twp.denverpost.com

Issued by R3

About this certificate

This digital certificate with serial number 03:99:78:82:64:0e:07:39:2b:d0:43:27:6f:e0:79:e8:fe:6f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=twp.denverpost.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:78:82:64:0e:07:39:2b:d0:43:27:6f:e0:79:e8:fe:6f
Serial Number (int): 313560244321622514433218910316854610820719
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:e7:bd:d3:a0:ce:89:a4:e7:5b:1b:43:b5:ca:3a:71:b4:a4:29:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:13:7f:ec:db:e2:eb:c0:d8:86:06:75:42:e4:b7:8d:9f:17:e5:12
Fingerprint (sha256): 18:18:04:73:40:60:a5:af:38:2c:05:b8:70:5f:33:d2:9b:20:b4:d3:e1:f6:20:4f:84:84:e6:5a:7f:93:a2:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate twp.denverpost.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twp.denverpost.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alwayshiring.pressdemocrat.com
careers.goskagit.com
careers.hamptonroads.com
careers.heraldmailmedia.com
careers.idahopress.com
dei.careers
dfwishiring.dallasnews.com
featuredemployers.oklahoman.com
featuredemployers.southbendtribune.com
featuredjobs.oklahoman.com
featuredjobs.southbendtribune.com
hawaiijobs.staradvertiser.com
hotsprings.jobsarkansas.com
jobs.abc17news.com
jobs.adn.com
jobs.ahrn.com
jobs.democratherald.com
jobs.fredericksburg.com
jobs.godanriver.com
jobs.greensboro.com
jobs.hamptonroads.com
jobs.heraldandnews.com
jobs.heraldcourier.com
jobs.hobbsnews.com
jobs.hotspringssr.com
jobs.idahopress.com
jobs.kearneyhub.com
jobs.kesq.com
jobs.keyt.com
jobs.kion546.com
jobs.krdo.com
jobs.ktvz.com
jobs.kvia.com
jobs.kyma.com
jobs.localnews8.com
jobs.loudountimes.com
jobs.martinsvillebulletin.com
jobs.morningjournal.com
jobs.nevadaappeal.com
jobs.newmedia-wi.com
jobs.news-herald.com
jobs.newsadvance.com
jobs.newspost.com
jobs.nola.com
jobs.nptelegraph.com
jobs.pilotonline.com
jobs.richmond.com
jobs.roanoke.com
jobs.sandiegouniontribune.com
jobs.seattletimes.com
jobs.shawlocal.com
jobs.sierrasun.com
jobs.staradvertiser.com
jobs.starherald.com
jobs.suntimes.com
jobs.tahoedailytribune.com
jobs.texarkanagazette.com
jobs.theeagle.com
jobs.thepilot.com
jobs.timesfreepress.com
jobs.toledoblade.com
jobs.triblive.com
jobs.tulsaworldjobs.com
jobs.wyomingnews.com
jobs.yorknewstimes.com
jobsarkansas.com
jobspot.abc-7.com
jobspot.nbc-2.com
midmocareers.com
northwest.jobsarkansas.com
pinebluff.jobsarkansas.com
southern.jobsarkansas.com
topworkplaces.reviewjournal.com
twp.denverpost.com
vt.omghired.com
wdrbehired.com
wi.omghired.com
www.carolinajobsnetwork.com
www.charlottesvillejobnetwork.com
www.coloradojobsource.com
www.gicareerfinder.com
www.heraldandnewsjobs.com
www.hiringpittsburgh.com
www.idahojobsnow.com
www.jobsarkansas.com
www.jobstexarkana.com
www.journalcareers.com
www.midmocareers.com
www.myshorejobs.com
www.nwajobfinder.com
www.oanowjobs.com
www.owhjobs.com
www.scnowjobs.com
www.swiowajobs.com
www.thinklocaljobs.com
www.tnvalleyjobfinder.com
www.tulsaworldjobs.com
www.wacotribjobs.com
www.wiregrass.jobs
www.yntjobseekers.com

Other certificates including the domain name denverpost.com

(limited to 100 certificates)
cdn-le4.arkadiumhosted.com
myaccount.mercurynews.com
dns-vetting1-jeffg-noah.map.fastly.net
denverpost.com
dns-vetting1m.map.fastly.net
jobs.bayareanewsgroup.com
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
dns-vetting1h.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1j.map.fastly.net
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
jobs.bayareanewsgroup.com
cdn-le4.arkadiumhosted.com
dfm.map.fastly.net
jobs.bayareanewsgroup.com
ads.denverpost.com
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1i.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
legacy.denverpost.com
twp.denverpost.com
dns-vetting1m.map.fastly.net
mylocal.denverpost.com
vpn.medianewsgroup.com
jobs.bayareanewsgroup.com
dfm.map.fastly.net
twp.denverpost.com
test.checkout.mercurynews.com
hiring.wandtv.com
test.myaccount.mercurynews.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
dfm.map.fastly.net
dev.myaccount.mercurynews.com
dns-vetting1m.map.fastly.net
promote.denverpost.com
businessdirectory.denverpost.com
blogs.denverpost.com
twp.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
ads.denverpost.com
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
jobs.bayareanewsgroup.com
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
denverpost.com
dptv.denverpost.com
dns-vetting1a.map.fastly.net
twp.denverpost.com
twp.denverpost.com
dfm.map.fastly.net
dfm.map.fastly.net
dfm.map.fastly.net
hiring.wandtv.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
games.denverpost.com
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
mg2access.mercurynews.com
hiring.wandtv.com
businessdirectory.denverpost.com
ssl.smugmug.com
dns-vetting1a.map.fastly.net
secure.www.denverpost.com
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
uploads.denverpost.com
ssl.smugmug.com

Certificate

The complete raw certificate details for twp.denverpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINLDCCDBSgAwIBAgISA5l4gmQOBzkr0EMnb+B56P5vMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MjAxMjI2NDdaFw0yMzA4MTgxMjI2NDZaMB0xGzAZBgNVBAMT
EnR3cC5kZW52ZXJwb3N0LmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABKqY
gi8mUEV+GI0qLetwjP5/Iorv6xKbUSLBwgcKJhAy33a1x0F+uihMq1BT8ZQVFMVl
5uMwELcGd96pf1ENvFGjggsaMIILFjAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIDn
vdOgzomk51sbQ7XKOnG0pCmVMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L
FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu
Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIII6AYD
VR0RBIII3zCCCNuCHmFsd2F5c2hpcmluZy5wcmVzc2RlbW9jcmF0LmNvbYIUY2Fy
ZWVycy5nb3NrYWdpdC5jb22CGGNhcmVlcnMuaGFtcHRvbnJvYWRzLmNvbYIbY2Fy
ZWVycy5oZXJhbGRtYWlsbWVkaWEuY29tghZjYXJlZXJzLmlkYWhvcHJlc3MuY29t
ggtkZWkuY2FyZWVyc4IaZGZ3aXNoaXJpbmcuZGFsbGFzbmV3cy5jb22CH2ZlYXR1
cmVkZW1wbG95ZXJzLm9rbGFob21hbi5jb22CJmZlYXR1cmVkZW1wbG95ZXJzLnNv
dXRoYmVuZHRyaWJ1bmUuY29tghpmZWF0dXJlZGpvYnMub2tsYWhvbWFuLmNvbYIh
ZmVhdHVyZWRqb2JzLnNvdXRoYmVuZHRyaWJ1bmUuY29tgh1oYXdhaWlqb2JzLnN0
YXJhZHZlcnRpc2VyLmNvbYIbaG90c3ByaW5ncy5qb2JzYXJrYW5zYXMuY29tghJq
b2JzLmFiYzE3bmV3cy5jb22CDGpvYnMuYWRuLmNvbYINam9icy5haHJuLmNvbYIX
am9icy5kZW1vY3JhdGhlcmFsZC5jb22CF2pvYnMuZnJlZGVyaWNrc2J1cmcuY29t
ghNqb2JzLmdvZGFucml2ZXIuY29tghNqb2JzLmdyZWVuc2Jvcm8uY29tghVqb2Jz
LmhhbXB0b25yb2Fkcy5jb22CFmpvYnMuaGVyYWxkYW5kbmV3cy5jb22CFmpvYnMu
aGVyYWxkY291cmllci5jb22CEmpvYnMuaG9iYnNuZXdzLmNvbYIVam9icy5ob3Rz
cHJpbmdzc3IuY29tghNqb2JzLmlkYWhvcHJlc3MuY29tghNqb2JzLmtlYXJuZXlo
dWIuY29tgg1qb2JzLmtlc3EuY29tgg1qb2JzLmtleXQuY29tghBqb2JzLmtpb241
NDYuY29tgg1qb2JzLmtyZG8uY29tgg1qb2JzLmt0dnouY29tgg1qb2JzLmt2aWEu
Y29tgg1qb2JzLmt5bWEuY29tghNqb2JzLmxvY2FsbmV3czguY29tghVqb2JzLmxv
dWRvdW50aW1lcy5jb22CHWpvYnMubWFydGluc3ZpbGxlYnVsbGV0aW4uY29tghdq
b2JzLm1vcm5pbmdqb3VybmFsLmNvbYIVam9icy5uZXZhZGFhcHBlYWwuY29tghRq
b2JzLm5ld21lZGlhLXdpLmNvbYIUam9icy5uZXdzLWhlcmFsZC5jb22CFGpvYnMu
bmV3c2FkdmFuY2UuY29tghFqb2JzLm5ld3Nwb3N0LmNvbYINam9icy5ub2xhLmNv
bYIUam9icy5ucHRlbGVncmFwaC5jb22CFGpvYnMucGlsb3RvbmxpbmUuY29tghFq
b2JzLnJpY2htb25kLmNvbYIQam9icy5yb2Fub2tlLmNvbYIdam9icy5zYW5kaWVn
b3VuaW9udHJpYnVuZS5jb22CFWpvYnMuc2VhdHRsZXRpbWVzLmNvbYISam9icy5z
aGF3bG9jYWwuY29tghJqb2JzLnNpZXJyYXN1bi5jb22CF2pvYnMuc3RhcmFkdmVy
dGlzZXIuY29tghNqb2JzLnN0YXJoZXJhbGQuY29tghFqb2JzLnN1bnRpbWVzLmNv
bYIaam9icy50YWhvZWRhaWx5dHJpYnVuZS5jb22CGWpvYnMudGV4YXJrYW5hZ2F6
ZXR0ZS5jb22CEWpvYnMudGhlZWFnbGUuY29tghFqb2JzLnRoZXBpbG90LmNvbYIX
am9icy50aW1lc2ZyZWVwcmVzcy5jb22CFGpvYnMudG9sZWRvYmxhZGUuY29tghFq
b2JzLnRyaWJsaXZlLmNvbYIXam9icy50dWxzYXdvcmxkam9icy5jb22CFGpvYnMu
d3lvbWluZ25ld3MuY29tghZqb2JzLnlvcmtuZXdzdGltZXMuY29tghBqb2JzYXJr
YW5zYXMuY29tghFqb2JzcG90LmFiYy03LmNvbYIRam9ic3BvdC5uYmMtMi5jb22C
EG1pZG1vY2FyZWVycy5jb22CGm5vcnRod2VzdC5qb2JzYXJrYW5zYXMuY29tghpw
aW5lYmx1ZmYuam9ic2Fya2Fuc2FzLmNvbYIZc291dGhlcm4uam9ic2Fya2Fuc2Fz
LmNvbYIfdG9wd29ya3BsYWNlcy5yZXZpZXdqb3VybmFsLmNvbYISdHdwLmRlbnZl
cnBvc3QuY29tgg92dC5vbWdoaXJlZC5jb22CDndkcmJlaGlyZWQuY29tgg93aS5v
bWdoaXJlZC5jb22CG3d3dy5jYXJvbGluYWpvYnNuZXR3b3JrLmNvbYIhd3d3LmNo
YXJsb3R0ZXN2aWxsZWpvYm5ldHdvcmsuY29tghl3d3cuY29sb3JhZG9qb2Jzb3Vy
Y2UuY29tghZ3d3cuZ2ljYXJlZXJmaW5kZXIuY29tghl3d3cuaGVyYWxkYW5kbmV3
c2pvYnMuY29tghh3d3cuaGlyaW5ncGl0dHNidXJnaC5jb22CFHd3dy5pZGFob2pv
YnNub3cuY29tghR3d3cuam9ic2Fya2Fuc2FzLmNvbYIVd3d3LmpvYnN0ZXhhcmth
bmEuY29tghZ3d3cuam91cm5hbGNhcmVlcnMuY29tghR3d3cubWlkbW9jYXJlZXJz
LmNvbYITd3d3Lm15c2hvcmVqb2JzLmNvbYIUd3d3Lm53YWpvYmZpbmRlci5jb22C
EXd3dy5vYW5vd2pvYnMuY29tgg93d3cub3doam9icy5jb22CEXd3dy5zY25vd2pv
YnMuY29tghJ3d3cuc3dpb3dham9icy5jb22CFnd3dy50aGlua2xvY2Fsam9icy5j
b22CGXd3dy50bnZhbGxleWpvYmZpbmRlci5jb22CFnd3dy50dWxzYXdvcmxkam9i
cy5jb22CFHd3dy53YWNvdHJpYmpvYnMuY29tghJ3d3cud2lyZWdyYXNzLmpvYnOC
FXd3dy55bnRqb2JzZWVrZXJzLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3ALc++yTfnE26dfI5xbpY9Gxd
/ELPep81xJ4dCYEl7bSZAAABiDlXXuQAAAQDAEgwRgIhAPE6HXWiD5BiR7EGQsOO
iv5uwdQdAekTQKYJAcGhoqEzAiEAwYMWbjX50zR5l3uCD4i7EXNhFHiWYESEXGx7
a8Gle7wAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYg5V170
AAAEAwBGMEQCIAUMFkhYo/tTnfI2ENgruTjJN3MYTUs1LEq/WjYTnRqxAiACBPLb
qolax6qylw1oTq0Ndl/cK2cohAFcYGk48vo/CTANBgkqhkiG9w0BAQsFAAOCAQEA
LseVsNNdRfvP0n1o+vJKbuecw9OpoAl5W7ehh95TYCVsbWrgrM/7gMMMDGdeu+QD
9kHVsdTEQyfHaDO0kV+Bi+Rm5R/KNrcf8Uby8mzMOvbMWXfAVBuH5TxR6AOKxNQJ
6rQ6kEzSfBiXXx4wQ297ZLhNenUMIeIz913CWeyaCtqS28UpKTq5vC13VeXD5oZq
aaFpOeYNruGIVVaiVgF26+VQF45LB9sKrsK1aSKc5Vfa1Knm1O7fMGLWyQGnBLGr
w9HEOT//CTQeAI7CrKqEud4ouiM5RFS/er3w94+f58QYby8ATIZcohln1njbwy3P
hz7L1rWRsQpYhACd3aLz/A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEqpiCLyZQRX4YjSot63CM/n8iiu/r
EptRIsHCBwomEDLfdrXHQX66KEyrUFPxlBUUxWXm4zAQtwZ33ql/UQ28UQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313560244321622514433218910316854610820719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-20 12:26:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 12:26:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twp.denverpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004aa98822f2650457e188d2a2deb708cfe7f228aefeb129b5122c1c2070a261032df76b5c7417eba284cab5053f1941514c565e6e33010b70677dea97f510dbc51
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80e7bdd3a0ce89a4e75b1b43b5ca3a71b4a42995
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwayshiring.pressdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.goskagit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.hamptonroads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.heraldmailmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.idahopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dei.careers'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwishiring.dallasnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featuredemployers.oklahoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featuredemployers.southbendtribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featuredjobs.oklahoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featuredjobs.southbendtribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiijobs.staradvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotsprings.jobsarkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.abc17news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.adn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.ahrn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.democratherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.fredericksburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.godanriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.greensboro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.hamptonroads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.heraldandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.heraldcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.hobbsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.hotspringssr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.idahopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.kearneyhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.kesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.keyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.kion546.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.krdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.ktvz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.kvia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.kyma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.localnews8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.loudountimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.martinsvillebulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.morningjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.nevadaappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.newmedia-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.news-herald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.newsadvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.newspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.nptelegraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.richmond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.roanoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.sandiegouniontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.seattletimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.shawlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.sierrasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.staradvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.starherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.suntimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.tahoedailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.texarkanagazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.theeagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.thepilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.timesfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.toledoblade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.triblive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.tulsaworldjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.wyomingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yorknewstimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsarkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobspot.abc-7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobspot.nbc-2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midmocareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwest.jobsarkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinebluff.jobsarkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southern.jobsarkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topworkplaces.reviewjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twp.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vt.omghired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdrbehired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wi.omghired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carolinajobsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charlottesvillejobnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradojobsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gicareerfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heraldandnewsjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiringpittsburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahojobsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobsarkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobstexarkana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journalcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midmocareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myshorejobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwajobfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oanowjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.owhjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scnowjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swiowajobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinklocaljobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tnvalleyjobfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulsaworldjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wacotribjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiregrass.jobs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yntjobseekers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018839575ee40000040300483046022100f13a1d75a20f906247b10642c38e8afe6ec1d41d01e91340a60901c1a1a2a133022100c183166e35f9d33479977b820f88bb1173611478966044845c6c7b6bc1a57bbc0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018839575ef400000403004630440220050c164858a3fb539df23610d82bb938c93773184d4b352c4abf5a36139d1ab102200204f2dbaa895ac7aab2970d684ead0d765fdc2b672884015c606938f2fa3f09
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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