flyertown.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:bc:3e:c5:9b:5e:18:2c:26:89:f8:36:48:01:fd:e8:c7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flyertown.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:bc:3e:c5:9b:5e:18:2c:26:89:f8:36:48:01:fd:e8:c7
Serial Number (int): 280642891136410265159967527450975932377287
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:b2:01:ff:fe:c3:15:40:be:8e:b6:4d:4f:00:e3:c6:67:d6:71:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:c2:08:80:02:8e:d1:3e:34:a0:20:64:6d:c4:25:62:d6:59:02:d6
Fingerprint (sha256): 0d:eb:6b:0c:d2:e9:43:e9:86:4b:6e:b7:9c:90:3c:70:90:91:c4:e5:c8:56:6d:9a:f2:02:f8:c1:d3:0c:9d:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flyertown.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flyertown.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buyersguide.guitarcenter.com
circulaire.crites-riddell.com
circulaire.librairiesboyer.qc.ca
circular.atwoods.com
circular.fredsinc.com
circular.justsavefoods.com
circular.marcs.com
circular.mrsgreens.com
circulars.939themix.com
circulars.al.com
circulars.alamogordonews.com
circulars.alaskanequipmenttrader.com
circulars.alaskastar.com
circulars.alliednews.com
circulars.andovertownsman.com
circulars.ansonrecord.com
circulars.apartmenttherapy.com
circulars.atchisonglobenow.com
circulars.auburnjournal.com
circulars.beavercreeknewscurrent.com
circulars.benningtonbanner.com
circulars.berksmontnews.com
circulars.bladenjournal.com
circulars.buchheits.com
circulars.burgtelegram.com
circulars.burlesoncrowley.com
circulars.canoncitydailyrecord.com
circulars.capitalgazette.com
circulars.carriagetownenews.com
circulars.carrollcountytimes.com
circulars.claiborneprogress.net
circulars.cleburnetimesreview.com
circulars.cleveland.com
circulars.clintonnc.com
circulars.colfaxrecord.com
circulars.coloradodaily.com
circulars.commercejournal.com
circulars.contracostatimes.com
circulars.coopercrier.com
circulars.currentargus.com
circulars.daily-journal.com
circulars.daily-times.com
circulars.dailyastorian.com
circulars.dailycall.com
circulars.dailycamera.com
circulars.dailyfreeman.com
circulars.dailylocal.com
circulars.dailytribune.com
circulars.dasselcokato.com
circulars.delanoheraldjournal.com
circulars.delconewsnetwork.com
circulars.delcotimes.com
circulars.demingheadlight.com
circulars.denverncweekly.com
circulars.derrynews.com
circulars.deseretnews.com
circulars.durantdemocrat.com
circulars.edhtelegraph.com
circulars.elkintribune.com
circulars.englewoodindependent.com
circulars.farmtalknewspaper.com
circulars.fayettetribune.com
circulars.folsomtelegraph.com
circulars.fortmorgantimes.com
circulars.fox17online.com
circulars.fox40.com
circulars.fox59.com
circulars.fox6now.com
circulars.fox8.com
circulars.foxradio.com
circulars.galioninquirer.com
circulars.gazette.com
circulars.gcnewsgazette.com
circulars.gosanangelo.com
circulars.goskagit.com
circulars.greenacressells.com
circulars.guff.com
circulars.gulflive.com
circulars.harlandaily.com
circulars.heraldjournal.com
circulars.heraldsun.com
circulars.hgazette.com
circulars.hhcourier.com
circulars.homemagonline.com
circulars.hot931.com
circulars.hpj.com
circulars.humboldtbeacon.com
circulars.huntersvilleherald.com
circulars.independentmail.com
circulars.insidebayarea.com
circulars.inyork.com
circulars.journal-advocate.com
circulars.kapptv.com
circulars.katradio.com
circulars.kbjr6.com
circulars.kfor.com
circulars.kimt.com
circulars.kvewtv.com
circulars.kyma.com
flyertown.ca

Other certificates including the domain name flyertown.ca

(limited to 100 certificates)
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
feeds.flyertown.ca
flyertown.ca
api.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
editorials.circularhub.com
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
api.flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca

Certificate

The complete raw certificate details for flyertown.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0fI8uoo5onC5NbigYPH
WqsvqiMWWjU64/Rfehd3c4CTEs23gz4RbpJsyXnohqWURbJ8Rl6++M/HQMqWt+Mw
aZIy97cgx6p99PGhepQoswJE7ysSMr049LVUsF/ypSld3+NKYTTHnXneQRTy7Iwl
9xLocnihLDJoNs8ysR877hbbvXpGZlyrgBsvaw7s4UqrLX2anCfUp3jdjcKsT+YB
vG+lLl/IPfCa1i6+OW89bmVNwaNbnaCLRhvPwWBn/nSYSoQDB899z8ojOL36Fr95
2QPUT/KQl8dg3s/33jwaS2ZVIsNydZ37gHiDIhUXcv+rUDFi+nqbbIhBxamne3uI
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280642891136410265159967527450975932377287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 18:36:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 18:36:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flyertown.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22127101850471280719348766580766447945522542431367673903511727636768488743920008773064962791083159062813921604950865728664333587524405491896052779605404279519730590630770575395640325734764246076271293855166995492049673486890496783023124070461650119581541853453429617164458385476233038336729546934720294490323350335603729040610146183083230822636173471543157363167225699484554350327734159646357961055292620201422918822958367054634168059689289069486921302468614127818161592993736557355653200729491171009596722991954884831368449277953148098504621315219354159763708915077319846371231777901595647501528207105267899477756103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39b201fffec31540be8eb64d4f00e3c667d671be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2753 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyersguide.guitarcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulaire.crites-riddell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulaire.librairiesboyer.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.atwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.fredsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.justsavefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.marcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.mrsgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.939themix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.alamogordonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.alaskanequipmenttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.alaskastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.alliednews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.andovertownsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.ansonrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.apartmenttherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.atchisonglobenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.auburnjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.beavercreeknewscurrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.benningtonbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.berksmontnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.bladenjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.buchheits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.burgtelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.burlesoncrowley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.canoncitydailyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.carriagetownenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.carrollcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.claiborneprogress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.cleburnetimesreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.clintonnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.colfaxrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.coloradodaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.commercejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.contracostatimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.coopercrier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.currentargus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.daily-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.daily-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailyastorian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailycall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailycamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailyfreeman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailylocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dasselcokato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.delanoheraldjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.delconewsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.delcotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.demingheadlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.denverncweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.derrynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.deseretnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.durantdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.edhtelegraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.elkintribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.englewoodindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.farmtalknewspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fayettetribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.folsomtelegraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fortmorgantimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox17online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox6now.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.foxradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.galioninquirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.gcnewsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.gosanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.goskagit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.greenacressells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.guff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.gulflive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.harlandaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.heraldjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.heraldsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.hgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.hhcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.homemagonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.hot931.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.hpj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.humboldtbeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.huntersvilleherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.insidebayarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.inyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.journal-advocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kapptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.katradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kbjr6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kfor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kimt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kvewtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kyma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyertown.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff7f4039300000403004730450221009e194dbbc28a8ad3daa8edde39d91ce8cd010c7aee8a0b99eec73c94365c2c8402203cebdc4464c3a314e80799716c0edabc541a9a72df644831e036ab2ebd0b36640076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ff7f404580000040300473045022100d7b6394218845ff12dc4856fe23b45430fc7f48af7cb16ac5d77528a776c939602206059996f86dcd4e57d36be271af2061e8f6d1e2addfc4b390a3d972fd99f5ad7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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