tronc.api.arc-cdn.net

Issued by R3

About this certificate

This digital certificate with serial number 04:96:1e:c3:78:16:b0:28:e4:60:5b:e6:0b:54:e6:00:48:78 was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tronc.api.arc-cdn.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:96:1e:c3:78:16:b0:28:e4:60:5b:e6:0b:54:e6:00:48:78
Serial Number (int): 399532390538629408684329141919595743955064
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 61:46:c6:a1:7d:ef:24:07:e0:73:a8:70:6a:66:71:d0:7c:58:95:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:b0:20:ce:51:85:b8:1c:69:f7:9c:21:85:11:85:29:90:90:70:87
Fingerprint (sha256): 18:9d:ac:44:38:59:cf:bc:d4:6e:e5:d8:53:1f:1a:73:0f:3f:87:26:7a:41:54:fe:91:1c:50:53:56:dc:5e:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tronc.api.arc-cdn.net

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tronc.api.arc-cdn.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arc.capitalgazette-s-sb.trbdevcloud.com
arc.capitalgazette-s-sg.trbdevcloud.com
arc.capitalgazette-sb.trbdevcloud.com
arc.capitalgazette-sg.trbdevcloud.com
arc.capitalgazette-stage.trbdevcloud.com
arc.chicagotribune-s-sb.trbdevcloud.com
arc.chicagotribune-s-sg.trbdevcloud.com
arc.chicagotribune-sb.trbdevcloud.com
arc.chicagotribune-sg.trbdevcloud.com
arc.chicagotribune-stage.trbdevcloud.com
arc.courant-s-sb.trbdevcloud.com
arc.courant-s-sg.trbdevcloud.com
arc.courant-sb.trbdevcloud.com
arc.courant-sg.trbdevcloud.com
arc.courant-stage.trbdevcloud.com
arc.dailypress-s-sb.trbdevcloud.com
arc.dailypress-s-sg.trbdevcloud.com
arc.dailypress-sb.trbdevcloud.com
arc.dailypress-sg.trbdevcloud.com
arc.dailypress-stage.trbdevcloud.com
arc.mcall-s-sb.trbdevcloud.com
arc.mcall-s-sg.trbdevcloud.com
arc.mcall-sb.trbdevcloud.com
arc.mcall-sg.trbdevcloud.com
arc.mcall-stage.trbdevcloud.com
arc.nydailynews-s-sb.trbdevcloud.com
arc.nydailynews-s-sg.trbdevcloud.com
arc.nydailynews-sb.trbdevcloud.com
arc.nydailynews-sg.trbdevcloud.com
arc.nydailynews-stage.trbdevcloud.com
arc.orlandosentinel-s-sb.trbdevcloud.com
arc.orlandosentinel-s-sg.trbdevcloud.com
arc.orlandosentinel-sb.trbdevcloud.com
arc.orlandosentinel-sg.trbdevcloud.com
arc.orlandosentinel-stage.trbdevcloud.com
arc.sun-sentinel-s-sb.trbdevcloud.com
arc.sun-sentinel-s-sg.trbdevcloud.com
arc.sun-sentinel-sb.trbdevcloud.com
arc.sun-sentinel-sg.trbdevcloud.com
arc.sun-sentinel-stage.trbdevcloud.com
fusion.capitalgazette.com
fusion.chicagotribune.com
fusion.courant.com
fusion.dailypress.com
fusion.mcall.com
fusion.nydailynews.com
fusion.orlandosentinel.com
fusion.sun-sentinel.com
s.capitalgazette.com
s.chicagotribune.com
s.courant.com
s.dailypress.com
s.mcall.com
s.nydailynews.com
s.orlandosentinel.com
s.sun-sentinel.com
theme.capitalgazette-dev.trbdevcloud.com
theme.capitalgazette-stage.trbdevcloud.com
theme.chicagotribune-dev.trbdevcloud.com
theme.chicagotribune-stage.trbdevcloud.com
theme.courant-dev.trbdevcloud.com
theme.courant-stage.trbdevcloud.com
theme.dailypress-dev.trbdevcloud.com
theme.dailypress-stage.trbdevcloud.com
theme.mcall-dev.trbdevcloud.com
theme.mcall-stage.trbdevcloud.com
theme.nydailynews-dev.trbdevcloud.com
theme.nydailynews-stage.trbdevcloud.com
theme.orlandosentinel-dev.trbdevcloud.com
theme.orlandosentinel-stage.trbdevcloud.com
theme.sun-sentinel-dev.trbdevcloud.com
theme.sun-sentinel-stage.trbdevcloud.com
tronc.api.arc-cdn.net
www.capitalgazette.com
www.chicagotribune.com
www.courant.com
www.dailypress.com
www.mcall.com
www.nydailynews.com
www.orlandosentinel.com
www.sun-sentinel.com

Other certificates including the domain name arc-cdn.net

(limited to 100 certificates)
arcmarketing.web.arc-cdn.net
metroworldnews.web.arc-cdn.net
thenational.web.arc-cdn.net
octane.web.arc-cdn.net
gray5.web.arc-cdn.net
prisaradioco.web.arc-cdn.net
radiomitre.web.arc-cdn.net
avalonbay.web.arc-cdn.net
prisaradiomx.web.arc-cdn.net
culturacolectiva.web.arc-cdn.net
elfinanciero.web.arc-cdn.net
archetype.web.arc-cdn.net
ipmgroup2.web.arc-cdn.net
coindesk.web.arc-cdn.net
avalonbay.web.arc-cdn.net
cmg.web.arc-cdn.net
ipmgroup2.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
newr7.web.arc-cdn.net
gray2.web.arc-cdn.net
lanacionpy.web.arc-cdn.net
diarioas.web.arc-cdn.net
coindesk.api.arc-cdn.net
lanacionar.web.arc-cdn.net
avalonbay.web.arc-cdn.net
larazon.api.arc-cdn.net
grupoclarin.web.arc-cdn.net
diarioas.api.arc-cdn.net
rtl.web.arc-cdn.net
radiomitre.web.arc-cdn.net
gray2.web.arc-cdn.net
coindeskdev2.web.arc-cdn.net
irishtimes.web.arc-cdn.net
elcomercio.web.arc-cdn.net
coxohio.web.arc-cdn.net
shawmedia.web.arc-cdn.net
opb.web.arc-cdn.net
coindesk.web.arc-cdn.net
grupoclarin.web.arc-cdn.net
mna.web.arc-cdn.net
cmg2.web.arc-cdn.net
culturacolectiva.web.arc-cdn.net
artear.web.arc-cdn.net
ipmgroup2.web.arc-cdn.net
diarioas.web.arc-cdn.net
pmn.web.arc-cdn.net
mentormedier.web.arc-cdn.net
prisa.web.arc-cdn.net
advancelocal.web.arc-cdn.net
elcomercio.web.arc-cdn.net
prisaradiolos40.web.arc-cdn.net
elespectador.web.arc-cdn.net
prisaradioco.web.arc-cdn.net
web.arc-cdn.net
eluniverso.web.arc-cdn.net
gray4.web.arc-cdn.net
octane.web.arc-cdn.net
cmg2.web.arc-cdn.net
mna.web.arc-cdn.net
octane.web.arc-cdn.net
gmg.web.arc-cdn.net
ajc.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
tgam.web.arc-cdn.net
avalonbay.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
sfr.web.arc-cdn.net
elcomercio.web.arc-cdn.net
coindeskuat.api.arc-cdn.net
elfinanciero.web.arc-cdn.net
tbt.web.arc-cdn.net
tronc.api.arc-cdn.net
cmg2.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
cmg.web.arc-cdn.net
mna.web.arc-cdn.net
ajc.web.arc-cdn.net
archetype.web.arc-cdn.net
coindeskdev1.web.arc-cdn.net
avalonbay.web.arc-cdn.net
avalonbay.web.arc-cdn.net
spectator.web.arc-cdn.net
leparisien.web.arc-cdn.net
cmg.web.arc-cdn.net
lexpress.web.arc-cdn.net
prisaradioco.web.arc-cdn.net
gray2.web.arc-cdn.net
gray4.web.arc-cdn.net
avalonbay.web.arc-cdn.net
metroworldnews.web.arc-cdn.net
raycom.web.arc-cdn.net
thenational.web.arc-cdn.net
advancelocalthemes.web.arc-cdn.net
gfrmedia.web.arc-cdn.net
arcmarketing.web.arc-cdn.net
copesa.api.arc-cdn.net
elfinanciero.web.arc-cdn.net
civicnewscompany.web.arc-cdn.net
elcomercio.web.arc-cdn.net
lexpress.web.arc-cdn.net

Certificate

The complete raw certificate details for tronc.api.arc-cdn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/r26vb+u5Lj3cC64tYf
TRUbj6PdmRXqg267qu4HWqXzEdctAn75AJHLMOCWZMYBVZxRyDpZUZjZhlwQipTa
zM5SOZUrvp/JJMFfcSRW9+aHenZOpYFQaIIAD+Nnh+Qb7bGaKBIixrgZm1wTSB2/
TrQXxLIbp4iCW1CosctaIle2RGAJimhtozZ9ug93dKlDa0TvhdkEW0RCU7B8OBLS
YgWtsFbNE9qfRpNcUo7mKzSvbRfYiaGRspwqFiv+gS8NJz+Nl5sQFEE0K0FxMRhq
vDbx7RHpMtlTCxB8RbarGgNFBxmdZOaGv9cBvG2XQyyCJnckmxE0pvqzErZoBaEE
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399532390538629408684329141919595743955064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-07 13:03:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-05 13:03:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tronc.api.arc-cdn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27769944006169174175703714839832525251297551604095588228004732993759093476388163090926691346612664766994992375104452839480351171510653169739686809490432088853405332687887398636483493288776022151510086410040143439981873441149111572958083752742761265651083212430763715711040515147255260773052208343930643245448132031177035755312380495330573376200362411624776134500838991089569935711067491012202300714191267679602072760518822320919565991789514116583158332681087172642499224473998407922518206211861237967659001661247447241199157170535503333128817665914296363997091319299680591790904322674131498423614990321834336207307887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6146c6a17def2407e073a8706a6671d07c5895bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2675 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.capitalgazette-s-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.capitalgazette-s-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.capitalgazette-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.capitalgazette-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.capitalgazette-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.chicagotribune-s-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.chicagotribune-s-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.chicagotribune-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.chicagotribune-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.chicagotribune-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.courant-s-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.courant-s-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.courant-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.courant-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.courant-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.dailypress-s-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.dailypress-s-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.dailypress-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.dailypress-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.dailypress-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.mcall-s-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.mcall-s-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.mcall-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.mcall-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.mcall-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.nydailynews-s-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.nydailynews-s-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.nydailynews-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.nydailynews-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.nydailynews-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.orlandosentinel-s-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.orlandosentinel-s-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.orlandosentinel-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.orlandosentinel-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.orlandosentinel-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.sun-sentinel-s-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.sun-sentinel-s-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.sun-sentinel-sb.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.sun-sentinel-sg.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.sun-sentinel-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.capitalgazette-dev.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.capitalgazette-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.chicagotribune-dev.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.chicagotribune-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.courant-dev.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.courant-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.dailypress-dev.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.dailypress-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.mcall-dev.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.mcall-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.nydailynews-dev.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.nydailynews-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.orlandosentinel-dev.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.orlandosentinel-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.sun-sentinel-dev.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theme.sun-sentinel-stage.trbdevcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tronc.api.arc-cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sun-sentinel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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