberingmi.us
voicenews.rememberingmi.us
trentonian.rememberingnj.us
dailyfreeman.rememberingny.us
oneidadispatch.rememberingny.us
saratogian.rememberingny.us
troyrecord.rememberingny.us
morningjournal.rememberingoh.us
news-herald.rememberingoh.us
berksmontnews.rememberingpa.us
buckslocalnews.rememberingpa.us
dailylocal.rememberingpa.us
delconewsnetwork.rememberingpa.us
delcotimes.rememberingpa.us
mainlinemedianews.rememberingpa.us
montgomerynews.rememberingpa.us
phoenixvillenews.rememberingpa.us
pottsmerc.rememberingpa.us
southernchestercountyweeklies.rememberingpa.us
southjerseylocalnews.rememberingpa.us
thereporteronline.rememberingpa.us
timesherald.rememberingpa.us
obituaries.tbrnews.com
membership.mcall.com
chicagomag.com
insidebiz.com
www.insidebiz.com
membership.sun-sentinel.com
membership.orlandosentinel.com
membership.pilotonline.com
membership.dailypress.com
membership.courant.com
membership.nydailynews.com
classified.orlandosentinel.com
membership.baltimoresun.com
membership.capitalgazette.com
membership.chicagotribune.com
openhomes.delmartimes.net
openhomes.lajollalight.com
openhomes.encinitasadvocate.com
openhomes.pomeradonews.com
openhomes.ramonasentinel.com
openhomes.ranchosantafereview.com
myappstest.tribpub.com
statsdigital.com
myapps.tribpub.com
marketplace.baltimoresun.com
askingeric.com
www.askingeric.com
cportal.medianewsgroup.com
cportal-remote.medianewsgroup.com
placeanad.sandiegouniontribune.com
www.statsdigital.com
sdfestivalofbooks.com
www.sdfestivalofbooks.com
placeanad.utcommunitypress.com

Other certificates including the domain name denverpost.com

(limited to 100 certificates)
cdn-le4.arkadiumhosted.com
myaccount.mercurynews.com
dns-vetting1-jeffg-noah.map.fastly.net
denverpost.com
dns-vetting1m.map.fastly.net
jobs.bayareanewsgroup.com
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
dns-vetting1h.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1j.map.fastly.net
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
jobs.bayareanewsgroup.com
cdn-le4.arkadiumhosted.com
dfm.map.fastly.net
jobs.bayareanewsgroup.com
ads.denverpost.com
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1i.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
legacy.denverpost.com
twp.denverpost.com
dns-vetting1m.map.fastly.net
mylocal.denverpost.com
vpn.medianewsgroup.com
jobs.bayareanewsgroup.com
dfm.map.fastly.net
twp.denverpost.com
test.checkout.mercurynews.com
hiring.wandtv.com
test.myaccount.mercurynews.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
dfm.map.fastly.net
dev.myaccount.mercurynews.com
dns-vetting1m.map.fastly.net
promote.denverpost.com
businessdirectory.denverpost.com
blogs.denverpost.com
twp.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
ads.denverpost.com
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
jobs.bayareanewsgroup.com
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
denverpost.com
dptv.denverpost.com
dns-vetting1a.map.fastly.net
twp.denverpost.com
twp.denverpost.com
dfm.map.fastly.net
dfm.map.fastly.net
dfm.map.fastly.net
hiring.wandtv.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
games.denverpost.com
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
mg2access.mercurynews.com
hiring.wandtv.com
businessdirectory.denverpost.com
ssl.smugmug.com
dns-vetting1a.map.fastly.net
secure.www.denverpost.com
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
uploads.denverpost.com
ssl.smugmug.com

Certificate

The complete raw certificate details for legacy.denverpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowXLRTKtTislZrIhjEkU
axX69ax/VKbg8tjEUXTFPdo9ZMLhjLeical0nkA0VKBqTLO/e2DXtAYSm+d3vFhw
5Pezb4jtXJFGd95pI7+0H0S26LjxkRdExV0ppmGeKFkCLPwvBpLuhvxnZsCBpa4g
l1JQIcTXrEiWKgm816XZmly7nyLLC9iY00MxUCSlYukRquEJdOrw4K0/ScD9s5RR
4jKql8a7AlhzODJ4KbHxAT1KTKPgY69d9a6VZcpuc7a/0iU9T/ph7DIQa87gacVD
WJnJAZT0nD4GqdAnyNXWDHuZSKBF7d99uwCZqCbeJlgKF5iYafj2g6nugP4RC9nb
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35709862463361275775954426097544881027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 21:35:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-08 22:20:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.denverpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20579700849498210345650170129498374833845512232600982559110686332071258027600182178247037859236468660026219721387503126822171169613996914575340489845188077644303148707357497569690386725626559268562015992012268727914606790249803834172216797027325294921885880241345405551766790954873974698761645108706750108336399586364865280202306071147515475116214796306164041684821634855562456111520677903594047705635606806295450532261847364862501000622357830798177253551776591848081767334669619077948809195308929197280387891538943476653787386216242793747364929110993819369827233616222344026170051588245817166925724277582946853575547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7aa631158ec8d9ae69da91631faa2e7857331407
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c781f5fd8e88d9003c4d63a2503124a0ce23fe23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr3/Gt0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.advocate-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.advocate-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.gazettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.gazettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.mendocinobeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.mendocinobeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obits.ocregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.pvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytribune.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandtraverse.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macombdaily.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstarpublishing.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcenewspapers.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theleader.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themorningsun.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoaklandpress.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicenews.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trentonian.rememberingnj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyfreeman.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneidadispatch.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogian.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troyrecord.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningjournal.rememberingoh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-herald.rememberingoh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berksmontnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckslocalnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailylocal.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delconewsnetwork.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delcotimes.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlinemedianews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montgomerynews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixvillenews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottsmerc.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernchestercountyweeklies.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southjerseylocalnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereporteronline.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesherald.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.tbrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagomag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.delmartimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.lajollalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.encinitasadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.pomeradonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ramonasentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ranchosantafereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myappstest.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myapps.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askingeric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askingeric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal.medianewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal-remote.medianewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeanad.sandiegouniontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdfestivalofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdfestivalofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeanad.utcommunitypress.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr3/aQd59BNjD5A.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000190044b1306000004030046304402200aa3e953820600b43d123e00e2568f04f80978ad08f501aecf1e62d05d338f4902203f42aecb2ed99b4e6dada43003ebadc0cd74209e47ec66b461aac0191d0005340076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca00000190044b136f000004030047304502203db59014bdf99b87f4d9f18202e57ea4f4878b34405b7829201d3cdd3a0d6dc30221009c5a8825158949c27d1e8670eccd092cf90e24ae41602c446511e0df27b3ab7b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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