dubois.newstory.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e5:73:90:4a:59:0e:78:a1:49:db:af:18:56:af:dc:7d:ea was issued on by Let's Encrypt.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dubois.newstory.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e5:73:90:4a:59:0e:78:a1:49:db:af:18:56:af:dc:7d:eaSerial Number (int): 339415130238392638170439365774631176535530
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 83:ee:17:d1:37:b8:d3:ff:e7:01:6d:58:ef:eb:58:f0:fb:b4:cb:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): df:97:5e:dd:df:ec:8c:bc:5c:cd:07:9d:56:9e:e1:33:55:c7:ab:14
Fingerprint (sha256): 24:ba:f1:24:74:e1:51:b6:fc:f5:94:1b:82:8b:06:dd:e1:0e:4f:87:9c:16:b0:9e:33:b0:84:b2:b4:ce:fb:f0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dubois.newstory.com
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dubois.newstory.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
berwick.newstory.com
clearfield.newstory.com
dubois.newstory.com
harrisburg.newstory.com
indiana.newstory.com
kenhorst.newstory.com
newholland.newstory.com
perkiomen.newstory.com
selinsgrove.newstory.com
throop.newstory.com
www.berwick.newstory.com
www.clearfield.newstory.com
www.dubois.newstory.com
www.harrisburg.newstory.com
www.indiana.newstory.com
www.kenhorst.newstory.com
www.newholland.newstory.com
www.perkiomen.newstory.com
www.selinsgrove.newstory.com
www.throop.newstory.com
www.wyoming.newstory.com
www.wyomissing.newstory.com
wyoming.newstory.com
wyomissing.newstory.com
clearfield.newstory.com
dubois.newstory.com
harrisburg.newstory.com
indiana.newstory.com
kenhorst.newstory.com
newholland.newstory.com
perkiomen.newstory.com
selinsgrove.newstory.com
throop.newstory.com
www.berwick.newstory.com
www.clearfield.newstory.com
www.dubois.newstory.com
www.harrisburg.newstory.com
www.indiana.newstory.com
www.kenhorst.newstory.com
www.newholland.newstory.com
www.perkiomen.newstory.com
www.selinsgrove.newstory.com
www.throop.newstory.com
www.wyoming.newstory.com
www.wyomissing.newstory.com
wyoming.newstory.com
wyomissing.newstory.com
Other certificates including the domain name newstory.com
(limited to 100 certificates)
servicedesk.newstory.com
mail.salisburymgt.com
dubois.newstory.com
dubois.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
throop.newstory.com
newstory.com
mail.salisburymgt.com
ithelpdesk.cwc.com
itservices.luminuseducation.com
mail.salisburymgt.com
throop.newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
henleyhelp.vioc.net
hdesk.amfarconsulting.com
dubois.newstory.com
newstory.com
helpdesk.ineosphenol.net
mesa.aylsoluciones.pw
newstory.com
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newcumberland.newstory.com
newstory.com
newstory.com
servicedesk.newstory.com
newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
servicedesk.newstory.com
helpdesk.ineosphenol.net
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
itservices.luminuseducation.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
itservices.luminuseducation.com
helpdesk.ineosphenol.net
dubois.newstory.com
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
newstory.com
newcumberland.newstory.com
newcumberland.newstory.com
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
helpdesk.sam-dinesh.com
selinsgrove.newstory.com
dubois.newstory.com
mesa.aylsoluciones.pw
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newstory.com
ithelpdesk.cwc.com
dubois.newstory.com
newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
newcumberland.newstory.com
hdesk.amfarconsulting.com
newcumberland.newstory.com
servicedesk.newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
harrisburg.newstory.com
newholland.newstory.com
monroeville.newstory.com
newcumberland.newstory.com
harrisburg.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
perkiomen.newstory.com
helpdesk.ineosphenol.net
indiana.newstory.com
kenhorst.newstory.com
helpdesk.sam-dinesh.com
newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
mail.salisburymgt.com
dubois.newstory.com
dubois.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
throop.newstory.com
newstory.com
mail.salisburymgt.com
ithelpdesk.cwc.com
itservices.luminuseducation.com
mail.salisburymgt.com
throop.newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
henleyhelp.vioc.net
hdesk.amfarconsulting.com
dubois.newstory.com
newstory.com
helpdesk.ineosphenol.net
mesa.aylsoluciones.pw
newstory.com
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newcumberland.newstory.com
newstory.com
newstory.com
servicedesk.newstory.com
newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
servicedesk.newstory.com
helpdesk.ineosphenol.net
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
itservices.luminuseducation.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
itservices.luminuseducation.com
helpdesk.ineosphenol.net
dubois.newstory.com
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
newstory.com
newcumberland.newstory.com
newcumberland.newstory.com
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
helpdesk.sam-dinesh.com
selinsgrove.newstory.com
dubois.newstory.com
mesa.aylsoluciones.pw
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newstory.com
ithelpdesk.cwc.com
dubois.newstory.com
newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
newcumberland.newstory.com
hdesk.amfarconsulting.com
newcumberland.newstory.com
servicedesk.newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
harrisburg.newstory.com
newholland.newstory.com
monroeville.newstory.com
newcumberland.newstory.com
harrisburg.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
perkiomen.newstory.com
helpdesk.ineosphenol.net
indiana.newstory.com
kenhorst.newstory.com
helpdesk.sam-dinesh.com
newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
Certificate
The complete raw certificate details for dubois.newstory.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHsjCCBpqgAwIBAgISA+VzkEpZDnihSduvGFav3H3qMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTkxMTQ2NDJaFw0y MDAxMTcxMTQ2NDJaMB4xHDAaBgNVBAMTE2R1Ym9pcy5uZXdzdG9yeS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfAbOE2wjOiL2fjZKVY8zjCdbK aPPcgLNPSexg0SoCRL2O2QrbhfwLgeVAdYdtFa1k7n9LzNXXoM1gv6eZGk4hhUCC LUHvoTEPS2G5X1FMmR3Pex/gEx6EP7RrqdFmmdCwZ/1pxW8z/drYgzjMNFGlvjj8 e7/9Lu5udbyyfFRbMWubAQLWrA4P/H5V9RR1KYC8ZiBLk+QRo+k9wTAlRepBlISs +t3Cr/JwOVrQsL5hKd2Q7CIuR4o0BGY0JXYC8NlndUkadFQVbaCqwGgPO5p/SuEN tDnyENLenjpThMPADt1ImJuiwIahiVESRq4FvTFW5NdWtgEodPm8OLY3PDIDAgMB AAGjggS8MIIEuDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIPuF9E3uNP/5wFtWO/r WPD7tMv7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggJvBgNVHREEggJmMIICYoIUYmVyd2ljay5uZXdzdG9yeS5jb22C F2NsZWFyZmllbGQubmV3c3RvcnkuY29tghNkdWJvaXMubmV3c3RvcnkuY29tghdo YXJyaXNidXJnLm5ld3N0b3J5LmNvbYIUaW5kaWFuYS5uZXdzdG9yeS5jb22CFWtl bmhvcnN0Lm5ld3N0b3J5LmNvbYIXbmV3aG9sbGFuZC5uZXdzdG9yeS5jb22CFnBl cmtpb21lbi5uZXdzdG9yeS5jb22CGHNlbGluc2dyb3ZlLm5ld3N0b3J5LmNvbYIT dGhyb29wLm5ld3N0b3J5LmNvbYIYd3d3LmJlcndpY2submV3c3RvcnkuY29tght3 d3cuY2xlYXJmaWVsZC5uZXdzdG9yeS5jb22CF3d3dy5kdWJvaXMubmV3c3Rvcnku Y29tght3d3cuaGFycmlzYnVyZy5uZXdzdG9yeS5jb22CGHd3dy5pbmRpYW5hLm5l d3N0b3J5LmNvbYIZd3d3LmtlbmhvcnN0Lm5ld3N0b3J5LmNvbYIbd3d3Lm5ld2hv bGxhbmQubmV3c3RvcnkuY29tghp3d3cucGVya2lvbWVuLm5ld3N0b3J5LmNvbYIc d3d3LnNlbGluc2dyb3ZlLm5ld3N0b3J5LmNvbYIXd3d3LnRocm9vcC5uZXdzdG9y eS5jb22CGHd3dy53eW9taW5nLm5ld3N0b3J5LmNvbYIbd3d3Lnd5b21pc3Npbmcu bmV3c3RvcnkuY29tghR3eW9taW5nLm5ld3N0b3J5LmNvbYIXd3lvbWlzc2luZy5u ZXdzdG9yeS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgor BgEEAdZ5AgQCBIH2BIHzAPEAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCo qo6ycwAAAW3kDj+pAAAEAwBHMEUCIQCXM8sgiXX5TBLCYtL66rZd3W9kT1aqsw+o YkW0wueuSAIgcf37nwa9mShrdukudY6Rys31FXA9SySt39jcFFmQ/XUAdwApPFGW VMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW3kDj+hAAAEAwBIMEYCIQDE FqnyHhnJZWiqehcGB2rRdgJyqq0qXOK/8bc+jCjG4QIhALIU2TESbtXLZs2VUvY8 owcQvViodeZl3IAWVIPRawmMMA0GCSqGSIb3DQEBCwUAA4IBAQBn98ynuAUMsrLs tAriDvW7X0FcDkUJFx6YImwBU02+fRwu9DcpvmwxCQhKG3wZscyRGB01wNa2EkbN 0buLsTIldGn0ak0Uz3qALBhIJZKrD28i1Xmc4IW9dV2uPkT9NYO7covRCt4nZoCC ayeQ6qtC/5T14CzNw1HJDa6pW8qedMmqYUlFjaiLc8po7zRtSbmCSHUR+j6T4ah4 +jJEa0Yki1essmWcLfUg39SAMJChA0tkOqpZh1W2+05x8pUEZfHtk93u36tWkbzc YS6aAL62s9w6+NrqICeXA7BmV0Yv3SP6fMr5drhQbXHRui157bWPxurzANyFi6Lh FlY45JxU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wGzhNsIzoi9n42SlWPM 4wnWymjz3ICzT0nsYNEqAkS9jtkK24X8C4HlQHWHbRWtZO5/S8zV16DNYL+nmRpO IYVAgi1B76ExD0thuV9RTJkdz3sf4BMehD+0a6nRZpnQsGf9acVvM/3a2IM4zDRR pb44/Hu//S7ubnW8snxUWzFrmwEC1qwOD/x+VfUUdSmAvGYgS5PkEaPpPcEwJUXq QZSErPrdwq/ycDla0LC+YSndkOwiLkeKNARmNCV2AvDZZ3VJGnRUFW2gqsBoDzua f0rhDbQ58hDS3p46U4TDwA7dSJibosCGoYlREkauBb0xVuTXVrYBKHT5vDi2Nzwy AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 339415130238392638170439365774631176535530 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 11:46:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 11:46:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dubois.newstory.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28151980923083536485224335703780771497476904809911968298519825956741184428881498452907452574641199362155902976106980801609813384562835779348451478419453670105229302679991095843556865822734085167339241683697566798327614434991959364950057786377933420994117639392654352264036145152316920263318154526400708711736002398965293763677510477635852823759516176787546222234216566151979227194479515752729830095878994513017076141172670604655235735777446472070230433895432857155730641299737963481102430152591540419171499969309535543467175330298376771472164639878278873140043498387947906712608922325883302499931518179569222370996739 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 83ee17d137b8d3ffe7016d58efeb58f0fbb4cbfb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (614 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berwick.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearfield.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubois.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrisburg.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiana.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenhorst.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newholland.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perkiomen.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selinsgrove.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'throop.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berwick.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearfield.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubois.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrisburg.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiana.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenhorst.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newholland.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perkiomen.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selinsgrove.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.throop.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyoming.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomissing.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyoming.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomissing.newstory.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016de40e3fa900000403004730450221009733cb208975f94c12c262d2faeab65ddd6f644f56aab30fa86245b4c2e7ae48022071fdfb9f06bd99286b76e92e758e91cacdf515703d4b24addfd8dc145990fd75007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016de40e3fa10000040300483046022100c416a9f21e19c96568aa7a1706076ad1760272aaad2a5ce2bff1b73e8c28c6e1022100b214d931126ed5cb66cd9552f63ca30710bd58a875e665dc80165483d16b098c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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