gray2.web.arc-cdn.net

Issued by R3

About this certificate

This digital certificate with serial number 04:34:be:d5:68:98:75:1c:a3:d9:5e:6b:9f:5d:f7:08:53:9b was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gray2.web.arc-cdn.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:be:d5:68:98:75:1c:a3:d9:5e:6b:9f:5d:f7:08:53:9b
Serial Number (int): 366397488206809312472497111799779631322011
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:42:86:6b:ae:67:e5:8c:db:3e:89:06:54:9c:f0:07:7f:b5:70:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6f:5b:59:b6:6e:03:54:56:25:62:91:56:af:e7:39:97:8c:5a:4f:c4
Fingerprint (sha256): 0a:4e:e2:67:67:cb:92:be:ba:f7:76:d3:73:56:60:e7:bd:af:be:0c:7a:0a:c4:58:14:bc:f9:6b:b4:72:a7:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gray2.web.arc-cdn.net

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gray2.web.arc-cdn.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

13abc.com
alaskanewssource.com
alaskasnewssource.com
blackhillsfox.com
catchitkansas.com
dakotanewsnow.com
dakotanewsnow.tv
gray2.web.arc-cdn.net
graydc.com
greathealthdivide.com
kath.tv
kathtv.com
kcwy13.com
kdlt.com
kevn.com
kfyrtv.com
kgwn.tv
kjct8.com
kkco11news.com
kktv.com
kktv11news.com
kotatv.com
ksct.tv
ksfy.com
ktuu.com
ktva.com
kwch.com
kxdf.tv
ky3.com
m.walb.com
m.wtoc.com
nbc11news.com
tvtv.com
uppermichiganssource.com
valleynewslive.com
wabi.tv
wagmtv.com
walb.com
wcax.com
webcenter11.com
webcenterfairbanks.com
wilx.com
wluctv6.com
wndu.com
wowt.com
wtoc.com
www.13abc.com
www.alaskanewssource.com
www.alaskasnewssource.com
www.blackhillsfox.com
www.catchitkansas.com
www.dakotanewsnow.com
www.dakotanewsnow.tv
www.graydc.com
www.greathealthdivide.com
www.kath.tv
www.kathtv.com
www.kcwy13.com
www.kdlt.com
www.kevn.com
www.kfyrtv.com
www.kgwn.tv
www.kjct8.com
www.kkco11news.com
www.kktv.com
www.kktv11news.com
www.kotatv.com
www.ksct.tv
www.ksfy.com
www.kspr.com
www.ktuu.com
www.ktva.com
www.kwch.com
www.kxdf.tv
www.ky3.com
www.nbc11news.com
www.tvtv.com
www.uppermichiganssource.com
www.valleynewslive.com
www.wabi.tv
www.wagmtv.com
www.walb.com
www.wcax.com
www.webcenter11.com
www.webcenterfairbanks.com
www.wilx.com
www.wluctv6.com
www.wndu.com
www.wowt.com
www.wtoc.com
www.wyomingnewsnow.com
www.wyomingnewsnow.tv
wyomingnewsnow.com
wyomingnewsnow.tv

Other certificates including the domain name arc-cdn.net

(limited to 100 certificates)
arcmarketing.web.arc-cdn.net
metroworldnews.web.arc-cdn.net
thenational.web.arc-cdn.net
octane.web.arc-cdn.net
gray5.web.arc-cdn.net
prisaradioco.web.arc-cdn.net
radiomitre.web.arc-cdn.net
avalonbay.web.arc-cdn.net
prisaradiomx.web.arc-cdn.net
culturacolectiva.web.arc-cdn.net
elfinanciero.web.arc-cdn.net
archetype.web.arc-cdn.net
ipmgroup2.web.arc-cdn.net
coindesk.web.arc-cdn.net
avalonbay.web.arc-cdn.net
cmg.web.arc-cdn.net
ipmgroup2.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
newr7.web.arc-cdn.net
gray2.web.arc-cdn.net
lanacionpy.web.arc-cdn.net
diarioas.web.arc-cdn.net
coindesk.api.arc-cdn.net
lanacionar.web.arc-cdn.net
avalonbay.web.arc-cdn.net
larazon.api.arc-cdn.net
grupoclarin.web.arc-cdn.net
diarioas.api.arc-cdn.net
rtl.web.arc-cdn.net
radiomitre.web.arc-cdn.net
gray2.web.arc-cdn.net
coindeskdev2.web.arc-cdn.net
irishtimes.web.arc-cdn.net
elcomercio.web.arc-cdn.net
coxohio.web.arc-cdn.net
shawmedia.web.arc-cdn.net
opb.web.arc-cdn.net
coindesk.web.arc-cdn.net
grupoclarin.web.arc-cdn.net
mna.web.arc-cdn.net
cmg2.web.arc-cdn.net
culturacolectiva.web.arc-cdn.net
artear.web.arc-cdn.net
ipmgroup2.web.arc-cdn.net
diarioas.web.arc-cdn.net
pmn.web.arc-cdn.net
mentormedier.web.arc-cdn.net
prisa.web.arc-cdn.net
advancelocal.web.arc-cdn.net
elcomercio.web.arc-cdn.net
prisaradiolos40.web.arc-cdn.net
elespectador.web.arc-cdn.net
prisaradioco.web.arc-cdn.net
web.arc-cdn.net
eluniverso.web.arc-cdn.net
gray4.web.arc-cdn.net
octane.web.arc-cdn.net
cmg2.web.arc-cdn.net
mna.web.arc-cdn.net
octane.web.arc-cdn.net
gmg.web.arc-cdn.net
ajc.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
tgam.web.arc-cdn.net
avalonbay.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
sfr.web.arc-cdn.net
elcomercio.web.arc-cdn.net
coindeskuat.api.arc-cdn.net
elfinanciero.web.arc-cdn.net
tbt.web.arc-cdn.net
tronc.api.arc-cdn.net
cmg2.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
cmg.web.arc-cdn.net
mna.web.arc-cdn.net
ajc.web.arc-cdn.net
archetype.web.arc-cdn.net
coindeskdev1.web.arc-cdn.net
avalonbay.web.arc-cdn.net
avalonbay.web.arc-cdn.net
spectator.web.arc-cdn.net
leparisien.web.arc-cdn.net
cmg.web.arc-cdn.net
lexpress.web.arc-cdn.net
prisaradioco.web.arc-cdn.net
gray2.web.arc-cdn.net
gray4.web.arc-cdn.net
avalonbay.web.arc-cdn.net
metroworldnews.web.arc-cdn.net
raycom.web.arc-cdn.net
thenational.web.arc-cdn.net
advancelocalthemes.web.arc-cdn.net
gfrmedia.web.arc-cdn.net
arcmarketing.web.arc-cdn.net
copesa.api.arc-cdn.net
elfinanciero.web.arc-cdn.net
civicnewscompany.web.arc-cdn.net
elcomercio.web.arc-cdn.net
lexpress.web.arc-cdn.net

Certificate

The complete raw certificate details for gray2.web.arc-cdn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK4TCCCcmgAwIBAgISBDS+1WiYdRyj2V5rn133CFObMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MjkxMTEwMzVaFw0yMzA4MjcxMTEwMzRaMCAxHjAcBgNVBAMT
FWdyYXkyLndlYi5hcmMtY2RuLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAMcto/9Fn5iFUrWDxFjmccP3KAaZdJ2DXT7Ckc16F7rwNv+WEhs2wjNI
4GG8JxgYaZBig3ECsLJvm8ZhkM9OZxLfMfWUGT/0YUkHfH+Dl6eHmQqNE+E2v25B
/Y6/GrjCVDQyJ5AFGajVZY45xE1X/O33xnUWGgpjG+v69Y5DQTlKJgf1CMYGxkYm
7t4bGkot19afsobax5F0biH0Raewvhq4QUv+HWHUamINahTS35liPuevy90Zl0Cm
SrK3/VNo34uBipuE6+sVdnPfSGJ8lAxY+mW7/cSYHbr7jX/xmKb7+CqgL4ctwlaY
plIN+JWLC/ro4Lh8TaixIkifV//738kCAwEAAaOCCAEwggf9MA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUCEKGa65n5YzbPokGVJzwB3+1cEgwHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wggXQBgNVHREEggXHMIIFw4IJMTNhYmMuY29tghRhbGFza2FuZXdz
c291cmNlLmNvbYIVYWxhc2thc25ld3Nzb3VyY2UuY29tghFibGFja2hpbGxzZm94
LmNvbYIRY2F0Y2hpdGthbnNhcy5jb22CEWRha290YW5ld3Nub3cuY29tghBkYWtv
dGFuZXdzbm93LnR2ghVncmF5Mi53ZWIuYXJjLWNkbi5uZXSCCmdyYXlkYy5jb22C
FWdyZWF0aGVhbHRoZGl2aWRlLmNvbYIHa2F0aC50doIKa2F0aHR2LmNvbYIKa2N3
eTEzLmNvbYIIa2RsdC5jb22CCGtldm4uY29tggprZnlydHYuY29tggdrZ3duLnR2
gglramN0OC5jb22CDmtrY28xMW5ld3MuY29tgghra3R2LmNvbYIOa2t0djExbmV3
cy5jb22CCmtvdGF0di5jb22CB2tzY3QudHaCCGtzZnkuY29tgghrdHV1LmNvbYII
a3R2YS5jb22CCGt3Y2guY29tggdreGRmLnR2ggdreTMuY29tggptLndhbGIuY29t
ggptLnd0b2MuY29tgg1uYmMxMW5ld3MuY29tggh0dnR2LmNvbYIYdXBwZXJtaWNo
aWdhbnNzb3VyY2UuY29tghJ2YWxsZXluZXdzbGl2ZS5jb22CB3dhYmkudHaCCndh
Z210di5jb22CCHdhbGIuY29tggh3Y2F4LmNvbYIPd2ViY2VudGVyMTEuY29tghZ3
ZWJjZW50ZXJmYWlyYmFua3MuY29tggh3aWx4LmNvbYILd2x1Y3R2Ni5jb22CCHdu
ZHUuY29tggh3b3d0LmNvbYIId3RvYy5jb22CDXd3dy4xM2FiYy5jb22CGHd3dy5h
bGFza2FuZXdzc291cmNlLmNvbYIZd3d3LmFsYXNrYXNuZXdzc291cmNlLmNvbYIV
d3d3LmJsYWNraGlsbHNmb3guY29tghV3d3cuY2F0Y2hpdGthbnNhcy5jb22CFXd3
dy5kYWtvdGFuZXdzbm93LmNvbYIUd3d3LmRha290YW5ld3Nub3cudHaCDnd3dy5n
cmF5ZGMuY29tghl3d3cuZ3JlYXRoZWFsdGhkaXZpZGUuY29tggt3d3cua2F0aC50
doIOd3d3LmthdGh0di5jb22CDnd3dy5rY3d5MTMuY29tggx3d3cua2RsdC5jb22C
DHd3dy5rZXZuLmNvbYIOd3d3LmtmeXJ0di5jb22CC3d3dy5rZ3duLnR2gg13d3cu
a2pjdDguY29tghJ3d3cua2tjbzExbmV3cy5jb22CDHd3dy5ra3R2LmNvbYISd3d3
LmtrdHYxMW5ld3MuY29tgg53d3cua290YXR2LmNvbYILd3d3LmtzY3QudHaCDHd3
dy5rc2Z5LmNvbYIMd3d3LmtzcHIuY29tggx3d3cua3R1dS5jb22CDHd3dy5rdHZh
LmNvbYIMd3d3Lmt3Y2guY29tggt3d3cua3hkZi50doILd3d3Lmt5My5jb22CEXd3
dy5uYmMxMW5ld3MuY29tggx3d3cudHZ0di5jb22CHHd3dy51cHBlcm1pY2hpZ2Fu
c3NvdXJjZS5jb22CFnd3dy52YWxsZXluZXdzbGl2ZS5jb22CC3d3dy53YWJpLnR2
gg53d3cud2FnbXR2LmNvbYIMd3d3LndhbGIuY29tggx3d3cud2NheC5jb22CE3d3
dy53ZWJjZW50ZXIxMS5jb22CGnd3dy53ZWJjZW50ZXJmYWlyYmFua3MuY29tggx3
d3cud2lseC5jb22CD3d3dy53bHVjdHY2LmNvbYIMd3d3LnduZHUuY29tggx3d3cu
d293dC5jb22CDHd3dy53dG9jLmNvbYIWd3d3Lnd5b21pbmduZXdzbm93LmNvbYIV
d3d3Lnd5b21pbmduZXdzbm93LnR2ghJ3eW9taW5nbmV3c25vdy5jb22CEXd5b21p
bmduZXdzbm93LnR2MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK
KwYBBAHWeQIEAgSB9ASB8QDvAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0J
gSXttJkAAAGIZ2rZqQAABAMARzBFAiEA7HKzUu3p3x91DbKnrPXPOBipBIZTKTQB
0YibJtCMQlkCIElScbwJ2Krp16FmPSGTbTKMU1h6xD/wHA86sYYBYuXXAHUAejKM
VNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGIZ2rZtgAABAMARjBEAiBD
EO1Ye5+iUHN8k84D9m9Wn4TXdM9Cqb9erp/A9s13YAIgWq1oiOs++54pxY2jGePo
e9czKV+qB1zGCqwwq/aI6b4wDQYJKoZIhvcNAQELBQADggEBACzpAzWrFMExfatC
VT7hK/eN3P3+anMWGee2dbL5akQaEyqM0P6SL3zX4JvspR2AfKtMb1W3pf3/g04f
wVV2FjZIzdqFRzpNhwggc3/YgG2NAaTcuK1btV3UAfeEpItFUXNGabtYFVGvKN3p
7k/6NK4qo8YzsJIp/ZUHk3PbATRNuNrx8X/j9uLUI01AvOfAA+2rnqV0l3k8vkH8
SS9n83oLOT5qwq73vRtlXsWNvoYjyQZxb2HA8+gl70CbrGzoHu0jkoLmbo9S7qGP
1KeGlpXa3IaQLcM8hpTY8tBN69l8tOOBnqY6XYpwIX9wFLpvBs9hrLN0kFrF5pwg
FmecE+M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy2j/0WfmIVStYPEWOZx
w/coBpl0nYNdPsKRzXoXuvA2/5YSGzbCM0jgYbwnGBhpkGKDcQKwsm+bxmGQz05n
Et8x9ZQZP/RhSQd8f4OXp4eZCo0T4Ta/bkH9jr8auMJUNDInkAUZqNVljjnETVf8
7ffGdRYaCmMb6/r1jkNBOUomB/UIxgbGRibu3hsaSi3X1p+yhtrHkXRuIfRFp7C+
GrhBS/4dYdRqYg1qFNLfmWI+56/L3RmXQKZKsrf9U2jfi4GKm4Tr6xV2c99IYnyU
DFj6Zbv9xJgduvuNf/GYpvv4KqAvhy3CVpimUg34lYsL+ujguHxNqLEiSJ9X//vf
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366397488206809312472497111799779631322011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 11:10:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-27 11:10:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gray2.web.arc-cdn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25143928913773875121175739683350990107287073007663831605091697962266570001975741676806468999366409762384446867500153406330425654730843801162476062145711546014127840962999243513707416113518846391180699921851380986368107362406791960158721924622985035763764675856776122389602579847124551881202791490490688180844136493775879584276961167377075894416246782327806120741725495571325239421628383280362601494897160345874674391508839560618515559102023507969323962115682074943738567065631782112737548131761878093122672545125977774095731549246246666626656693841492401664613850249608511878205656219357892243979886083749108577460169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0842866bae67e58cdb3e8906549cf0077fb57048
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1479 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '13abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskanewssource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskasnewssource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackhillsfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catchitkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakotanewsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakotanewsnow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gray2.web.arc-cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graydc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greathealthdivide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kath.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcwy13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdlt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfyrtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgwn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjct8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkco11news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kktv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kktv11news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kotatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksct.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kxdf.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ky3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.walb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.wtoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbc11news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uppermichiganssource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleynewslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wabi.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcenter11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcenterfairbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wluctv6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wndu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.13abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alaskanewssource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alaskasnewssource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackhillsfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchitkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dakotanewsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dakotanewsnow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graydc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greathealthdivide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kath.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kathtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcwy13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdlt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kfyrtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kgwn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjct8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kkco11news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kktv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kktv11news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kotatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ksct.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ksfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kspr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ktuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ktva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kxdf.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ky3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbc11news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uppermichiganssource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleynewslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wabi.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wagmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wcax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webcenter11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webcenterfairbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wluctv6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wndu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wowt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingnewsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingnewsnow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingnewsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingnewsnow.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188676ad9a90000040300473045022100ec72b352ede9df1f750db2a7acf5cf3818a9048653293401d1889b26d08c42590220495271bc09d8aae9d7a1663d21936d328c53587ac43ff01c0f3ab1860162e5d70075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188676ad9b6000004030046304402204310ed587b9fa250737c93ce03f66f569f84d774cf42a9bf5eae9fc0f6cd776002205aad6888eb3efb9e29c58da319e3e87bd733295faa075cc60aac30abf688e9be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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