sp.usatoday.com
Issued by R3
About this certificate
This digital certificate with serial number 04:b1:93:35:fa:8d:e4:e6:d6:e6:70:6d:04:09:85:14:2f:b5 was issued on by Let's Encrypt.
With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sp.usatoday.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b1:93:35:fa:8d:e4:e6:d6:e6:70:6d:04:09:85:14:2f:b5Serial Number (int): 408874799461005393076138010514403148181429
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b3:c9:4d:94:04:a4:de:52:88:52:76:fe:2f:c9:f9:9c:3d:7b:68:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 1e:61:a8:fc:0f:4a:8d:a5:91:35:28:b7:ba:cd:66:d8:da:29:2a:22
Fingerprint (sha256): 0a:66:2a:14:e1:f3:f3:13:b2:8b:7b:3f:17:f1:b6:0b:0c:c2:9d:1a:dd:13:26:04:99:a5:28:61:f4:4f:e3:b3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sp.usatoday.com
48
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sp.usatoday.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sp.ardmoreite.com
sp.news-star.com
sp.postcrescent.com
sp.poughkeepsiejournal.com
sp.press-citizen.com
sp.pressconnects.com
sp.publicopiniononline.com
sp.pushsquare.com
sp.recordonline.com
sp.redding.com
sp.reporternews.com
sp.rgj.com
sp.ruidosonews.com
sp.scsun-news.com
sp.sctimes.com
sp.sheboyganpress.com
sp.shreveporttimes.com
sp.stargazette.com
sp.statesmanjournal.com
sp.stevenspointjournal.com
sp.tallahassee.com
sp.tcpalm.com
sp.tennessean.com
sp.theadvertiser.com
sp.thecalifornian.com
sp.thedailyjournal.com
sp.thegleaner.com
sp.theleafchronicle.com
sp.thenews-messenger.com
sp.thenewsstar.com
sp.thenorthwestern.com
sp.thespectrum.com
sp.thestarpress.com
sp.thetimesherald.com
sp.thetowntalk.com
sp.timesrecordnews.com
sp.todaysgolfer.co.uk
sp.upstateparent.com
sp.usatoday.com
sp.vcstar.com
sp.visaliatimesdelta.com
sp.wausaudailyherald.com
sp.wisconsinrapidstribune.com
sp.wisfarmer.com
sp.wunderground.com
sp.ydr.com
sp.yorkdispatch.com
sp.zanesvilletimesrecorder.com
sp.news-star.com
sp.postcrescent.com
sp.poughkeepsiejournal.com
sp.press-citizen.com
sp.pressconnects.com
sp.publicopiniononline.com
sp.pushsquare.com
sp.recordonline.com
sp.redding.com
sp.reporternews.com
sp.rgj.com
sp.ruidosonews.com
sp.scsun-news.com
sp.sctimes.com
sp.sheboyganpress.com
sp.shreveporttimes.com
sp.stargazette.com
sp.statesmanjournal.com
sp.stevenspointjournal.com
sp.tallahassee.com
sp.tcpalm.com
sp.tennessean.com
sp.theadvertiser.com
sp.thecalifornian.com
sp.thedailyjournal.com
sp.thegleaner.com
sp.theleafchronicle.com
sp.thenews-messenger.com
sp.thenewsstar.com
sp.thenorthwestern.com
sp.thespectrum.com
sp.thestarpress.com
sp.thetimesherald.com
sp.thetowntalk.com
sp.timesrecordnews.com
sp.todaysgolfer.co.uk
sp.upstateparent.com
sp.usatoday.com
sp.vcstar.com
sp.visaliatimesdelta.com
sp.wausaudailyherald.com
sp.wisconsinrapidstribune.com
sp.wisfarmer.com
sp.wunderground.com
sp.ydr.com
sp.yorkdispatch.com
sp.zanesvilletimesrecorder.com
Other certificates including the domain name usatoday.com
(limited to 100 certificates)
ydr.com
gannett.com
ugaforum.usatoday.com
gannett.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
hoosiertimes.com
columbiatribune.com
amestrib.com
southernkitchen.com
golftips.golfweek.usatoday.com
recordnet.com
echo-pilot.com
reporternews.com
gadsdentimes.com
*.scsun-news.com
the-daily-record.com
*.usatodaynetwork.com
chiefsforum.usatoday.com
the-review.com
examiner-enterprise.com
coloradoan.com
dnj.com
mycentraljersey.com
journalstandard.com
gannett.com
tcpalm.com
cantondailyledger.com
siskiyoudaily.com
coloradoan.com
tricountyindependent.com
*.gannett.com
secure17.nexternal.com
adelnews.com
sussexcountian.com
reviewatlas.com
jobs.thejobnetwork.com
news-press.com
providencejournal.com
scsuntimes.com
games.usatoday.com
hollandsentinel.com
marionstar.com
mt-edge-b.3scale.net
classroom.synonym.com
savannahnow.com
gannett.com
san-005.ceros.com
dnj.com
paris-express.com
gannett.com
patriotledger.com
dailyamerican.com
progress-index.com
cdn-le5.arkadiumhosted.com
*.scsun-news.com
secure12.nexternal.com
mtshastanews.com
delawareonline.com
journalstandard.com
rgj.com
databases.floridatoday.com
giantsforum.usatoday.com
secure17.nexternal.com
draftwire.usatoday.com
ftw.usatoday.com
gannett.com
wickedlocal.com
br.bikeradar.com
the-leader.com
sentinel-standard.com
ydr.com
wickedlocal.com
ndinsider.com
gannett.com
newarkadvocate.com
billswire.usatoday.com
gannett.com
blackmountainnews.com
cdn-le4.arkadiumhosted.com
*.gannett.com
mortontimesnews.com
celticswire.usatoday.com
gosanangelo.com
marionstar.com
duckswire.usatoday.com
getcreative.usatoday.com
chillicothetimesbulletin.com
gainesville.com
timesonline.com
cdn-le4.arkadiumhosted.com
gannett.com
gannett.com
hockessincommunitynews.com
lebronwire.usatoday.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
gannett.com
ruidosonews.com
fightingirishforum.usatoday.com
gannett.com
ugaforum.usatoday.com
gannett.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
hoosiertimes.com
columbiatribune.com
amestrib.com
southernkitchen.com
golftips.golfweek.usatoday.com
recordnet.com
echo-pilot.com
reporternews.com
gadsdentimes.com
*.scsun-news.com
the-daily-record.com
*.usatodaynetwork.com
chiefsforum.usatoday.com
the-review.com
examiner-enterprise.com
coloradoan.com
dnj.com
mycentraljersey.com
journalstandard.com
gannett.com
tcpalm.com
cantondailyledger.com
siskiyoudaily.com
coloradoan.com
tricountyindependent.com
*.gannett.com
secure17.nexternal.com
adelnews.com
sussexcountian.com
reviewatlas.com
jobs.thejobnetwork.com
news-press.com
providencejournal.com
scsuntimes.com
games.usatoday.com
hollandsentinel.com
marionstar.com
mt-edge-b.3scale.net
classroom.synonym.com
savannahnow.com
gannett.com
san-005.ceros.com
dnj.com
paris-express.com
gannett.com
patriotledger.com
dailyamerican.com
progress-index.com
cdn-le5.arkadiumhosted.com
*.scsun-news.com
secure12.nexternal.com
mtshastanews.com
delawareonline.com
journalstandard.com
rgj.com
databases.floridatoday.com
giantsforum.usatoday.com
secure17.nexternal.com
draftwire.usatoday.com
ftw.usatoday.com
gannett.com
wickedlocal.com
br.bikeradar.com
the-leader.com
sentinel-standard.com
ydr.com
wickedlocal.com
ndinsider.com
gannett.com
newarkadvocate.com
billswire.usatoday.com
gannett.com
blackmountainnews.com
cdn-le4.arkadiumhosted.com
*.gannett.com
mortontimesnews.com
celticswire.usatoday.com
gosanangelo.com
marionstar.com
duckswire.usatoday.com
getcreative.usatoday.com
chillicothetimesbulletin.com
gainesville.com
timesonline.com
cdn-le4.arkadiumhosted.com
gannett.com
gannett.com
hockessincommunitynews.com
lebronwire.usatoday.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
gannett.com
ruidosonews.com
fightingirishforum.usatoday.com
Certificate
The complete raw certificate details for sp.usatoday.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJIjCCCAqgAwIBAgISBLGTNfqN5ObW5nBtBAmFFC+1MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjAyMDgxNzA2MTRaFw0yMjA1MDkxNzA2MTNaMBoxGDAWBgNVBAMT D3NwLnVzYXRvZGF5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB APIau/ku2FwccBG2uh2FfbgWWHA7KxwakFjLW/SFf37tV7t/kJbz10jAmUciWacX btkUvgJ+FrOlOCjNlTMJxDF7TQufM0NvZZ8tyhzyvQJQ4dYP/hXdl1G8bOqavLao 1i1pfZuR2ANdBDukK09LRwbDiBXrWdwGk0fvwjIuGlkY11N0W0gAO2RET4R+jCGz xVIP8Ewk4PD8w+L2bzD0gWFKEEWAXTTsXTYHsd3MYKODKN+wt6rQyhXMOcSoDSVX OoXth+5KNQjZv2ptW4A0Tz2jxjK73tkqFqHePELGEiY8UyCRCCt/bY9l2uzDrC5j FrVvcBfWYfK9uYDjpLNKCzkCAwEAAaOCBkgwggZEMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUs8lNlASk3lKIUnb+L8n5nD17aKQwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wggQUBgNVHREEggQLMIIEB4IRc3AuYXJkbW9yZWl0ZS5jb22CEHNwLm5ld3Mt c3Rhci5jb22CE3NwLnBvc3RjcmVzY2VudC5jb22CGnNwLnBvdWdoa2VlcHNpZWpv dXJuYWwuY29tghRzcC5wcmVzcy1jaXRpemVuLmNvbYIUc3AucHJlc3Njb25uZWN0 cy5jb22CGnNwLnB1YmxpY29waW5pb25vbmxpbmUuY29tghFzcC5wdXNoc3F1YXJl LmNvbYITc3AucmVjb3Jkb25saW5lLmNvbYIOc3AucmVkZGluZy5jb22CE3NwLnJl cG9ydGVybmV3cy5jb22CCnNwLnJnai5jb22CEnNwLnJ1aWRvc29uZXdzLmNvbYIR c3Auc2NzdW4tbmV3cy5jb22CDnNwLnNjdGltZXMuY29tghVzcC5zaGVib3lnYW5w cmVzcy5jb22CFnNwLnNocmV2ZXBvcnR0aW1lcy5jb22CEnNwLnN0YXJnYXpldHRl LmNvbYIXc3Auc3RhdGVzbWFuam91cm5hbC5jb22CGnNwLnN0ZXZlbnNwb2ludGpv dXJuYWwuY29tghJzcC50YWxsYWhhc3NlZS5jb22CDXNwLnRjcGFsbS5jb22CEXNw LnRlbm5lc3NlYW4uY29tghRzcC50aGVhZHZlcnRpc2VyLmNvbYIVc3AudGhlY2Fs aWZvcm5pYW4uY29tghZzcC50aGVkYWlseWpvdXJuYWwuY29tghFzcC50aGVnbGVh bmVyLmNvbYIXc3AudGhlbGVhZmNocm9uaWNsZS5jb22CGHNwLnRoZW5ld3MtbWVz c2VuZ2VyLmNvbYISc3AudGhlbmV3c3N0YXIuY29tghZzcC50aGVub3J0aHdlc3Rl cm4uY29tghJzcC50aGVzcGVjdHJ1bS5jb22CE3NwLnRoZXN0YXJwcmVzcy5jb22C FXNwLnRoZXRpbWVzaGVyYWxkLmNvbYISc3AudGhldG93bnRhbGsuY29tghZzcC50 aW1lc3JlY29yZG5ld3MuY29tghVzcC50b2RheXNnb2xmZXIuY28udWuCFHNwLnVw c3RhdGVwYXJlbnQuY29tgg9zcC51c2F0b2RheS5jb22CDXNwLnZjc3Rhci5jb22C GHNwLnZpc2FsaWF0aW1lc2RlbHRhLmNvbYIYc3Aud2F1c2F1ZGFpbHloZXJhbGQu Y29tgh1zcC53aXNjb25zaW5yYXBpZHN0cmlidW5lLmNvbYIQc3Aud2lzZmFybWVy LmNvbYITc3Aud3VuZGVyZ3JvdW5kLmNvbYIKc3AueWRyLmNvbYITc3AueW9ya2Rp c3BhdGNoLmNvbYIec3AuemFuZXN2aWxsZXRpbWVzcmVjb3JkZXIuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADy AHcA36Veq2iCTx9sre64X04+WurNohKkal6OOxLAIERcKnMAAAF+2oO/UQAABAMA SDBGAiEAnffNFLEIqut/cOr5gnunagjNHgYQm21wNrKVzFs2wCICIQC2zPcngj9y fEADqiYZpi+1jxX+SsNPJmmOZ7hM51zDIwB3AEalVet1+pEgMLWiiWn0830RLEF0 vv1JuIWr8vxw/m1HAAABftqDv+4AAAQDAEgwRgIhAIlXsnSXtTh9uSzwu9N+KbUK PyD4Ub5zjYJgnKa7sfUCAiEAy9//9BUmG+kNF7vxWUGPHIXDj8k4zEaqZRz2JKlD sy4wDQYJKoZIhvcNAQELBQADggEBAIBTi1INoU6bR94nx1s8RPpZtNBXNAMk8W0U G3VRVFrOJNhrDsAk+WdI1yIy0l05kUi460tnrD9cM4hjaj1AdV+FCX2IuZ/jHJPu 1VG5QRE4RcFkHMWZH6gPO1LxWeXTkVa8GOssdS0Z/AyQ9sOsAxwSkA07kW9D/wmK 4sDvbPYhfR9FlA8c2vqDEKWjO7SQ6ELfUmor4+gc9xDvxVwH/nRPDTm/8RT4d0iT mL5xR26cJCy568KVxGzxWpAArUcS+pHO3RN5PYSRTVABVyfJyLH/yLamN11Tp/dM B6AjU+MQEJITPuyUBsYZBO0LRBrQhzhoJv3EJBdGzqeteIoPPTE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hq7+S7YXBxwEba6HYV9 uBZYcDsrHBqQWMtb9IV/fu1Xu3+QlvPXSMCZRyJZpxdu2RS+An4Ws6U4KM2VMwnE MXtNC58zQ29lny3KHPK9AlDh1g/+Fd2XUbxs6pq8tqjWLWl9m5HYA10EO6QrT0tH BsOIFetZ3AaTR+/CMi4aWRjXU3RbSAA7ZERPhH6MIbPFUg/wTCTg8PzD4vZvMPSB YUoQRYBdNOxdNgex3cxgo4Mo37C3qtDKFcw5xKgNJVc6he2H7ko1CNm/am1bgDRP PaPGMrve2SoWod48QsYSJjxTIJEIK39tj2Xa7MOsLmMWtW9wF9Zh8r25gOOks0oL OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 408874799461005393076138010514403148181429 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-08 17:06:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-09 17:06:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sp.usatoday.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30562852962149868197806773427375182705961134610680841668825762904286214571608003764711753599746815777648003872917617558575736932603302066520576918661518600477249519157129715224382063104526674035117918802284480668676597820986727596646306095675621281946390545363358792869466669622493317810689708343534683962696653542965759145776841557543993376373325594605572573149785456573811053485238420958341392507886602905393591655773969898332410013975730574052339787701851762982707031510506060683413095945991953798952827187270112719828825129099044738407084424078457640560419035034683284833764329336186981008296394884859088433974073 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b3c94d9404a4de52885276fe2fc9f99c3d7b68a4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1035 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ardmoreite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.news-star.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.postcrescent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.poughkeepsiejournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.press-citizen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pressconnects.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.publicopiniononline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.recordonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.redding.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.reporternews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.rgj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ruidosonews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.scsun-news.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.sctimes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.sheboyganpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.shreveporttimes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.stargazette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.statesmanjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.stevenspointjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.tallahassee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.tcpalm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.tennessean.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.theadvertiser.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thecalifornian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thedailyjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thegleaner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.theleafchronicle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thenews-messenger.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thenewsstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thenorthwestern.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thespectrum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thestarpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thetimesherald.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thetowntalk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.timesrecordnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.todaysgolfer.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.upstateparent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.usatoday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.vcstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.visaliatimesdelta.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wausaudailyherald.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wisconsinrapidstribune.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wisfarmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wunderground.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ydr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.yorkdispatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.zanesvilletimesrecorder.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017eda83bf5100000403004830460221009df7cd14b108aaeb7f70eaf9827ba76a08cd1e06109b6d7036b295cc5b36c022022100b6ccf727823f727c4003aa2619a62fb58f15fe4ac34f26698e67b84ce75cc32300770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017eda83bfee00000403004830460221008957b27497b5387db92cf0bbd37e29b50a3f20f851be738d82609ca6bbb1f502022100cbdffff415261be90d17bbf159418f1c85c38fc938cc46aa651cf624a943b32e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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