customer.localedge.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:15:ba:dd:d6:37:dd:fb:84:06:1b:68:08:79:55:ec:b2:7b was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=customer.localedge.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:ba:dd:d6:37:dd:fb:84:06:1b:68:08:79:55:ec:b2:7b
Serial Number (int): 268731175750304082592626859482022994031227
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:93:e8:7b:34:f8:c5:b5:67:02:5a:ec:8e:f2:11:92:5f:3f:01:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:fc:b7:5d:61:8e:6a:ef:b8:dc:bb:fe:a1:cf:f8:02:e7:12:a0:72
Fingerprint (sha256): 25:e1:67:da:4e:a0:d5:25:5f:fa:48:5b:2c:51:d0:19:b7:b9:00:01:b2:10:5a:98:78:45:92:19:e3:97:45:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate customer.localedge.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customer.localedge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

customer.4029tv.com
customer.adsparish.com
customer.amarillo.com
customer.archantlocalimpact.co.uk
customer.baltimoresun.com
customer.beaumontenterprise.com
customer.beqwikmedia.com
customer.chicagotribune.com
customer.chron.com
customer.cjonline.com
customer.dailynewsdigital.com
customer.dallasnews.com
customer.fairfaxmarketingservices.co.nz
customer.fairfaxmarketingservices.com.au
customer.fauquier.com
customer.hartfordcourantcontentsolutions.com
customer.hearstmediact.com
customer.hearstmediamidwest.com
customer.hearstmediaservices.com
customer.hirethenerds.com
customer.homebasedigital.com
customer.juneauempire.com
customer.kcci.com
customer.kcra.com
customer.ketv.com
customer.kitv.com
customer.kmbc.com
customer.koat.com
customer.koco.com
customer.ksbw.com
customer.latimes.com
customer.lmtonline.com
customer.localedge.com
customer.lubbockonline.com
customer.mcall.com
customer.mor-tv.com
customer.morris.com
customer.morrismedianetwork.com
customer.motiv8web.com
customer.mrt.com
customer.mta360.com
customer.mynbc5.com
customer.myplainview.com
customer.mysanantonio.com
customer.ndmr.com
customer.netgalaxystudios.com
customer.newsdayconnect.com
customer.ohio.com
customer.onlineathens.com
customer.orlandosentinel.com
customer.peninsulaclarion.com
customer.savannahnow.com
customer.seattlepi.com
customer.sfgate.com
customer.startribune.com
customer.statsdigital.com
customer.staugustine.com
customer.sun-sentinel.com
customer.tidewaterconnect.com
customer.timesunion.com
customer.timesunionmedia.com
customer.wapt.com
customer.wbaltv.com
customer.wcvb.com
customer.wdsu.com
customer.wesh.com
customer.wgal.com
customer.wisn.com
customer.wjcl.com
customer.wlky.com
customer.wlwt.com
customer.wmtw.com
customer.wmur.com
customer.wpbf.com
customer.wtae.com
customer.wvtm13.com
customer.wxii12.com
customer.wyff4.com
customers.chroniclemedia.com

Other certificates including the domain name localedge.com

(limited to 100 certificates)
customer.localedge.com
anchorbar.aws.localedge.com
*.localedge.com
customer.localedge.com
customer.localedge.com
prism.localedge.com
admin-aws.localedge.com
prism.localedge.com
prism.localedge.com
local.localedge.com
*.localedge.com
customer.localedge.com
cwa.hearstsc.com
local.localedge.com
customer.localedge.com
internetmarketing.localedge.com
gogregoldham.aws.localedge.com
prism.localedge.com
customer.localedge.com
francospizza.aws.localedge.com
internetmarketing-aws.localedge.com
customer.localedge.com
customer.localedge.com
mdis.localedge.com
localedge.com
analytics.localedge.com
customer.localedge.com
prism-qa.localedge.com
direct.sofia.edu
*.localedge.com
analytics.localedge.com
customer.localedge.com
gagpestcontrol.aws.localedge.com
direct.sofia.edu
customer.localedge.com
customer.localedge.com
*.localedge.com
icampaign.localedge.com
prism.localedge.com
icampaign.localedge.com
www-aws.localedge.com
rcltlyncfepool.hearstsc.com
local.localedge.com
analytics.localedge.com
icanhazip.localedge.com
siplync.hearstsc.com
prism.localedge.com
ocs.hearstsc.com
mdis.localedge.com
careers-aws.localedge.com
*.localedge.com
reseller.localedge.com
*.localedge.com
beddingbarn.aws.localedge.com
prism.localedge.com
prism.localedge.com
customer.localedge.com
prism-staging.localedge.com
customer.localedge.com
themouldingcompany.aws.localedge.com
mdis.localedge.com
*.localedge.com
customer.localedge.com
icampaign.localedge.com
prism.localedge.com
opt-aws.localedge.com
brakeworld.aws.localedge.com
customer.localedge.com
prism.localedge.com
hearstdms.aws.localedge.com
customer.localedge.com
mdis.localedge.com
customer.localedge.com
direct.sofia.edu
customer.localedge.com
*.localedge.com
analytics.localedge.com
analytics.localedge.com
careers.localedge.com
analytics.localedge.com
ocsext.hearstsc.com
customer.localedge.com
prism.localedge.com
prism-qa.localedge.com
customer.4029tv.com
allure.aws.localedge.com
mdis.localedge.com
asigymnastics.aws.localedge.com
prism-staging.localedge.com
mdis.localedge.com
prism.localedge.com
local.localedge.com
local.localedge.com
prism.localedge.com
prism.localedge.com
*.localedge.com

Certificate

The complete raw certificate details for customer.localedge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoqmuV8spcYnJ9pGG7nT
91DlZAaGLRBHsZUnFV8TspqgCiw6vpON2K0Ae8/kdeoZKV61Sb4m8X/ziaoJyN5J
zlbXqsCVNZsYATjGGNu8btrCWNOILTqeKpnbaBS6UPv2v9u/N+gkE7kaRPdGo2r2
coCYO1CgpdTnwk9DbBzhCo3dWmTYaWIb2E05j+BhdO9gjE49sgei70q5EtfXSJzN
XLAQMbnIVXcjRbws874QgteDeiPR9tQXtND0+If1UqrK1cmybgsuxv9VcyLAe/P0
mFthXELr63CCRvgifdyO9PaOA+RgLq06On1E6MLphdQMZHXInxQESBbPg2PcwG2a
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268731175750304082592626859482022994031227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 02:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 02:41:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customer.localedge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20014023672166169359197048029696144781771788896204050342247762074601466741390131009498790386500498274023461962299868665269802898976549279842652727806881058116908952111823685149551318641297970463269440791112588054952510174644236754140102610302289624824206111167243636831474215273557114536699524042944514422714500087289210380824006454535367105544468369004583495659199487774729607213927254074903011473881011562657172231573293560708059771287051738759552495385034686795273244541350305423937927043468866881026669092704856715898933587122706591807014939627654323031090123095822793401329268044284715713417932801422718258748093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b693e87b34f8c5b567025aec8ef211925f3f01f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1943 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.4029tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.adsparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.amarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.archantlocalimpact.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.beaumontenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.beqwikmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.chron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.cjonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.dailynewsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.dallasnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.fairfaxmarketingservices.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.fairfaxmarketingservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.fauquier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.hartfordcourantcontentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.hearstmediact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.hearstmediamidwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.hearstmediaservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.hirethenerds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.homebasedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.juneauempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.kcci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.kcra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.ketv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.kitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.kmbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.koat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.koco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.ksbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.latimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.lmtonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.localedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.lubbockonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mor-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.morris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.morrismedianetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.motiv8web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mta360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mynbc5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.myplainview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mysanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.ndmr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.netgalaxystudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.newsdayconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.ohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.onlineathens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.peninsulaclarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.savannahnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.seattlepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.sfgate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.startribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.statsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.staugustine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.tidewaterconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.timesunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.timesunionmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wbaltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wcvb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wdsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wgal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wisn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wjcl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wlky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wlwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wmtw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wmur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wpbf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wtae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wvtm13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wxii12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.wyff4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.chroniclemedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eaaf2d93b000004030046304402201f5f63b1f53186ebe2e9826147f08d8bb98418ebcfd7df0ba9fa9cf19705a1cc02200365de5174fafef24f2c62f5d7200639ab54cf10f09f90cb0fc371ad5c6cb73b00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eaaf2d96600000403004830460221008ba4bc8c631b7ff124de810e443f828170be4b54646d0bb50f9b9a7f011c97b6022100951a3df61e5aa06ad4a5da47d25ada41729813dfd28e399b490f3a09a953f2eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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