conroe.communityimpact.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4f:c2:7c:8d:75:e0:c7:72:bb:94:61:fe:0c:da:d7:75:63 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=conroe.communityimpact.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:c2:7c:8d:75:e0:c7:72:bb:94:61:fe:0c:da:d7:75:63
Serial Number (int): 375589967658946872087374022525331497776483
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7a:d6:22:d3:ef:25:7b:41:9f:e3:2c:70:0e:0b:b2:f8:0d:bc:54:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:52:5e:85:08:85:ce:ee:26:08:b4:58:21:9a:c1:b8:3b:5f:c5:53
Fingerprint (sha256): 17:01:f3:3a:7b:34:92:a7:b2:ff:8f:ee:06:94:3c:32:01:b0:bd:9f:ee:d1:b6:69:dc:12:73:34:8a:5d:5f:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate conroe.communityimpact.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for conroe.communityimpact.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advertisertribune.wanderful.ownlocal.com
ajax.durhamregion.com
alliston.simcoe.com
almaguin.northbaynipissing.com
bracebridge.muskokaregion.com
brock.mykawartha.com
central-leader.origami.neighbourly.co.nz
centralaustin.communityimpact.com
citycentreparkdale.toronto.com
conroe.communityimpact.com
contracostatimes.wanderful.ownlocal.com
flintshopping.mlive.com
gilbert.communityimpact.com
gravenhurst.muskokaregion.com
huntsville.muskokaregion.com
jacksonshopping.mlive.com
ke.local.kentonline.co.uk
kg.local.kentonline.co.uk
laketravis.communityimpact.com
local.adirondackexpress.com
local.anchoragepress.com
local.ansonrecord.com
local.bakersfield.com
local.baystatebanner.com
local.bexleytimes.co.uk
local.cityweekly.net
local.clevelandcountyherald.com
local.coalvalleynews.com
local.countrymessenger.com
local.countystar.com
local.devonlife.co.uk
local.durhamregion.com
local.gettysburgtimes.com
local.h-ponline.com
local.hawaiitribune-herald.com
local.hmbreview.com
local.index.vernonpublishing.com
local.kcchronicle.com
local.kemmerergazette.com
local.lfpress.com
local.luskherald.com
local.maidenhead-advertiser.co.uk
local.mississauga.com
local.montreal.cjnews.com
local.montrealgazette.com
local.monvalleyindependent.com
local.mountainstatesman.com
local.nationalpost.com
local.norfolkdailynews.com
local.nwboomerandseniornews.com
local.omakchronicle.com
local.orangeville.com
local.panolawatchman.com
local.parrysound.com
local.pcrecordtimes.com
local.pinecitymn.com
local.republicanherald.com
local.sandmountainreporter.com
local.sconeadvocate.com.au
local.sequoyahcountytimes.com
local.simcoe.com
local.spokane.exchange
local.staradvertiser.com
local.statesmanexaminer.com
local.styleweekly.com
local.tahoedailytribune.com
local.theeasleyprogress.com
local.theforecaster.net
local.thegazette.com
local.theievoice.com
local.theparisnews.com
local.thepeterboroughexaminer.com
local.therecord.com
local.uintacountyherald.com
local.uniondailytimes.com
local.vaildaily.com
local.vanguardia.com.mx
local.waterloochronicle.ca
local.westhawaiitoday.com
local.willcoxrangenews.com
manukau-courier.origami.neighbourly.co.nz
marketplace-dg.tj.news
marketplace-tb.tj.news
mm.local.kentonline.co.uk
muskokan.muskokaregion.com
mylocal.latimes.com
northern-outlook.origami.neighbourly.co.nz
orangeville.orangeville.com
planonorth.communityimpact.com
rodney-times.origami.neighbourly.co.nz
santacruz.wanderful.ownlocal.com
scarborough.toronto.com
shopping.nj.com
shoreview.presspubs.com
starledger.wanderful.ownlocal.com
te.local.kentonline.co.uk
the-nelson-leader.origami.neighbourly.co.nz
uxbridge.durhamregion.com
western-leader.origami.neighbourly.co.nz
wo.local.kentonline.co.uk

Other certificates including the domain name communityimpact.com

(limited to 100 certificates)
www.communityimpact.com
local.panolawatchman.com
communityimpact.com
local.dissexpress.co.uk
communityimpact.com
conroe.communityimpact.com
communityimpact.com
staging.communityimpact.com
news.communityimpact.com
portperry.durhamregion.com
projects.communityimpact.com
tomball.communityimpact.com
georgina.yorkregion.com
local.ottawasun.com
local.moodycountyenterprise.com
communityimpact.com
www.communityimpact.com
local.saltwire.com
www.communityimpact.com
kawarthalakes.mykawartha.com
*.communityimpact.com
communityimpact.com
communityimpact.com
northern-news.origami.neighbourly.co.nz
www.communityimpact.com
communityimpact.com
*.communityimpact.com
austinmetro.communityimpact.com
www.communityimpact.com
www.communityimpact.com
sni194623.cloudflaressl.com
communityimpact.com
www.communityimpact.com
www.communityimpact.com
communityimpact.com
communityimpact.com
www.communityimpact.com
*.communityimpact.com
*.communityimpact.com
communityimpact.com
editions.communityimpact.com
communityimpact.com
www.communityimpact.com
alliston.simcoe.com
communityimpact.com
local.kent-life.co.uk
communityimpact.com
local.brainerddispatch.com
staging.communityimpact.com
communityimpact.com
editions.communityimpact.com
communityimpact.com
communityimpact.com
local.saltwire.com

Certificate

The complete raw certificate details for conroe.communityimpact.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9/bI7TjDP2X7Zqqsyxn
rg2EbpyAYVXvH9ltUh/Y38Zbk7xNaNgHGmpBOkJYqqLoukhsyylzY2U8f5BNujYX
YD8aGtvKMwfnuJLeVQemxTO4/i+gWccdLg6E9ILVp6QoP4i7UuhFqKHfSvQmERB2
dsgL5r7mk0owgz6tz4Hjha8DhVLD1s6ctbWXnH50e2t/1PTwVbtr3DHs0nmtHT6j
j73jGgJwT6KxvApbaJNur46q46OJfshTgZpJO2nh99eqSUg8IK7EkRCFEFn23zaj
tT+m5euyVsjqEU2cObmlsz6VY1RnzpYrMWi7hW6TCxrmq6sBh/W/XVwROfwartUh
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375589967658946872087374022525331497776483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 17:22:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-14 17:22:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'conroe.communityimpact.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21697137663695924566867966820353523509992530381392965011325785845309950854339464620214728256637031626201074016831981798739250565176052263967771735860869273210289795008396768806119866126208922653311015329361326114121141476215540166008236293204674334262482450611931428581156461181339715640965780733457397029376221740316745888650915291442784496770640945238034598681003620268370763428028275801295019734830422258400864863999325146494768451151864661198662846646104114003038313056712567290175721123923705376972528414545606258917410688746535550599316987779512776006268813831838901872950640987205208384477378550261677099917693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ad622d3ef257b419fe32c700e0bb2f80dbc54fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2785 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertisertribune.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliston.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almaguin.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brock.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralaustin.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycentreparkdale.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conroe.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contracostatimes.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flintshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbert.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravenhurst.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsville.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ke.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kg.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laketravis.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adirondackexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.anchoragepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ansonrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bakersfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baystatebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bexleytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cityweekly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clevelandcountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coalvalleynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrymessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.devonlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gettysburgtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.h-ponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hawaiitribune-herald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hmbreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.index.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kcchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kemmerergazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lfpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.luskherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maidenhead-advertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mississauga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montreal.cjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrealgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.monvalleyindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mountainstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nationalpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norfolkdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwboomerandseniornews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.omakchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.orangeville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.panolawatchman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pcrecordtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinecitymn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.republicanherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sandmountainreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sconeadvocate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sequoyahcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.spokane.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.staradvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.statesmanexaminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.styleweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tahoedailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeasleyprogress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theforecaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theievoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theparisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thepeterboroughexaminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.therecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uintacountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uniondailytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vaildaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vanguardia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.waterloochronicle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westhawaiitoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willcoxrangenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukau-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-dg.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-tb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokan.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.latimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northern-outlook.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangeville.orangeville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planonorth.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodney-times.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santacruz.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarborough.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreview.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starledger.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-nelson-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxbridge.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'western-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wo.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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