local.bensonnews-sun.com

Issued by R3

About this certificate

This digital certificate with serial number 03:68:26:18:26:0b:e1:cc:41:66:8a:20:db:34:b8:c7:bd:7d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.bensonnews-sun.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:26:18:26:0b:e1:cc:41:66:8a:20:db:34:b8:c7:bd:7d
Serial Number (int): 296776860005695727562438817407284969717117
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:c0:45:f7:8f:bf:52:d6:bd:84:94:ef:b7:98:3d:96:53:35:fb:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:d5:6d:de:23:9f:40:c6:c2:5c:0b:b9:07:a4:8c:e1:90:28:68:65
Fingerprint (sha256): 0e:c7:0a:0f:4c:07:d7:d7:f6:b8:18:9e:ba:ca:1e:5f:48:3e:79:c6:58:15:25:f7:4f:71:d1:0c:07:98:cd:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.bensonnews-sun.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.bensonnews-sun.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bay-chronicle.origami.neighbourly.co.nz
bracebridge.muskokaregion.com
citycentreparkdale.toronto.com
dallaslegacyobits.wanderful.ownlocal.com
etobicoke.toronto.com
franklin-county-news.origami.neighbourly.co.nz
handelaars.kw.be
hayward.apg-wi.com
huntsville.muskokaregion.com
kapiti-observer.origami.neighbourly.co.nz
king.yorkregion.com
local.agriculturaltrader.co.uk
local.bensonnews-sun.com
local.bexleytimes.co.uk
local.brainerddispatch.com
local.caledonianrecord.com
local.citizensvoice.com
local.cityweekly.net
local.coalvalleynews.com
local.countrymessenger.com
local.countrysmallholding.com
local.dailyrecordnews.com
local.decaturdailydemocrat.com
local.derbyshirelife.co.uk
local.dorsetmagazine.co.uk
local.douglasdispatch.com
local.duluth.com
local.eastbayri.com
local.echopress.com
local.edp24.co.uk
local.francepropertyshop.com
local.fwbusinessweekly.com
local.haverhillecho.co.uk
local.hertsad.co.uk
local.hmbreview.com
local.hungryhorsenews.com
local.idahostatejournal.com
local.inwhitleycounty.com
local.islingtongazette.co.uk
local.kelownadailycourier.ca
local.kentnews.co.uk
local.lcnewschronicle.com
local.lfpress.com
local.localcommunitynews.com
local.mlstargazette.com
local.monroecountyherald.com
local.moodycountyenterprise.com
local.moraminn.com
local.mountainstatesman.com
local.myheraldreview.com
local.mywebtimes.com
local.news-banner.com
local.nwherald.com
local.osceolasun.com
local.parrysound.com
local.portstephensexaminer.com.au
local.press-leader.com
local.psdispatch.com
local.republicanherald.com
local.rifleshootermagazine.co.uk
local.sahuaritasun.com
local.sentinelsource.com
local.singletonargus.com.au
local.southeastiowaunion.com
local.spokane.exchange
local.ss-times.com
local.standardspeaker.com
local.styleweekly.com
local.sudburymercury.co.uk
local.suffolkfreepress.co.uk
local.superiortelegram.com
local.theameryfreepress.com
local.theeveningleader.com
local.thefloridavillager.com
local.theirregular.com
local.theshaunavonstandard.com
local.vancouversun.com
local.viannews.com
local.westfargopioneer.com
local.willcoxrangenews.com
local.windsorstar.com
local.yourokmulgee.com
marketplace-wb.tj.news
marlborough-midweek.origami.neighbourly.co.nz
mylocal.dailypress.com
origamiwahpeton.wahpetondailynews.com
orillia.simcoe.com
quad.presspubs.com
ricelake.apg-wi.com
richmondhill.yorkregion.com
sachemglanbrook.sachem.ca
saginawshopping.mlive.com
sanbernadino.wanderful.ownlocal.com
sangabrielvalley.wanderful.ownlocal.com
shopbirmingham.al.com
shopping.cleveland.com
shopping.oregonlive.com
stouffville.yorkregion.com
the-hutt-news.origami.neighbourly.co.nz
toronto.torontostar.com

Other certificates including the domain name bensonnews-sun.com

(limited to 100 certificates)
local.flamboroughreview.com
local.panolawatchman.com
local.thegazette.com
local.bensonnews-sun.com
bensonnews-sun.com
bensonnews-sun.com
bensonnews-sun.com
local.centraloregon.pamplinmedia.com
bensonnews-sun.com
local.dglobe.com
local.bridemagazine.co.uk
bensonnews-sun.com
admin.adforge.com
bensonnews-sun.com
bensonnews-sun.com
local.brookingsregister.com
bensonnews-sun.com
bensonnews-sun.com
bensonnews-sun.com
local.calgaryherald.com
local.blueridgenow.com
bensonnews-sun.com
bensonnews-sun.com
muskokan.muskokaregion.com
mylocal.journal-news.com
bensonnews-sun.com
local.edp24.co.uk
local.hamiltonnews.com
bensonnews-sun.com
bensonnews-sun.com
local.swcbulletin.com
bensonnews-sun.com
local.thepeterboroughexaminer.com
local.newtondailynews.com
bensonnews-sun.com
bensonnews-sun.com
local.dunmowbroadcast.co.uk
bensonnews-sun.com
bensonnews-sun.com
bensonnews-sun.com
bensonnews-sun.com
bensonnews-sun.com
bensonnews-sun.com
bensonnews-sun.com
local.wnypapers.com
horowhenua-mail.origami.neighbourly.co.nz
local.madisoncourier.com
bensonnews-sun.com
local.brainerddispatch.com
bensonnews-sun.com
local.wellsvilledaily.com
bensonnews-sun.com

Certificate

The complete raw certificate details for local.bensonnews-sun.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfCSZJ/ij3EaFiydR1JG
wYlBNrW7I55Ggp1eQQMBb4INj0agJpstlMCGxabvOScHnzGRouLwh+9y1tHDNoTS
LN3Dik9pVMF2WLF9ZnWh+TuzAQyeoRUWZQSjO2yWPQrDjLCfhDdVNtHoqEbsDZCo
JwUoxb2N3QsKa6Wbhrzyc3PDbwczwhUJZPxfHc3/wyh39j/0f+/ymT6I5l5VoXiy
DTseVk51G+nwgT+qKbU8SVAViuLdntpOmG7ddGTBkmJ4AVPcKZFlYmnOB3sOSgH5
bVJBmZViKl+QLiWITuEWBLHTtlRvhJAIyAqCta+nYtx2Jfw65CBn+TpxiQNvBzRR
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296776860005695727562438817407284969717117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-20 09:12:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-18 09:12:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.bensonnews-sun.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25997482917661387602774346244536322959489209214594967641397936419599285923845356306989838401796754420354809007345198613234025863902184175097202867266151927662669313775009650550215071987487999338317235256737374053152715431276243176355570703085114629495904929526496523089946553311889342302833664482866476060888645926138971864582133035718123013937974103265977766972866042312273193460802152919408906827675434358321753704753186314783093556154274341622494425445672024937813481715031115281475682395164697180452675906377904126855577209624024932661553701481831303036068427789464171487947868185258312263478593705949587945312573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6c045f78fbf52d6bd8494efb7983d965335fb08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2729 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bay-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycentreparkdale.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallaslegacyobits.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etobicoke.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin-county-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayward.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsville.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapiti-observer.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'king.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agriculturaltrader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bensonnews-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bexleytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonianrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.citizensvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cityweekly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coalvalleynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrymessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrysmallholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyrecordnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.decaturdailydemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.derbyshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dorsetmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.douglasdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastbayri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edp24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.francepropertyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fwbusinessweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.haverhillecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hmbreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hungryhorsenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.idahostatejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inwhitleycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.islingtongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kelownadailycourier.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kentnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lcnewschronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lfpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.localcommunitynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mlstargazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.monroecountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moodycountyenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moraminn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mountainstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myheraldreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mywebtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-banner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portstephensexaminer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.press-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.psdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.republicanherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rifleshootermagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sahuaritasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sentinelsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.singletonargus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southeastiowaunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.spokane.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ss-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.standardspeaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.styleweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sudburymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.suffolkfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theameryfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeveningleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thefloridavillager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theirregular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theshaunavonstandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vancouversun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.viannews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westfargopioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willcoxrangenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windsorstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourokmulgee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-wb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origamiwahpeton.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orillia.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quad.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricelake.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachemglanbrook.sachem.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saginawshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanbernadino.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangabrielvalley.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbirmingham.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stouffville.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-hutt-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.torontostar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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