customer.localedge.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fa:34:a0:dc:e7:44:f0:ea:25:da:fa:1a:5b:cc:b7:76:60 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=customer.localedge.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fa:34:a0:dc:e7:44:f0:ea:25:da:fa:1a:5b:cc:b7:76:60
Serial Number (int): 433589690561006938222909992418249362863712
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:18:3c:18:4a:52:95:a3:fc:c7:13:4c:5c:1f:0d:e0:67:96:a7:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:e0:cc:3b:13:1c:36:d2:ad:db:fb:b2:9e:3e:91:94:cb:f8:b1:13
Fingerprint (sha256): 1a:2c:ec:fd:44:dc:a2:cf:68:cf:63:38:ba:46:11:e0:7b:26:28:95:c5:1d:ef:ab:26:cf:28:f6:0b:ed:82:e1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate customer.localedge.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customer.localedge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

customer.4029tv.com
customer.archantlocalimpact.co.uk
customer.baltimoresun.com
customer.beaumontenterprise.com
customer.brandaccomplished.com
customer.chicagotribune.com
customer.chron.com
customer.dailynewsdigital.com
customer.dallasnews.com
customer.digitalsensemarketing.net
customer.hartfordcourantcontentsolutions.com
customer.hearstmediact.com
customer.hearstmediamidwest.com
customer.hearstmediaservices.com
customer.kcci.com
customer.kcra.com
customer.ketv.com
customer.kitv.com
customer.kmbc.com
customer.koat.com
customer.koco.com
customer.ksbw.com
customer.l2digitalmarketing.com
customer.lmtonline.com
customer.localedge.com
customer.mcall.com
customer.mor-tv.com
customer.morrismedianetwork.com
customer.mrt.com
customer.mynbc5.com
customer.myplainview.com
customer.mysanantonio.com
customer.newsdayconnect.com
customer.orlandosentinel.com
customer.pomoroi.com
customer.sageisland.com
customer.seattlepi.com
customer.sfgate.com
customer.sheddinglightadvertising.com
customer.startribune.com
customer.statsdigital.com
customer.stingraybranding.com
customer.sun-sentinel.com
customer.tidewaterconnect.com
customer.timesunion.com
customer.ttmarketsmart.com
customer.tyjcreative.net
customer.vizelladigital.com
customer.wapt.com
customer.wbaltv.com
customer.wcvb.com
customer.wdsu.com
customer.wesh.com
customer.wgal.com
customer.wisn.com
customer.wjcl.com
customer.wlky.com
customer.wlwt.com
customer.wmtw.com
customer.wmur.com
customer.wpbf.com
customer.wtae.com
customer.wvtm13.com
customer.wxii12.com
customer.wyff4.com

Other certificates including the domain name localedge.com

(limited to 100 certificates)
customer.localedge.com
anchorbar.aws.localedge.com
*.localedge.com
customer.localedge.com
customer.localedge.com
prism.localedge.com
admin-aws.localedge.com
prism.localedge.com
prism.localedge.com
local.localedge.com
*.localedge.com
customer.localedge.com
cwa.hearstsc.com
local.localedge.com
customer.localedge.com
internetmarketing.localedge.com
gogregoldham.aws.localedge.com
prism.localedge.com
customer.localedge.com
francospizza.aws.localedge.com
internetmarketing-aws.localedge.com
customer.localedge.com
customer.localedge.com
mdis.localedge.com
localedge.com
analytics.localedge.com
customer.localedge.com
prism-qa.localedge.com
direct.sofia.edu
*.localedge.com
analytics.localedge.com
customer.localedge.com
gagpestcontrol.aws.localedge.com
direct.sofia.edu
customer.localedge.com
customer.localedge.com
*.localedge.com
icampaign.localedge.com
prism.localedge.com
icampaign.localedge.com
www-aws.localedge.com
rcltlyncfepool.hearstsc.com
local.localedge.com
analytics.localedge.com
icanhazip.localedge.com
siplync.hearstsc.com
prism.localedge.com
ocs.hearstsc.com
mdis.localedge.com
careers-aws.localedge.com
*.localedge.com
reseller.localedge.com
*.localedge.com
beddingbarn.aws.localedge.com
prism.localedge.com
prism.localedge.com
customer.localedge.com
prism-staging.localedge.com
customer.localedge.com
themouldingcompany.aws.localedge.com
mdis.localedge.com
*.localedge.com
customer.localedge.com
icampaign.localedge.com
prism.localedge.com
opt-aws.localedge.com
brakeworld.aws.localedge.com
customer.localedge.com
prism.localedge.com
hearstdms.aws.localedge.com
customer.localedge.com
mdis.localedge.com
customer.localedge.com
direct.sofia.edu
customer.localedge.com
*.localedge.com
analytics.localedge.com
analytics.localedge.com
careers.localedge.com
analytics.localedge.com
ocsext.hearstsc.com
customer.localedge.com
prism.localedge.com
prism-qa.localedge.com
customer.4029tv.com
allure.aws.localedge.com
mdis.localedge.com
asigymnastics.aws.localedge.com
prism-staging.localedge.com
mdis.localedge.com
prism.localedge.com
local.localedge.com
local.localedge.com
prism.localedge.com
prism.localedge.com
*.localedge.com

Certificate

The complete raw certificate details for customer.localedge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILXzCCCkegAwIBAgISBPo0oNznRPDqJdr6GlvMt3ZgMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA3MjYxMTA0MDNaFw0yMjEwMjQxMTA0MDJaMCExHzAdBgNVBAMT
FmN1c3RvbWVyLmxvY2FsZWRnZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCw42mgV/QSTv8FS3ovMBfUm+OwtkHejZY2C7CN/tmpd5CirpIGrGhJ
y+i10A/h1aYHmxDBGVEjOLq+T+aVGPuHPae8LdeyQtZBDX4DyFEhjX1tFRO1i3+L
JDOLjg1+VBaBFF1qeyK8ZD7LlBubomwrYBs0KzLT6a7LVV2aLLhoZ8zqv0Jh21G0
tBUJFcWg6dlQJ+pqiuVjmI6vRvgFylzLD3xnIEUcj6XSAc9abHCkO6x9q8PjGOSf
fcFsnx3QPch1hZBNBIrVmsXeEOqKU8RLxFwQyQUZCsVBWm55rAuwP8dYQx6X4uA7
paaVp5GidFchcDiDOsZLSaeU0Qyrz8O9AgMBAAGjggh+MIIIejAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFP8YPBhKUpWj/McTTFwfDeBnlqdrMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIIGTAYDVR0RBIIGQzCCBj+CE2N1c3RvbWVyLjQwMjl0di5jb22C
IWN1c3RvbWVyLmFyY2hhbnRsb2NhbGltcGFjdC5jby51a4IZY3VzdG9tZXIuYmFs
dGltb3Jlc3VuLmNvbYIfY3VzdG9tZXIuYmVhdW1vbnRlbnRlcnByaXNlLmNvbYIe
Y3VzdG9tZXIuYnJhbmRhY2NvbXBsaXNoZWQuY29tghtjdXN0b21lci5jaGljYWdv
dHJpYnVuZS5jb22CEmN1c3RvbWVyLmNocm9uLmNvbYIdY3VzdG9tZXIuZGFpbHlu
ZXdzZGlnaXRhbC5jb22CF2N1c3RvbWVyLmRhbGxhc25ld3MuY29tgiJjdXN0b21l
ci5kaWdpdGFsc2Vuc2VtYXJrZXRpbmcubmV0gixjdXN0b21lci5oYXJ0Zm9yZGNv
dXJhbnRjb250ZW50c29sdXRpb25zLmNvbYIaY3VzdG9tZXIuaGVhcnN0bWVkaWFj
dC5jb22CH2N1c3RvbWVyLmhlYXJzdG1lZGlhbWlkd2VzdC5jb22CIGN1c3RvbWVy
LmhlYXJzdG1lZGlhc2VydmljZXMuY29tghFjdXN0b21lci5rY2NpLmNvbYIRY3Vz
dG9tZXIua2NyYS5jb22CEWN1c3RvbWVyLmtldHYuY29tghFjdXN0b21lci5raXR2
LmNvbYIRY3VzdG9tZXIua21iYy5jb22CEWN1c3RvbWVyLmtvYXQuY29tghFjdXN0
b21lci5rb2NvLmNvbYIRY3VzdG9tZXIua3Nidy5jb22CH2N1c3RvbWVyLmwyZGln
aXRhbG1hcmtldGluZy5jb22CFmN1c3RvbWVyLmxtdG9ubGluZS5jb22CFmN1c3Rv
bWVyLmxvY2FsZWRnZS5jb22CEmN1c3RvbWVyLm1jYWxsLmNvbYITY3VzdG9tZXIu
bW9yLXR2LmNvbYIfY3VzdG9tZXIubW9ycmlzbWVkaWFuZXR3b3JrLmNvbYIQY3Vz
dG9tZXIubXJ0LmNvbYITY3VzdG9tZXIubXluYmM1LmNvbYIYY3VzdG9tZXIubXlw
bGFpbnZpZXcuY29tghljdXN0b21lci5teXNhbmFudG9uaW8uY29tghtjdXN0b21l
ci5uZXdzZGF5Y29ubmVjdC5jb22CHGN1c3RvbWVyLm9ybGFuZG9zZW50aW5lbC5j
b22CFGN1c3RvbWVyLnBvbW9yb2kuY29tghdjdXN0b21lci5zYWdlaXNsYW5kLmNv
bYIWY3VzdG9tZXIuc2VhdHRsZXBpLmNvbYITY3VzdG9tZXIuc2ZnYXRlLmNvbYIl
Y3VzdG9tZXIuc2hlZGRpbmdsaWdodGFkdmVydGlzaW5nLmNvbYIYY3VzdG9tZXIu
c3RhcnRyaWJ1bmUuY29tghljdXN0b21lci5zdGF0c2RpZ2l0YWwuY29tgh1jdXN0
b21lci5zdGluZ3JheWJyYW5kaW5nLmNvbYIZY3VzdG9tZXIuc3VuLXNlbnRpbmVs
LmNvbYIdY3VzdG9tZXIudGlkZXdhdGVyY29ubmVjdC5jb22CF2N1c3RvbWVyLnRp
bWVzdW5pb24uY29tghpjdXN0b21lci50dG1hcmtldHNtYXJ0LmNvbYIYY3VzdG9t
ZXIudHlqY3JlYXRpdmUubmV0ghtjdXN0b21lci52aXplbGxhZGlnaXRhbC5jb22C
EWN1c3RvbWVyLndhcHQuY29tghNjdXN0b21lci53YmFsdHYuY29tghFjdXN0b21l
ci53Y3ZiLmNvbYIRY3VzdG9tZXIud2RzdS5jb22CEWN1c3RvbWVyLndlc2guY29t
ghFjdXN0b21lci53Z2FsLmNvbYIRY3VzdG9tZXIud2lzbi5jb22CEWN1c3RvbWVy
LndqY2wuY29tghFjdXN0b21lci53bGt5LmNvbYIRY3VzdG9tZXIud2x3dC5jb22C
EWN1c3RvbWVyLndtdHcuY29tghFjdXN0b21lci53bXVyLmNvbYIRY3VzdG9tZXIu
d3BiZi5jb22CEWN1c3RvbWVyLnd0YWUuY29tghNjdXN0b21lci53dnRtMTMuY29t
ghNjdXN0b21lci53eGlpMTIuY29tghJjdXN0b21lci53eWZmNC5jb20wTAYDVR0g
BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dQDfpV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAAAYI6ZIiXAAAEAwBG
MEQCIG464uZEh2rttG46Eds/on+pUpyEhkBaUpS5Gl0i0VVmAiApB4HziBKU5PYM
NDSOztvucoUMi937v5NuOIktDDbUHQB3ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4
+U1dJlwlXceEAAABgjpkiIsAAAQDAEgwRgIhAK6FA9YQIAMvGEFvYzgVHYTWHxe+
11atk/wNF1eAw/qwAiEA8sJVh61xC/iqMKrTXSWcP+WJUDFI42W64pXXoOT6Tikw
DQYJKoZIhvcNAQELBQADggEBAJhoOj9dYDzfW31PRGhwzEbsKrmMoyb0JKuy9TZX
V6JVPoBtD+/YN9lj2lSW09G1pUQQBbvNCiQarQjU++tj+bZpL2MStIP/VZrdNkMm
ltFP2scC2a3iKYUnT4tdwtWDr7NVDTftEqjeu8c8Y4mO0YW4bSZmejEXgdL4ZbYo
vyp8AdGb/ncxepcdhk/h/QsvsqesQjBl8Z4wfTxuaAnSOBqY3wEJK8vrjEKeHqK4
zomhpBBItclPIsqdbqGbhzE7IsgKmMd9GiTrRhbBpeOkLyIjVwM5zsXDEMLYg4MY
5E2F+3xH7d5RrPKmXrX+XYV/pAJu8HtLQX/84R4RWdhRCDI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsONpoFf0Ek7/BUt6LzAX
1JvjsLZB3o2WNguwjf7ZqXeQoq6SBqxoScvotdAP4dWmB5sQwRlRIzi6vk/mlRj7
hz2nvC3XskLWQQ1+A8hRIY19bRUTtYt/iyQzi44NflQWgRRdansivGQ+y5Qbm6Js
K2AbNCsy0+muy1Vdmiy4aGfM6r9CYdtRtLQVCRXFoOnZUCfqaorlY5iOr0b4Bcpc
yw98ZyBFHI+l0gHPWmxwpDusfavD4xjkn33BbJ8d0D3IdYWQTQSK1ZrF3hDqilPE
S8RcEMkFGQrFQVpueawLsD/HWEMel+LgO6WmlaeRonRXIXA4gzrGS0mnlNEMq8/D
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433589690561006938222909992418249362863712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-26 11:04:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-24 11:04:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customer.localedge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22330083008080414912417904511101373806980916855504885938088188911565519091343259015473075950854890648521943431563502193441821289534212465842386439818448667686483911756562742926464665977020467410409593383222162833244474095959058299036401251894352381459788054084811723249082605206755915379346679535213364556118028205472376810149817003919780616738848679872747075156890949408927827913048731841076137364418841707147269661324957158921268748805274702938166098496674261549072783719815817117482736270535066948967965128200637263415081219087025928054550532780166678595773626566489384253338816632640602334232344962310995033703357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff183c184a5295a3fcc7134c5c1f0de06796a76b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.4029tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.archantlocalimpact.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.beaumontenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.brandaccomplished.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.chron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.dailynewsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.dallasnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.digitalsensemarketing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.hartfordcourantcontentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.hearstmediact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.hearstmediamidwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.hearstmediaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.kcci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.kcra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.ketv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.kitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.kmbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.koat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.koco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.ksbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.l2digitalmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.lmtonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.localedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mor-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.morrismedianetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mynbc5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.myplainview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mysanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.newsdayconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.pomoroi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.sageisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.seattlepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.sfgate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.sheddinglightadvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.startribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.statsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.stingraybranding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.tidewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.timesunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.ttmarketsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.tyjcreative.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.vizelladigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wbaltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wcvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wdsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wgal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wisn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wjcl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wlky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wlwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wmtw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wmur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wpbf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wtae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wvtm13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wxii12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wyff4.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001823a648897000004030046304402206e3ae2e644876aedb46e3a11db3fa27fa9529c8486405a5294b91a5d22d155660220290781f3881294e4f60c34348ecedbee72850c8bddfbbf936e38892d0c36d41d0077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001823a64888b0000040300483046022100ae8503d61020032f18416f6338151d84d61f17bed756ad93fc0d175780c3fab0022100f2c25587ad710bf8aa30aad35d259c3fe589503148e365bae295d7a0e4fa4e29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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