alapressa.alabamapress.org

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 07:b5:01:b3:82:d1:c7:c5:4d:3a:23:0f:3b:c5:78:6c was issued on by DigiCert Inc.

With 125 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alapressa.alabamapress.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:b5:01:b3:82:d1:c7:c5:4d:3a:23:0f:3b:c5:78:6c
Serial Number (int): 10244436206626568779655311298987915372
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: eb:25:da:dd:c1:20:96:36:5c:09:7f:ac:8a:be:95:3b:6a:52:a8:14
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 4e:b9:97:bf:11:b6:19:4c:fb:45:da:90:ff:a2:bb:71:b6:29:49:f2
Fingerprint (sha256): 28:4e:29:23:56:d6:53:28:b2:2f:eb:32:7c:a9:84:15:61:de:60:75:78:83:62:b5:b2:4c:5d:aa:b9:8f:0f:0d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate alapressa.alabamapress.org

125

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alapressa.alabamapress.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alapressa.alabamapress.org
eedition.sanpetemessenger.com
eedition.noblescountyreview.net
eedition.murraycountynews.net
eedition.murraycountyadvantage.net
eedition.morgancountypress.com
eedition.madisoncatholicherald.org
eedition.leader-statesman.com
eedition.hpj.com
eedition.gazettechicago.com
eedition.fuldafreepress.net
eedition.catholicherald.org
directory.farmandhomepublishers.com
directory.citydirectoryinc.com
directory.alabamapress.org
digitalniles.leaderpub.com
digitaldowagiac.leaderpub.com
digitalbook.farmandhomepublishers.com
digitalbook.citydirectoryinc.com
digital.yumapioneer.com
digital.winchestersun.com
digital.webstercountycitizen.com
digital.waterwaysjournal.net
digital.vicksburgpost.com
digital.valleytimes-news.com
digital.troymessenger.com
digital.theviennatimes.com
digital.thetidewaternews.com
eedition.superiorcatholicherald.org
eedition.tricountynewsmn.net
eedition.wasatchwave.com
elobservadortoo.rockforddiocese.org
digital.middlesboronews.com
digital.harlanenterprise.net
digital.greenvilleadvocate.com
digital.demopolistimes.com
digital.claiborneprogress.net
catalogs.pts-tools.com
catalog.mandmsales.net
catalogs.kale.com.tr
www.upcatholic.org
www.rleader.com
www.lovingtonleaderonline.com
www.beavercountyjournal.com
www.arcadiahd.com
digital.thesnaponline.com
theword.bostonavenue.org
resource.ibsa.org
online.thebridgeweekly.com
online.precinctreporter.com
online.jonews.com
online.headlightherald.com
online.burkecountytribune.com
observertoo.rockforddiocese.org
miami.thefloridacatholic.org
membermaterials.myaea.org
literature.goodeggs.com
icoonline.mendonoma.com
ibonline.ibsa.org
enews.therecordnewspaper.org
thesource.goodeggs.com
digital.thepostsearchlight.com
digital.themiscellany.org
digital.theinteriorjournal.com
digital.dailyleader.com
digital.cw.ua.edu
digital.cordeledispatch.com
digital.clemmonscourier.net
digital.clantonadvertiser.com
digital.catholicregister.org
digital.catholicpress.org
digital.catholicmessenger.net
digital.catholicmediaassociation.org
digital.catholiccourier.com
digital.brewtonstandard.com
digital.bogalusadailynews.com
digital.blackchronicle.com
digital.elizabethton.com
digital.bellevillemessenger.org
digital.austindailyherald.com
digital.atmoreadvance.com
digital.arkansas-catholic.org
digital.andalusiastarnews.com
digital.amnews.com
digital.americustimesrecorder.com
digital.americanpress.com
digital.albertleatribune.com
catalogs.pollardwater.com
catalogs.ferguson.com
catalog.VisitorBadgeCompany.com
bulletin.ndna.com
archive.catholicregister.org
digital.bccatholic.ca
flyers.pts-tools.com
digital.elmensajerorochester.com
digital.greatlakes-seawayreview.com
digital.thefloridacatholic.org
digital.thecoastlandtimes.com
digital.thecharlottegazette.com
digital.theccmonline.com
digital.thecatholicsun.com
digital.smithfieldtimes.com
digital.shelbycountyreporter.com
digital.selmatimesjournal.com
digital.salisburypost.com
digital.roanoke-chowannewsherald.com
digital.ripleynews.com
digital.picayuneitem.com
digital.panolian.com
digital.farmvilleherald.com
digital.panews.com
digital.ourdavie.com
digital.orangeleader.com
digital.nichibei.org
digital.natchezdemocrat.com
digital.myaea.org
digital.luvernejournal.com
digital.lobservateur.com
digital.lagrangenews.com
digital.kenbridgevictoriadispatch.com
digital.jessaminejournal.com
digital.jacksoncountytimes.net
digital.irontontribune.com
digital.hawaiicatholicherald.com
digital.oxfordeagle.com

Other certificates including the domain name alabamapress.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for alapressa.alabamapress.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthLvbR5xyl6DpcyPP47w
p9QvvoXYqsFWH5nc3xGP3Btroyp1LmarM6FTZYcEQ7aCABe0ysKXvvL/R5QTMnPx
OTiDaAtmfxgW288o+HaF1GrngpCb9TzN+FNBisJj/kNGrZa/Ack4EQLAQVAmF/Us
EQV5+0q1rqWkPS7X0u+EwR52lI/x0yLJS4Ri5Fk89+YAIuBOAuydujcoVC0nfnCX
98MuhXND2XhwqPAp79ThBlxtYYKa6Du50MysIL4tmv4V5+A3j+aNUEn6ZjnHRi1a
6KA1I41c70gHlUZhgrhvPdE29ACMZfXUB0/+9zjTWnoc1/l7EY7C8bWqsE1/C0Rx
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10244436206626568779655311298987915372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alapressa.alabamapress.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22984708827930293864407742907501525538920824347729588896372309854955213883340520087545094048752402340384293759372104900541941384469779053159712525333665862487686429717337341797691628100537976266259927710010582254064875298015041515592670258054396827191339979055238158787529210237401708000522870058225546577256626425218727354874952327079103440825494619714748357971561491627995674045876532941819554149399746198185087899304304015638669509350470042348888414278551687217097977098668088086832860111277384081436559404979498521192156197846522920011464594519822374397852169906903025544549105499694040855065315541166919040397613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb25daddc12096365c097fac8abe953b6a52a814
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3562 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alapressa.alabamapress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.sanpetemessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.noblescountyreview.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.murraycountynews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.murraycountyadvantage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.morgancountypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.madisoncatholicherald.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.leader-statesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.hpj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.gazettechicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.fuldafreepress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.catholicherald.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.farmandhomepublishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.citydirectoryinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.alabamapress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalniles.leaderpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaldowagiac.leaderpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalbook.farmandhomepublishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalbook.citydirectoryinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.yumapioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.winchestersun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.webstercountycitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.waterwaysjournal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.vicksburgpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.valleytimes-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.troymessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.theviennatimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.thetidewaternews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.superiorcatholicherald.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.tricountynewsmn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedition.wasatchwave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elobservadortoo.rockforddiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.middlesboronews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.harlanenterprise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.greenvilleadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.demopolistimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.claiborneprogress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogs.pts-tools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.mandmsales.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogs.kale.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upcatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovingtonleaderonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beavercountyjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcadiahd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.thesnaponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theword.bostonavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.ibsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.thebridgeweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.precinctreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.jonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.headlightherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.burkecountytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'observertoo.rockforddiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miami.thefloridacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermaterials.myaea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literature.goodeggs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icoonline.mendonoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibonline.ibsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.therecordnewspaper.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesource.goodeggs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.thepostsearchlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.themiscellany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.theinteriorjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.dailyleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.cw.ua.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.cordeledispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.clemmonscourier.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.clantonadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.catholicregister.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.catholicpress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.catholicmessenger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.catholicmediaassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.catholiccourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.brewtonstandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.bogalusadailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.blackchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.elizabethton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.bellevillemessenger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.austindailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.atmoreadvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.arkansas-catholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.andalusiastarnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.amnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.americustimesrecorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.americanpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.albertleatribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogs.pollardwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogs.ferguson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.VisitorBadgeCompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulletin.ndna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.catholicregister.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.bccatholic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.pts-tools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.elmensajerorochester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.greatlakes-seawayreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.thefloridacatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.thecoastlandtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.thecharlottegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.theccmonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.thecatholicsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.smithfieldtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.shelbycountyreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.selmatimesjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.salisburypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.roanoke-chowannewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.ripleynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.picayuneitem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.panolian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.farmvilleherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.panews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.ourdavie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.orangeleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.nichibei.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.natchezdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.myaea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.luvernejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.lobservateur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.lagrangenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.kenbridgevictoriadispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.jessaminejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.jacksoncountytimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.irontontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.hawaiicatholicherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.oxfordeagle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018af9682a26000004030046304402205f39976b8ede6c095d7ef9f60d720b2e6579cf61c0e0c313570a8ded08db1ffc02206bdc660f298a81259dbe562eeb110c8d6c7efdaabe667f98a10b1c11781fdbbd00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018af9682a06000004030046304402206e87beb6439da7b96a2665e5de4fd3409250c13a97ca65e7817c940dc7aa9e5802206b2a07ae877fa32053cb86ba17224f29a412d8d665370a4e7c1658396c9173fb007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018af96829c700000403004730450221008f169276d1cf4863a736188ff67db2f64865ad21037afe2c2e6db0d9e0c1899d02201037462223345c5b2bca0922de9ec4cc87b3eec82b02c7edf005cc6b0e524c46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009533e34196f4180716536b1377d3d7ca3c1231d9c99eb84933b4984d58a77f5b5c581cfe03f2ba2fe6e72063ec0b267496905dc1ccb1c6ea7a712d0d7da1176c2af50c2e950c7519c3b5943c5b42c24d0f1e9a4dbc2d31fa168cd923f76ac9b093de2fa775ccb647b8910a3e5debff358633cbd5afede4ce50cd798c9d36ed7d139f5fbe83f2ffb7fd22debaae65aff6164714596d5987f583b30ce7c2e60af4103cef2509abff58e9be754f36a5a3a65a7472976404ac7b2eef8f073cf8c5647082d1b3113f89f49f779f88a71800a8ee35169ec578f8563d7e7f40d384f2934aee1bed953362e89725d954971968add5d462d57b780402e2d86de83e35020a