tomball.communityimpact.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f5:06:2f:20:5a:ed:b8:0f:28:3b:b3:af:ae:a9:05:dd:17 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tomball.communityimpact.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f5:06:2f:20:5a:ed:b8:0f:28:3b:b3:af:ae:a9:05:dd:17
Serial Number (int): 431826543684839183171551721410616755608855
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a4:d2:5c:ee:27:ac:7a:ad:b3:c1:4a:7b:14:f0:16:56:cc:eb:b7:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:c6:63:bd:f1:e7:26:07:f1:4d:d1:14:93:22:1a:73:0c:d3:ab:a0
Fingerprint (sha256): 2b:a9:73:b1:51:12:03:79:32:31:6c:89:03:46:eb:c9:5f:5b:61:5a:55:c1:b6:7e:29:23:58:e0:a0:3d:8b:5b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tomball.communityimpact.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tomball.communityimpact.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajax.durhamregion.com
alliston.simcoe.com
annarborshopping.mlive.com
ashland.apg-wi.com
aurora.yorkregion.com
citycentreparkdale.toronto.com
east-bays-courier.origami.neighbourly.co.nz
eastern-courier.origami.neighbourly.co.nz
em.local.kentonline.co.uk
greecenewsny.wanderful.ownlocal.com
laketravis.communityimpact.com
local.argusobserver.com
local.becclesandbungayjournal.co.uk
local.beloitdailynews.com
local.bgdailynews.com
local.bowislandcommentator.com
local.brookingsregister.com
local.buckscountyherald.com
local.canalboat.co.uk
local.cheshirelife.co.uk
local.coastalscene24.co.uk
local.countrysmallholding.com
local.cranbrookherald.com
local.crestonnews.com
local.dailyinterlake.com
local.devonlife.co.uk
local.dominionpost.com
local.douglasdispatch.com
local.durhamregion.com
local.echopress.com
local.gcnewsgazette.com
local.guymondailyherald.com
local.iberianet.com
local.inwhitleycounty.com
local.ipswichstar.co.uk
local.lakecountysuburbanlife.com
local.leaderadvertiser.com
local.letstalk24.co.uk
local.maconcountytimes.com
local.madisoncourier.com
local.maidenhead-advertiser.co.uk
local.malvern-online.com
local.mcintoshdemocrat.com
local.minstercommunitypost.com
local.moodycountyenterprise.com
local.niagarathisweek.com
local.pilotweb.aero
local.press-leader.com
local.princewilliamtimes.com
local.ricentral.com
local.sachem.ca
local.saltwire.com
local.sedaliademocrat.com
local.simcoe.com
local.southeastiowaunion.com
local.sportingshooter.co.uk
local.standardspeaker.com
local.sweetwaterreporter.com
local.tabertimes.com
local.tahoedailytribune.com
local.thecarrollnews.com
local.theclintonjournal.com
local.theday.com
local.theeveningleader.com
local.thelocalvoice.net
local.theneweuropean.co.uk
local.thepostandmail.com
local.therecorddelta.com
local.thesiuslawnews.com
local.times-online.com
local.torringtontelegram.com
local.townandcountrymagazine.com.au
local.vp-mi.com
local.westfargopioneer.com
local.williamsondailynews.com
local.windsorstar.com
local.winterhavensun.com
marketplace-vs.tj.news
mckinney.communityimpact.com
midland.simcoe.com
mylocal.chicagotribune.com
newbraunfels.communityimpact.com
north-shore-times.origami.neighbourly.co.nz
north-taranaki-midweek.origami.neighbourly.co.nz
oakville.insidehalton.com
origaminewsmonitor.wahpetondailynews.com
origamiwahpeton.wahpetondailynews.com
oshawa.durhamregion.com
ownlocal.neighbourly.co.nz
parrysoundbeacon.parrysound.com
ricelake.apg-wi.com
sachemglanbrook.sachem.ca
saginawshopping.mlive.com
shopbirmingham.al.com
shopping.westsidenewsny.com
the-tasman-leader.origami.neighbourly.co.nz
thewoodlands.communityimpact.com
thornhill.yorkregion.com
tomball.communityimpact.com
wo.local.kentonline.co.uk

Other certificates including the domain name communityimpact.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tomball.communityimpact.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8+wtvwRAxfmiq2c1klj
UJxprL/+uPHkAbDiblIbLZTAYkmto6CVlx0udoz4jLx/086x/nIOcz2d90EZS+4V
0XI4HGlyZ5ZRl5AwgJ1YpIDqr8X7Z75T/V88oZAaOHU4uRyxllXdt043tb/iiIAS
+kONUkSdT3tdQ+AlmFgTUVfTJ+NDKR6NUgl+QWHDoP0SCNSCBrlgQpYOtH9NJyD6
Wwp7I5498kaJIMJRN/MC+Ag2zJV2OvjcAOhikhOacRygFNqYNwwmEEi/cltR+T27
8kntoGwGd4TY6oBr4g9mXmLI7lqPiJYJh75EJqJuKoMAEgqOU/8eBeKoygiImIgx
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431826543684839183171551721410616755608855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 09:28:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-14 09:28:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tomball.communityimpact.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26233745028113321688231359001208425972554594649670698684038582239825523512394550710696666541008299191526559818946390008906504063066803706597573099109384591887057245474678482253257462563730309697787509613739991619976488002484001733065875776927629550213021397962317222513992221347162252813138752798969907373687319225661538458680440475864184138916971313098840757566704045947754983807246035036553647003673352695526871262861225404810317425730638884437759227324420525366667090275063204704778924773545342766789765039902813551826936285346398484473628342394187113067967459700484035398332103312331651900050602903481480999612683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4d25cee27ac7aadb3c14a7b14f01656ccebb793
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliston.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annarborshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashland.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycentreparkdale.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'east-bays-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastern-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'em.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greecenewsny.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laketravis.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.argusobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.becclesandbungayjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.beloitdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bgdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bowislandcommentator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brookingsregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buckscountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.canalboat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coastalscene24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrysmallholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cranbrookherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crestonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyinterlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.devonlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dominionpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.douglasdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gcnewsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guymondailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.iberianet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inwhitleycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ipswichstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lakecountysuburbanlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.letstalk24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maconcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.madisoncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maidenhead-advertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.malvern-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mcintoshdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.minstercommunitypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moodycountyenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.niagarathisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotweb.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.press-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.princewilliamtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ricentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sachem.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saltwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sedaliademocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southeastiowaunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sportingshooter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.standardspeaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sweetwaterreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tabertimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tahoedailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thecarrollnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theclintonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeveningleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thelocalvoice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theneweuropean.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thepostandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.therecorddelta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesiuslawnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.torringtontelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.townandcountrymagazine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vp-mi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westfargopioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.williamsondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windsorstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.winterhavensun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-vs.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinney.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midland.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbraunfels.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-shore-times.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-taranaki-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakville.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origaminewsmonitor.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origamiwahpeton.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshawa.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownlocal.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundbeacon.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricelake.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachemglanbrook.sachem.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saginawshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbirmingham.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.westsidenewsny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-tasman-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewoodlands.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thornhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomball.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wo.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001783a9455500000040300473045022100fdf2954030ce80b8c07444469bb6e10aa1f72dc14b9fc80a8b3eb5ea036f870702200bed41b8f5f7add7e9e8a7dc36759dba37ab980a3ac2717ecf643e6f43d96c490076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001783a94557e0000040300473045022100a98482032f0b4118d7b0e6542aec85f84518316993a2d1137649a9867bd93e7102201a952592bfe2cb137976e3c7223f3da15e0604de016e770971f28670ffd9a737
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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