937thefan.cbslocal.com

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:a2:c6:61:0b:04:2f:27:04:ee:9d:08:5c:17:e6:8a:81:63 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=937thefan.cbslocal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a2:c6:61:0b:04:2f:27:04:ee:9d:08:5c:17:e6:8a:81:63
Serial Number (int): 142501720392350980205890613781463317512547
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: a8:e7:0b:a1:e1:6e:8a:af:44:67:7f:6c:3e:84:4d:46:25:81:cc:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:ed:33:4a:23:8f:31:52:81:19:59:b1:12:7c:62:f8:06:b6:bf:6e
Fingerprint (sha256): 19:10:ce:20:94:41:13:23:e9:79:17:fb:38:92:70:a4:7d:2f:65:97:05:c4:03:54:da:68:65:ef:6a:f2:d7:82

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate 937thefan.cbslocal.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 937thefan.cbslocal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1067thefandc.cbslocal.com
detroit.cbslocal.com
washington.cbslocal.com
houston.cbslocal.com
cwseattle.cbslocal.com
hothits957.cbslocal.com
newyork.cbslocal.com
kmox.cbslocal.com
kikk.cbslocal.com
kfwb.cbslocal.com
wwj.cbslocal.com
sk8thest8s.cbslocal.com
cbsimusic.cbslocal.com
kxnt.cbslocal.com
stlouis.cbslocal.com
hartford.cbslocal.com
lasvegas.cbslocal.com
klli.cbslocal.com
charlotte.cbslocal.com
cwphilly.cbslocal.com
kptk.cbslocal.com
cbsinlandempire.cbslocal.com
cwatlanta.cbslocal.com
b96.cbslocal.com
wbz.cbslocal.com
philadelphia.cbslocal.com
dallas.cbslocal.com
seattle.cbslocal.com
kluc.cbslocal.com
tampa.cbslocal.com
downtownfoodandwinefest.cbslocal.com
kmle108.cbslocal.com
minneapolis.cbslocal.com
cwpittsburgh.cbslocal.com
amp.cbslocal.com
cwtampa.cbslocal.com
chicago.cbslocal.com
kyw.cbslocal.com
connecticut.cbslocal.com
610wip.cbslocal.com
boston.cbslocal.com
997now.cbslocal.com
937thefan.cbslocal.com
kdka.cbslocal.com
sanfrancisco.cbslocal.com
baltimore.cbslocal.com
985thesportshub.cbslocal.com
campaign2010.cbslocal.com
cwsacramento.cbslocal.com
cwdetroit.cbslocal.com
losangeles.cbslocal.com
pittsburgh.cbslocal.com
wxyt.cbslocal.com
americastalk1660.cbslocal.com
minnesota.cbslocal.com
atlanta.cbslocal.com
dfw.cbslocal.com
wfnz.cbslocal.com
waok.cbslocal.com
krld.cbslocal.com
kcbs.cbslocal.com
wtic.cbslocal.com
1015jamz.cbslocal.com
wscr.cbslocal.com
1053thefan.cbslocal.com
kiss951.cbslocal.com
1057thefan.cbslocal.com
910espn.cbslocal.com
cwbayarea.cbslocal.com
wbbm.cbslocal.com
sacramento.cbslocal.com
miami.cbslocal.com
cleveland.cbslocal.com
987ampradio.cbslocal.com
wpht.cbslocal.com
khtk.cbslocal.com
denver.cbslocal.com
gooddaysacramento.cbslocal.com
wcco.cbslocal.com
cwsanfrancisco.cbslocal.com

Other certificates including the domain name cbslocal.com

(limited to 100 certificates)
kezk.cbslocal.com
cbslocal.com
enewsadmin.cbslocal.com
viacomcbs.com
offers.cbslocal.com
br.bikeradar.com
sacramento.cbslocal.com
device-feeds.cbslocal.com
enewsscrape.cbslocal.com
mobileapi.cbslocal.com
br.bikeradar.com
jira.cbslocal.com
detroit.cbslocal.com
newyork.cbslocal.com
*.cbslocal.com
cleveland.cbslocal.com
dfw.cbslocal.com
connecticut.cbslocal.com
cwtampa.cbslocal.com
preprod.mobileapi.cbslocal.com
cwatlanta.cbslocal.com
viacomcbs.com
chicago.cbslocal.com
*.cbslocal.com
dfw.cbslocal.com
enewsadmin.cbslocal.com
tampa.cbslocal.com
br.bikeradar.com
www.gfrealfood.com
viacomcbs.com
wsivideofeed.cbslocal.com
937thefan.cbslocal.com
*.cbslocal.com
offers.cbslocal.com
*.cbslocal.com
jira.cbslocal.com
atlanta.cbslocal.com
cwseattle.cbslocal.com
dallas.cbslocal.com
enewsscrape.cbslocal.com
cwsanfrancisco.cbslocal.com
br.bikeradar.com
miami.cbslocal.com
mms.cbslocal.com
device-feeds.cbslocal.com
enewsscrape.cbslocal.com
br.bikeradar.com
br.bikeradar.com
enewsscrape.cbslocal.com
*.cbslocal.com
*.cbslocal.com
enewsadmin.cbslocal.com
tampa.cbslocal.com
enewsscrape.cbslocal.com
device-feeds.cbslocal.com
*.cbslocal.com
tls.automattic.com
cwdetroit.cbslocal.com
viacomcbs.com
cwdetroit.cbslocal.com
echo-feeds.cbslocal.com
viacomcbs.com
tampa.cbslocal.com
mms.cbslocal.com
stlouis.cbslocal.com
mms.cbslocal.com
my.cbslocal.com
br.bikeradar.com
viacomcbs.com
gooddaysacramento.cbslocal.com
tampa.cbslocal.com
br.bikeradar.com
viacomcbs.com
tampa.cbslocal.com
preprod.yourday.cbslocal.com
tampa.cbslocal.com
br.bikeradar.com
br.bikeradar.com
admin.groupcommerce.com
stlouis.cbslocal.com
*.cbslocal.com
cbslocal.com
philadelphia.cbslocal.com
br.bikeradar.com
device-feeds.cbslocal.com
lasvegas.cbslocal.com
cdn.audioadcenter.com
cwatlanta.cbslocal.com
mms.cbslocal.com
cwsacramento.cbslocal.com
preprod.cbslocal.com
br.bikeradar.com
device-feeds.cbslocal.com
viacomcbs.com
device-feeds.cbslocal.com
dfw.cbslocal.com
washington.cbslocal.com
denver.cbslocal.com
*.cbslocal.com
mobileapi.cbslocal.com

Certificate

The complete raw certificate details for 937thefan.cbslocal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygv+nmXmqlFMaUEiePgF
QWwQgNzVJUqHbTY8eljzMZ7il7Vz8zvY9IYG7WLoZtOH6qrx9xQFmtxnk207ssco
/68MzxGxuY/K6l7N5tQNWo0usr6L0P1qO9zWcUpFAqgN73UeTS7mCXyZwarNhxVS
RM9xkXNKhQbI4RZebs6XHSkEo2vwIf71RJBAOXztwn+0A+Op2p3wlKIZD7h6fUE5
lwtvHg8P7nODtdkLETVq9TxNZiXeCTqMUd0j1AvGobKZ3drhIZVuwU1NX5gwRiH7
gfU2avQ2Ax9uWeVWZfgqKhZyXbgQzlCvHSOKNu4A7r6ebxGlkDCyl4kSpmeDsO2T
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 142501720392350980205890613781463317512547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-16 20:38:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-15 20:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '937thefan.cbslocal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25506052363050394922841585203549963023205650076444530188701959280741982090430347141821406276800590330307236992608249808190310036554717887299682173912712791283619464094135533503121617012715976179741137357179354736218045861864125354714728084734745394086961153028177694474981912421400570730671723754753185828590790665583153975544484709834356003116611584210769391617191556608236267651696955936584899557075605192978078354097540003307956376790279607939651805854798321671458187290853289784614429431798061505699704806447247783518121645094122756795431559191049046147633677407420392471745354144917956800760069918843493059236623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8e70ba1e16e8aaf44677f6c3e844d462581cc3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1822 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1067thefandc.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detroit.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houston.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwseattle.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hothits957.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyork.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmox.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikk.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfwb.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwj.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk8thest8s.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsimusic.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kxnt.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouis.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartford.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegas.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klli.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlotte.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwphilly.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kptk.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsinlandempire.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwatlanta.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b96.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbz.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philadelphia.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallas.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattle.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kluc.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tampa.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downtownfoodandwinefest.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmle108.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneapolis.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwpittsburgh.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtampa.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyw.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticut.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '610wip.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boston.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '997now.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '937thefan.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdka.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfrancisco.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltimore.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '985thesportshub.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign2010.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwsacramento.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwdetroit.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangeles.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittsburgh.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wxyt.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americastalk1660.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesota.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfw.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfnz.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waok.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krld.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcbs.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtic.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1015jamz.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wscr.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1053thefan.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiss951.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1057thefan.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '910espn.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwbayarea.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbbm.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacramento.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miami.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleveland.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '987ampradio.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpht.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khtk.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gooddaysacramento.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcco.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwsanfrancisco.cbslocal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0003b79e4479f86a666c65f363c2f7542c7222f1c63962a331d73090d26d829fe6bdac95a34c9c492a5c7c7c6f09c253358082e339355b01fcedd3d2b85dd55ef099b2dc99462758320f6b933fc43e13fc6354185a05687ca3c89137053eaa71aa0803c7fa3278533c3b0bc1fe0ac5152c8ea3cfae87caf8e2e7d34e563a8ad9e6ce931d57cc11d85e6647ed2cc85841a4d2b15767ed9d07f25a47f13c91e445cc6046cb83c41a9cf69a9b5c42a22490a34e1fd7ec8bee89d0985fe79c6cd83bcfb864c438c94fe9732fa2545a69eb9eb54b377b15644fe363f4a37fd0f5fa230b56f55adc6a825448fb3ad44d04f150428fa862390588c2c5f774a4c1341cf15c