flyertown.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:b4:fe:af:96:3d:9f:e0:e5:f6:2d:eb:4c:8e:5c:96:aa was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flyertown.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:b4:fe:af:96:3d:9f:e0:e5:f6:2d:eb:4c:8e:5c:96:aa
Serial Number (int): 284716642189872885041760035083809202149034
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:4e:ae:2f:ff:b7:99:6c:69:87:75:d5:b4:3f:0d:34:ac:7c:1b:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:e4:b3:69:7f:8a:da:8b:93:46:61:78:88:91:60:97:98:81:3b:4d
Fingerprint (sha256): 10:d3:a2:31:7e:a3:da:6a:5a:3b:d0:93:77:00:0b:de:0c:07:df:d3:92:84:c3:a4:50:c9:3d:1d:f3:2c:77:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flyertown.ca

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flyertown.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

circulars.wkrn.com
circulars.wnyt.com
circulars.wpta21.com
circulars.wtkr.com
circulars.wtvr.com
circulars.wycoreport.com
circulars.yourdailyjournal.com
digitalmagazine.harryrosen.com
dswflyer.townshoes.ca
e-flyer.thebargainshop.com
flipp.bashas.com
flipp.myfoodcity.com
flipp.timesuniononline.com
flyer.breauxmart.com
flyer.fiestamart.com
flyer.homefurniture.ca
flyer.lococos.ca
flyer.totalpet.ca
flyer.windsorplywood.com
flyers.100milefreepress.net
flyers.abbynews.com
flyers.accesswinnipeg.com
flyers.agassizharrisonobserver.com
flyers.albernivalleynews.com
flyers.aldergrovestar.com
flyers.arrowlakesnews.com
flyers.ash-cache-journal.com
flyers.betrgrocery.com
flyers.boundarycreektimes.com
flyers.brantbasics.com
flyers.brianssupermarket.com
flyers.bulkbarn.ca
flyers.burnabynewsleader.com
flyers.bvbasics.com
flyers.caledoniacourier.com
flyers.canex.ca
flyers.carterssupermarket.com
flyers.castlegarnews.com
flyers.chilliwacktimes.com
flyers.clearwatertimes.com
flyers.cloverdalereporter.com
flyers.clubentrepot.ca
flyers.coastmountainnews.com
flyers.comoxvalleyrecord.com
flyers.connorsbasics.com
flyers.coopconnection.ca
flyers.cowichannewsleader.com
flyers.crestonvalleyadvance.ca
flyers.crowdcut.com
flyers.daiglesmarket.com
flyers.dailybulletin.ca
flyers.dailytownsman.com
flyers.dealathons.com
flyers.dierbergs.com
flyers.eaglevalleynews.com
flyers.econofoods.com
flyers.ecscoffee.com
flyers.grandforksgazette.ca
flyers.greaudfinefoods.com
flyers.harvestsupermarket.com
flyers.hopestandard.com
flyers.houston-today.com
flyers.hubbensmarket.com
flyers.hudsonsbayhome.com
flyers.interior-news.com
flyers.invermerevalleyecho.com
flyers.janisessupermarket.com
flyers.johnsgrocerystore.com
flyers.justdeals.com
flyers.jysk.ca
flyers.kelownacapnews.com
flyers.keremeosreview.com
flyers.kootenayadvertiser.com
flyers.ladysmithchronicle.com
flyers.lakecountrycalendar.com
flyers.lakecowichangazette.com
flyers.langleytimes.com
flyers.ldnews.net
flyers.lintermarcheinternational.ca
flyers.lowerys.com
flyers.lowesfoods.com
flyers.manleys.com
flyers.mapleridgenews.com
flyers.mathernes.com
flyers.megacoop.com
flyers.missesgrocery.com
flyers.missioncityrecord.com
flyers.monarchbasics.com
flyers.nofrillssupermarkets.com
flyertown.ca

Other certificates including the domain name flyertown.ca

(limited to 100 certificates)
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
feeds.flyertown.ca
flyertown.ca
api.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
editorials.circularhub.com
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
api.flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca

Certificate

The complete raw certificate details for flyertown.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZODGBAGcBEbR6jmTruc
yWYLuWLdecWhlgWyFIkCql7JlrKpcApvQNRDt3GJBHv+y3PT5htW9uX00JY40u3w
G4OnND+8VnweThT+cU/RPqeWE1UxTRC4/s/ES3a2GwNdyPIYjMGrO1Ha2i+/Glk3
E2lfTDHa1y0jCpnc4zTPZRuDzKnS3j3RBKutZ7qFH2lFfxfXv3apigBIEHKQq+OU
Ki2wbn0Om6W8mm7kRS+eVDiMZ+cyUbqtS2y8NtEbqYEVWmfUy1NwgiKqZU5Grcg4
/RNqik3VCSmFXYH+Ur8YCv0FejzmzGEdIt/k2EgLM3NuuHMZtLrOCjLgfc+QtsbO
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284716642189872885041760035083809202149034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 19:03:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 19:03:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flyertown.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27466453098291195354976177575228893871708337755366879729300072090431960402019487705666390506991497450990305686183555546071977003584394444011636520251041238973403958655950318587886199957539520019526820787734726298563842385927576502634641922264417330705193443770543674269131051469866689695378763340420990398598018868790415340869805872764949189230888057908894153974931905863321554861613672463989172824311186038175534951135834735885786986630012395164626994855384557730777314237616706504326272635111090352366312312389118139932029827365590525969150992635587063541949773744933600384634143010215523535708851377228173283872449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a4eae2fffb7996c698775d5b43f0d34ac7c1b01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wkrn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wnyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wpta21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wtkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wtvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wycoreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.yourdailyjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmagazine.harryrosen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dswflyer.townshoes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-flyer.thebargainshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipp.bashas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipp.myfoodcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipp.timesuniononline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.breauxmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.fiestamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.homefurniture.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.lococos.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.totalpet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.windsorplywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.100milefreepress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.abbynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.accesswinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.agassizharrisonobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.albernivalleynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.aldergrovestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.arrowlakesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.ash-cache-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.betrgrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.boundarycreektimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.brantbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.brianssupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.bulkbarn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.burnabynewsleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.bvbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.caledoniacourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.canex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.carterssupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.castlegarnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.chilliwacktimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.clearwatertimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.cloverdalereporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.clubentrepot.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.coastmountainnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.comoxvalleyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.connorsbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.coopconnection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.cowichannewsleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.crestonvalleyadvance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.crowdcut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.daiglesmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.dailybulletin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.dailytownsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.dealathons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.dierbergs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.eaglevalleynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.econofoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.ecscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.grandforksgazette.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.greaudfinefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.harvestsupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.hopestandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.houston-today.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.hubbensmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.hudsonsbayhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.interior-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.invermerevalleyecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.janisessupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.johnsgrocerystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.justdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.jysk.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.kelownacapnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.keremeosreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.kootenayadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.ladysmithchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lakecountrycalendar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lakecowichangazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.langleytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.ldnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lintermarcheinternational.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lowerys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lowesfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.manleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.mapleridgenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.mathernes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.megacoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.missesgrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.missioncityrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.monarchbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.nofrillssupermarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyertown.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff80d9a020000040300463044022053a189ec38d842c0d058939309a72dd9a8ed7f6411f885d778b68c573763c0df02204bddac6ba704e46339bf31a7df24d116923abd59f64292f618d8c22125bdf2e80076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ff80d9a3a0000040300473045022100cb89dc801d401c3c9e1bab7a080527916c1a520b3f44ab4d0a472586b0b063530220298b020f97d19f128c8e0fdbe21dc6ac2dac43b10ccd48c94bb55393c3e6ae43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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