dubois.newstory.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b1:a3:b8:08:65:f7:1c:e5:24:63:4b:9d:3e:58:63:8f:2a was issued on by Let's Encrypt.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dubois.newstory.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b1:a3:b8:08:65:f7:1c:e5:24:63:4b:9d:3e:58:63:8f:2aSerial Number (int): 321784456456559558641052019464415496867626
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 31:29:04:90:54:78:c0:2d:cd:55:4b:bb:df:f0:51:40:0c:c3:7b:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): cd:71:7c:5a:1e:6d:ac:e4:37:d4:72:f1:38:a5:23:2c:ba:33:35:24
Fingerprint (sha256): 0c:ac:4d:1f:de:0a:b9:6c:0e:d2:aa:5b:a2:bd:33:9e:20:2f:22:40:b8:48:7a:37:b0:dc:31:29:08:c1:be:08
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dubois.newstory.com
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dubois.newstory.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
berwick.newstory.com
clearfield.newstory.com
dubois.newstory.com
harrisburg.newstory.com
indiana.newstory.com
kenhorst.newstory.com
newholland.newstory.com
perkiomen.newstory.com
selinsgrove.newstory.com
throop.newstory.com
www.berwick.newstory.com
www.clearfield.newstory.com
www.dubois.newstory.com
www.harrisburg.newstory.com
www.indiana.newstory.com
www.kenhorst.newstory.com
www.newholland.newstory.com
www.perkiomen.newstory.com
www.selinsgrove.newstory.com
www.throop.newstory.com
www.wyoming.newstory.com
www.wyomissing.newstory.com
wyoming.newstory.com
wyomissing.newstory.com
clearfield.newstory.com
dubois.newstory.com
harrisburg.newstory.com
indiana.newstory.com
kenhorst.newstory.com
newholland.newstory.com
perkiomen.newstory.com
selinsgrove.newstory.com
throop.newstory.com
www.berwick.newstory.com
www.clearfield.newstory.com
www.dubois.newstory.com
www.harrisburg.newstory.com
www.indiana.newstory.com
www.kenhorst.newstory.com
www.newholland.newstory.com
www.perkiomen.newstory.com
www.selinsgrove.newstory.com
www.throop.newstory.com
www.wyoming.newstory.com
www.wyomissing.newstory.com
wyoming.newstory.com
wyomissing.newstory.com
Other certificates including the domain name newstory.com
(limited to 100 certificates)
servicedesk.newstory.com
mail.salisburymgt.com
dubois.newstory.com
dubois.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
throop.newstory.com
newstory.com
mail.salisburymgt.com
ithelpdesk.cwc.com
itservices.luminuseducation.com
mail.salisburymgt.com
throop.newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
henleyhelp.vioc.net
hdesk.amfarconsulting.com
dubois.newstory.com
newstory.com
helpdesk.ineosphenol.net
mesa.aylsoluciones.pw
newstory.com
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newcumberland.newstory.com
newstory.com
newstory.com
servicedesk.newstory.com
newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
servicedesk.newstory.com
helpdesk.ineosphenol.net
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
itservices.luminuseducation.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
itservices.luminuseducation.com
helpdesk.ineosphenol.net
dubois.newstory.com
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
newstory.com
newcumberland.newstory.com
newcumberland.newstory.com
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
helpdesk.sam-dinesh.com
selinsgrove.newstory.com
dubois.newstory.com
mesa.aylsoluciones.pw
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newstory.com
ithelpdesk.cwc.com
dubois.newstory.com
newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
newcumberland.newstory.com
hdesk.amfarconsulting.com
newcumberland.newstory.com
servicedesk.newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
harrisburg.newstory.com
newholland.newstory.com
monroeville.newstory.com
newcumberland.newstory.com
harrisburg.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
perkiomen.newstory.com
helpdesk.ineosphenol.net
indiana.newstory.com
kenhorst.newstory.com
helpdesk.sam-dinesh.com
newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
mail.salisburymgt.com
dubois.newstory.com
dubois.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
throop.newstory.com
newstory.com
mail.salisburymgt.com
ithelpdesk.cwc.com
itservices.luminuseducation.com
mail.salisburymgt.com
throop.newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
henleyhelp.vioc.net
hdesk.amfarconsulting.com
dubois.newstory.com
newstory.com
helpdesk.ineosphenol.net
mesa.aylsoluciones.pw
newstory.com
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newcumberland.newstory.com
newstory.com
newstory.com
servicedesk.newstory.com
newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
servicedesk.newstory.com
helpdesk.ineosphenol.net
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
itservices.luminuseducation.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
itservices.luminuseducation.com
helpdesk.ineosphenol.net
dubois.newstory.com
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
newstory.com
newcumberland.newstory.com
newcumberland.newstory.com
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
helpdesk.sam-dinesh.com
selinsgrove.newstory.com
dubois.newstory.com
mesa.aylsoluciones.pw
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newstory.com
ithelpdesk.cwc.com
dubois.newstory.com
newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
newcumberland.newstory.com
hdesk.amfarconsulting.com
newcumberland.newstory.com
servicedesk.newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
harrisburg.newstory.com
newholland.newstory.com
monroeville.newstory.com
newcumberland.newstory.com
harrisburg.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
perkiomen.newstory.com
helpdesk.ineosphenol.net
indiana.newstory.com
kenhorst.newstory.com
helpdesk.sam-dinesh.com
newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
Certificate
The complete raw certificate details for dubois.newstory.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHsjCCBpqgAwIBAgISA7GjuAhl9xzlJGNLnT5YY48qMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTkwOTA0NDJaFw0x OTA3MTgwOTA0NDJaMB4xHDAaBgNVBAMTE2R1Ym9pcy5uZXdzdG9yeS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwouhaTqFHXcsWPaZ8/vBGNk4z CIB1lFQ0A0qUYJglmdZa2J24cRODaagtS3zK5HhJJw2OPDMcV0IG+c31/lpKlKY9 htZlfJq6ZCBFbvtkdzJZESWtNY30mwO7zFvAYqtKL6Sv2HJxzS4hUQVchz1pqK7g +mkm+fbL1127oWKvUizPSyz1/34a4YNrHgLUI2+EKfn0exC4PzE2Z3a8tf1w6How /Ykab1d0a6fmS7pNKhD5lKz+/ErBEyvesZ2sSdfCwq7yx4y1gqrW7zjNPbSB4K06 s7eX00oZH0Av1PNt5m+evehRT4OEVbhHgtpNsQKKDB/Z5R5E8Oz3s+M6NEbJAgMB AAGjggS8MIIEuDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDEpBJBUeMAtzVVLu9/w UUAMw3vgMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggJvBgNVHREEggJmMIICYoIUYmVyd2ljay5uZXdzdG9yeS5jb22C F2NsZWFyZmllbGQubmV3c3RvcnkuY29tghNkdWJvaXMubmV3c3RvcnkuY29tghdo YXJyaXNidXJnLm5ld3N0b3J5LmNvbYIUaW5kaWFuYS5uZXdzdG9yeS5jb22CFWtl bmhvcnN0Lm5ld3N0b3J5LmNvbYIXbmV3aG9sbGFuZC5uZXdzdG9yeS5jb22CFnBl cmtpb21lbi5uZXdzdG9yeS5jb22CGHNlbGluc2dyb3ZlLm5ld3N0b3J5LmNvbYIT dGhyb29wLm5ld3N0b3J5LmNvbYIYd3d3LmJlcndpY2submV3c3RvcnkuY29tght3 d3cuY2xlYXJmaWVsZC5uZXdzdG9yeS5jb22CF3d3dy5kdWJvaXMubmV3c3Rvcnku Y29tght3d3cuaGFycmlzYnVyZy5uZXdzdG9yeS5jb22CGHd3dy5pbmRpYW5hLm5l d3N0b3J5LmNvbYIZd3d3LmtlbmhvcnN0Lm5ld3N0b3J5LmNvbYIbd3d3Lm5ld2hv bGxhbmQubmV3c3RvcnkuY29tghp3d3cucGVya2lvbWVuLm5ld3N0b3J5LmNvbYIc d3d3LnNlbGluc2dyb3ZlLm5ld3N0b3J5LmNvbYIXd3d3LnRocm9vcC5uZXdzdG9y eS5jb22CGHd3dy53eW9taW5nLm5ld3N0b3J5LmNvbYIbd3d3Lnd5b21pc3Npbmcu bmV3c3RvcnkuY29tghR3eW9taW5nLm5ld3N0b3J5LmNvbYIXd3lvbWlzc2luZy5u ZXdzdG9yeS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgor BgEEAdZ5AgQCBIH2BIHzAPEAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnm EHvMVgAAAWo1DirfAAAEAwBHMEUCIAtQWdV9ANgVBO92YHoLRBeSF7/DLPGD4G1Z YfWPg/XcAiEAxDWt+6pu48IyyyqGHPQuG/Y2eHy0Z4BuUm1JIQiTxA8AdwBj8tvN 6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWo1Dis/AAAEAwBIMEYCIQDC ynyYgmCg72QDb3SOhAXsaisk670RA8HGpKp5DNXMKgIhAKp/oGqS0qHcIz8f7qkD 5x/UhEROwjAbxElIP90HeH+RMA0GCSqGSIb3DQEBCwUAA4IBAQAGPefbZwxpNA66 gHbBjaKBH13gJ9L77zwCXKl4Dl/r8HqXNHIILJOGZirQJey5C9kUqCd6jPLBRdTl ZYowS/urOANsQCe4xsJk/GpBzynJCL3xQs+F790sO7u/Nc5/a43s48zwkeDlVTKp afEQxMjzK+m8+2h6oamRmFN742cr+wKq3aWykawzGgn63utRxRJ9/2tG/OUTL61y ilVK51ZoRpl3KTGroFwxHDOG+OzSd0R1lQd7rvRxUEyZWqJh/cctHl+IFWaSXwvP O1GvoUPAqPdsAsjOR/JLjLLh3dX+Oy+lTPQon21A/l+OZHiZLaxS9YMGvDNnHcVk rXgQEYLi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKLoWk6hR13LFj2mfP7w RjZOMwiAdZRUNANKlGCYJZnWWtiduHETg2moLUt8yuR4SScNjjwzHFdCBvnN9f5a SpSmPYbWZXyaumQgRW77ZHcyWRElrTWN9JsDu8xbwGKrSi+kr9hycc0uIVEFXIc9 aaiu4PppJvn2y9ddu6Fir1Isz0ss9f9+GuGDax4C1CNvhCn59HsQuD8xNmd2vLX9 cOh6MP2JGm9XdGun5ku6TSoQ+ZSs/vxKwRMr3rGdrEnXwsKu8seMtYKq1u84zT20 geCtOrO3l9NKGR9AL9TzbeZvnr3oUU+DhFW4R4LaTbECigwf2eUeRPDs97PjOjRG yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321784456456559558641052019464415496867626 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 09:04:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 09:04:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dubois.newstory.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22298274419424558619369190224838458830235987458911445678014584440653857407583163528230514113228389616966125199239043048232113605758109299160764951455746833788561306625104493601260255054678477744080832463056917188416125330006439737097757212219516022902580137421723595482439249700170901452880992344290691166036110296089994389540450730779638520535815066412739792994487253528288063026881686002013389238958382802117551824118065882702190530516474179281750338642533909090990202230244156939921064414612912909848764723273453315819319689794597417333041268194134412610488161388762400915149014621519361720014486665410416437642953 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 312904905478c02dcd554bbbdff051400cc37be0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (614 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berwick.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearfield.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubois.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrisburg.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiana.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenhorst.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newholland.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perkiomen.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selinsgrove.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'throop.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berwick.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearfield.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubois.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrisburg.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiana.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenhorst.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newholland.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perkiomen.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selinsgrove.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.throop.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyoming.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomissing.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyoming.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomissing.newstory.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a350e2adf000004030047304502200b5059d57d00d81504ef76607a0b44179217bfc32cf183e06d5961f58f83f5dc022100c435adfbaa6ee3c232cb2a861cf42e1bf636787cb467806e526d49210893c40f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a350e2b3f0000040300483046022100c2ca7c988260a0ef64036f748e8405ec6a2b24ebbd1103c1c6a4aa790cd5cc2a022100aa7fa06a92d2a1dc233f1feea903e71fd484444ec2301bc449483fdd07787f91 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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