*.alamogordonews.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0e:2a:fc:74:04:8c:0f:66:9f:39:65:2a:6e:b4:26:f9:ee was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.alamogordonews.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:2a:fc:74:04:8c:0f:66:9f:39:65:2a:6e:b4:26:f9:ee
Serial Number (int): 266157949319924968865114950969475291609582
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:8c:57:e7:e3:a7:27:15:a3:7c:a0:f1:85:ed:1f:9c:e3:da:84:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:0a:77:0f:bc:77:2b:35:c3:4a:50:27:5b:98:b3:28:ac:94:41:8a
Fingerprint (sha256): 10:aa:1b:ef:4a:bf:78:b5:1c:25:1a:44:78:3f:7a:f7:07:ca:15:77:d6:4a:8c:fc:1c:2a:44:1f:4e:bb:63:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.alamogordonews.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.alamogordonews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alamogordonews.com
*.app.com
*.argusleader.com
*.azcentral.com
*.battlecreekenquirer.com
*.blackmountainnews.com
*.bucyrustelegraphforum.com
*.burlingtonfreepress.com
*.caller.com
*.centralfloridafuture.com
*.chillicothegazette.com
*.cincinnati.com
*.citizen-times.com
*.clarionledger.com
*.coloradoan.com
*.commercialappeal.com
*.coshoctontribune.com
*.courier-journal.com
*.courierpostonline.com
*.courierpress.com
*.currentargus.com
*.daily-times.com
*.dailyrecord.com
*.dailyworld.com
*.delawarebeaches.com
*.delawareonline.com
*.delmarvanow.com
*.demingheadlight.com
*.democratandchronicle.com
*.desertsun.com
*.desmoinesregister.com
*.detroitnews.com
*.dmjuice.com
*.dnj.com
*.elpasotimes.com
*.elpasoymas.com
*.elsoldesalinas.com
*.eveningsun.com
*.farmersadvance.com
*.fdlreporter.com
*.flipsidepa.com
*.floridatoday.com
*.freep.com
*.fsunews.com
*.gametimepa.com
*.gosanangelo.com
*.greatfallstribune.com
*.greenbaypressgazette.com
*.greenvilleonline.com
*.hattiesburgamerican.com
*.hawkcentral.com
*.hometownlife.com
*.htrnews.com
*.independentmail.com
*.indystar.com
*.inyork.com
*.ithacajournal.com
*.jacksonsun.com
*.jconline.com
*.jsonline.com
*.kitsapsun.com
*.knoxnews.com
*.lancastereaglegazette.com
*.lansingstatejournal.com
*.lavozarizona.com
*.lcsun-news.com
*.ldnews.com
*.livingstondaily.com
*.lohud.com
*.mansfieldnewsjournal.com
*.marconews.com
*.marionstar.com
*.marshfieldnewsherald.com
*.metroparentmagazine.com
*.montgomeryadvertiser.com
*.mycentraljersey.com
*.naplesnews.com
*.newarkadvocate.com
*.news-leader.com
*.news-press.com
*.newsleader.com
*.northjersey.com
*.packersnews.com
*.pal-item.com
*.pnj.com
*.portclintonnewsherald.com
*.postcrescent.com
*.poughkeepsiejournal.com
*.press-citizen.com
*.pressconnects.com
*.publicopiniononline.com
*.redding.com
*.reno.com
*.reporternews.com
*.rgj.com
*.ruidosonews.com
*.wp-staging-us-east1-public.gke-steve-starr-svc.gannettdigital.com

Other certificates including the domain name alamogordonews.com

(limited to 100 certificates)
*.alamogordonews.com
gannett.com
gannett.com
*.usatodaynetwork.com
gannett.com
*.gannett.com
consent.computerweekly.com
jobs.thejobnetwork.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
hiring.sanduskyregister.com
hiring.sanduskyregister.com
gannett.com
gannett.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
sp.alamogordonews.com
realestate.alamogordonews.com
gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
sp.alamogordonews.com
gannett.com
gannett.com
sp.alamogordonews.com
gannett.com
gannett.com
gannett.com
tickets.indystar.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
jobs.usatoday.com
jobs.thejobnetwork.com
gannett.com
*.gannett.com
gannett.com
realestate.alamogordonews.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
flyertown.ca
profile.alamogordonews.com
gannett.com
tickets.indystar.com
gannett.com
gannett.com
www.democratandchronicle.com
*.alamogordonews.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
jobs.thejobnetwork.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.alamogordonews.com
gannett.com
*.gannett.com
gannett.com
jobs.usatoday.com
gannett.com
gannett.com
consent.computerweekly.com
gannett.com
*.gannett.com
hiring.timesposttribune.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
jobs.usatoday.com
gannett.com
gannett.com
realestate.alamogordonews.com
gannett.com
gannett.com
gannett.com
gannett.com

Certificate

The complete raw certificate details for *.alamogordonews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm7X1/WKXjQP52pAgonK
cVMl4BsvyVTJ63w2EK/eugx+G2Rxubm8zigr7LWjurwBscE7vfzdgW33bvEVNDEX
uv7oIermGv6AB3D5YGL/pk+EIZPg7whObFKLY3mzFvAbg/rLgR9VVMRo0W0SLJF9
pn+NCJSWk+hYVZ98sgm4auhu3LqNoTmW43YLvIsNMuG96DzjX2OPErqG8S9KmZM0
rxyy9NbsIf0LGMVT8kZ+z1/gznFx/0BYCx8VsLfbW8OQzmm2q/ILPf6Zk7yWfcrG
9zQQwAhA4zK7ZVsV2Kq3vXwuXztBoKh5zZBG1g6qyHBb3B4hUHpJ3iaCLi1ilMcy
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266157949319924968865114950969475291609582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-15 06:11:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-13 06:11:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.alamogordonews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22525077072972628226101359322454804695502869635439965587818490446168399361621359389415752569970370203488236309022962429304055674955489461500623421592007102195223952593656260706782863264375351660917620173633593064850907666600834761010257758615957238436321206500644679078910266050635315192827088724821535170714202465374485383516688699871610328044805393999703192300855470240177812252578749314526714160067714165158712727655966017926754007104292621917815971518784531917333032213685815591196484757035410968248667630395733096633584407732637053041129556904591333527114674584683676713691532601033003500374104198266212690899559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f68c57e7e3a72715a37ca0f185ed1f9ce3da845b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2021 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alamogordonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argusleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.battlecreekenquirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackmountainnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucyrustelegraphforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burlingtonfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centralfloridafuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chillicothegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cincinnati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citizen-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarionledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coloradoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercialappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coshoctontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courier-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courierpostonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courierpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currentargus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daily-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delawarebeaches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delawareonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delmarvanow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demingheadlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.democratandchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desertsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desmoinesregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detroitnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmjuice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpasotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpasoymas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsoldesalinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eveningsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmersadvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdlreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipsidepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floridatoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsunews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gametimepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gosanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatfallstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenbaypressgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenvilleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hattiesburgamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawkcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hometownlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ithacajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacksonsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitsapsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knoxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lancastereaglegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lansingstatejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavozarizona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lcsun-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ldnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingstondaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lohud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mansfieldnewsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marconews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marionstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marshfieldnewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metroparentmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montgomeryadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycentraljersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naplesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newarkadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news-press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.packersnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pal-item.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portclintonnewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postcrescent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poughkeepsiejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.press-citizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pressconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.publicopiniononline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reporternews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rgj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruidosonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp-staging-us-east1-public.gke-steve-starr-svc.gannettdigital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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