flyertown.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:8e:12:5d:f0:18:48:e8:cb:70:96:e0:be:b2:ef:73:2e was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flyertown.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:8e:12:5d:f0:18:48:e8:cb:70:96:e0:be:b2:ef:73:2e
Serial Number (int): 265268809573442342644083814316945196413742
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:de:5f:5f:bc:13:b4:f7:95:1c:83:d3:16:a9:a4:74:ba:b1:5b:12
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:3d:47:f0:d0:99:f4:84:ee:ff:59:2a:a3:4b:d9:aa:de:2f:a9:dc
Fingerprint (sha256): 08:d2:06:2e:19:77:c7:88:52:58:21:5b:49:4d:1c:7e:fc:8d:91:8b:b2:aa:42:03:10:e6:ef:bd:61:89:32:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flyertown.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flyertown.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

circulars.lakeoconeebreeze.net
circulars.lcsun-news.com
circulars.lehighvalleylive.com
circulars.limaohio.com
circulars.lincolnnewsmessenger.com
circulars.ljworld.com
circulars.loganbanner.com
circulars.macombdaily.com
circulars.madison-press.com
circulars.mainlinemedianews.com
circulars.middlesborodailynews.com
circulars.middletownpress.com
circulars.mlive.com
circulars.montgomery-herald.com
circulars.mooreamerican.com
circulars.mooresvilleweekly.com
circulars.morrowcountysentinel.com
circulars.mtairynews.com
circulars.mydailysentinel.com
circulars.mydallaspost.com
circulars.myfox8.com
circulars.mywebtimes.com
circulars.newberryobserver.com
circulars.news-herald.com
circulars.newsaegis.com
circulars.newsdemocratleader.com
circulars.nhregister.com
circulars.nj.com
circulars.njeffersonnews.com
circulars.nola.com
circulars.observer-reporter.com
circulars.ocregister.com
circulars.ocvarsity.com
circulars.oneidadispatch.com
circulars.onmilwaukee.com
circulars.orangecounty.com
circulars.orangeleader.com
circulars.oregonlive.com
circulars.panews.com
circulars.petaluma360.com
circulars.phoenixvillenews.com
circulars.pickenssentinel.com
circulars.pigglywigglystores.com
circulars.portsmouth-dailytimes.com
circulars.pottsmerc.com
circulars.pressdemocrat.com
circulars.psdispatch.com
circulars.ptonline.net
circulars.recordherald.com
circulars.redwoodtimes.com
circulars.reformer.com
circulars.registerherald.com
circulars.reporterherald.com
circulars.reviewtimes.com
circulars.robesonian.com
circulars.rockwallheraldbanner.com
circulars.roysecityheraldbanner.com
circulars.saratogian.com
circulars.sedaliademocrat.com
circulars.sentinel-echo.com
circulars.sentinelandenterprise.com
circulars.shawneedispatch.com
circulars.sonomanews.com
circulars.standard.net
circulars.stgeorgeutah.com
circulars.suntimes.com
circulars.swantonenterprise.com
circulars.sylvaniatelephone.com
circulars.tdn-net.com
circulars.thecarrollnews.com
circulars.thecourier.com
circulars.thedailyclutch.com
circulars.thedailymeal.com
circulars.theeasleyprogress.com
circulars.thekitchn.com
circulars.thelandonline.com
circulars.theloomisnews.com
circulars.themorningsun.com
circulars.thenewsherald.com
circulars.thepeoplesentinel.com
circulars.thepresstribune.com
circulars.thepublicopinion.com
circulars.thereporteronline.com
circulars.thonline.com
circulars.timescall.com
circulars.timesherald.com
circulars.timesleader.com
circulars.trentonian.com
circulars.troyrecord.com
circulars.unidossc.com
circulars.uniondailytimes.com
circulars.urbanacitizen.com
circulars.vandaliadrummernews.com
circulars.wcoutlook.com
circulars.wdbj7.com
circulars.week.com
circulars.weeklyrecordherald.com
circulars.willitsnews.com
flyertown.ca

Other certificates including the domain name flyertown.ca

(limited to 100 certificates)
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
feeds.flyertown.ca
flyertown.ca
api.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
editorials.circularhub.com
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
api.flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca

Certificate

The complete raw certificate details for flyertown.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41Y1uuk2kVEDEvIEbTMo
b0Zg3ViwLBdNCURWEsoJDVyjlekflIwsbYTWepAEaA/lCSs5b6FHp0t05WdW4gHQ
tKSC00qasVTZg0ixputIHwOT4N4KAp6E25aV6P5+OUB9DDpc6QIDucmTA4RLVYH/
VotXKNfyaQxNmXYG/vbtwR4ci1WJ97PDOjNzsKyTOYmU8k0l3ROkji6x79iztaQt
Z/4Gv3sNeGW0duXYeP9wmVw0bo7Qim1Njc7svLWYm1KwVTryD//H2jjfnMqjFTtU
JeXk1bDb95888XgV+1yY1QUDJ5HWNEo0k3vQaxSsVFppna43AGBfMf57BD89gXiL
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265268809573442342644083814316945196413742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 21:39:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 21:39:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flyertown.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28698606905175247474862305708452512620139574449602144627783362128837907509663992738371700146264863908167137016949032743568396408143660586587097107220661018519096075077178907374968031050278157585220478261784534511164702994579358064180805687464244594517394334556346402159803401351881053505678265255302673408059899022261425277886745565568441082462854599998324237889986351395226897155876605348968671095387840809338700697015740690589435344857172557169756485759565066115465490730157832547922549002382910487391732142851771519337458250321332630577710266180075840920294604816532049426374662957459702029705513668243167500602151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88de5f5fbc13b4f7951c83d316a9a474bab15b12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2810 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.lakeoconeebreeze.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.lcsun-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.lehighvalleylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.limaohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.lincolnnewsmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.ljworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.loganbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.macombdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.madison-press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.mainlinemedianews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.middlesborodailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.middletownpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.montgomery-herald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.mooreamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.mooresvilleweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.morrowcountysentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.mtairynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.mydailysentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.mydallaspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.myfox8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.mywebtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.newberryobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.news-herald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.newsaegis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.newsdemocratleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.nhregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.njeffersonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.observer-reporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.ocregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.ocvarsity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.oneidadispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.onmilwaukee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.orangecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.orangeleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.panews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.petaluma360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.phoenixvillenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.pickenssentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.pigglywigglystores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.portsmouth-dailytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.pottsmerc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.pressdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.psdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.ptonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.recordherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.redwoodtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.reformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.registerherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.reporterherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.reviewtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.robesonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.rockwallheraldbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.roysecityheraldbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.saratogian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.sedaliademocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.sentinel-echo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.sentinelandenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.shawneedispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.sonomanews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.standard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.stgeorgeutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.suntimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.swantonenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.sylvaniatelephone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.tdn-net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thecarrollnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thecourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thedailyclutch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thedailymeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.theeasleyprogress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thekitchn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thelandonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.theloomisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.themorningsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thenewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thepeoplesentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thepresstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thepublicopinion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thereporteronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.thonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.timescall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.timesherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.timesleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.trentonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.troyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.unidossc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.uniondailytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.urbanacitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.vandaliadrummernews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wcoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wdbj7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.week.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.weeklyrecordherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.willitsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyertown.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170a28debf90000040300473045022100c740d73110378ff6fb1a379e2cadd2c7f54c4e786a3cf5a3d86f84bd264a066902202f566dbc59353f13b74b9c072f599587585c20729773c342226ae2fd3bd0dfe500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a28dec51000004030047304502206874fb0c62477e8b875bf91352d1b6649e052425724bc71d23d1649dccc662da0221009da6f7509ffd9fbf82749fcee0b33be49e774d92e5989e83b42f9fdf34ee96b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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