admin.adforge.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:61:cc:aa:15:52:bf:97:4e:0a:a2:c9:ed:4d:09:a4:f2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.adforge.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:61:cc:aa:15:52:bf:97:4e:0a:a2:c9:ed:4d:09:a4:f2
Serial Number (int): 278821256302097912944749064190994877621490
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:0c:19:c3:43:59:84:1f:d3:cf:3c:85:b3:a3:46:b8:57:40:af:8f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:fe:6d:eb:53:a9:06:e4:74:c5:34:bc:13:a5:37:8d:03:ae:53:06
Fingerprint (sha256): 2f:81:08:dd:64:2c:38:93:93:3d:17:5e:ea:62:4f:99:13:b2:35:8f:93:24:5b:92:9d:d6:ce:5a:47:5b:e8:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.adforge.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.adforge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.adforge.com
almaguin.northbaynipissing.com
arnprior.insideottawavalley.com
bloorwestyork.toronto.com
bracebridge.muskokaregion.com
bradford.yorkregion.com
carletonplace.insideottawavalley.com
innisfil.simcoe.com
kemptville.insideottawavalley.com
leader.local.heraldsun.com.au
local.anchoragepress.com
local.angliaafloat.co.uk
local.argusobserver.com
local.ayradvertiser.com
local.bensonnews-sun.com
local.berksandbucks.greatbritishlife.co.uk
local.billingsgazette.com
local.bordercountiesadvertizer.co.uk
local.braintreeandwithamtimes.co.uk
local.bramptonguardian.com
local.bridemagazine.co.uk
local.bridgwatermercury.co.uk
local.caledonenterprise.com
local.cambridgetimes.ca
local.capjournal.com
local.cjnews.com
local.clydebankpost.co.uk
local.coastalscene24.co.uk
local.completefrance.com
local.derbyshirelife.co.uk
local.dunmowbroadcast.co.uk
local.eacourier.com
local.eastlothiancourier.com
local.edp24.co.uk
local.elystandard.co.uk
local.fremonttribune.com
local.globegazette.com
local.granthamjournal.co.uk
local.gravesendreporter.co.uk
local.guelphmercury.com
local.guthriecountynewspapers.com
local.hackneygazette.co.uk
local.halsteadgazette.co.uk
local.hamiltonnews.com
local.harwichandmanningtreestandard.co.uk
local.heraldsun.com.au
local.hola-arkansas.com
local.huntervalleynews.net.au
local.ilfordrecorder.co.uk
local.insidehalton.com
local.insideottawavalley.com
local.irvinetimes.com
local.livingedge.co.uk
local.lompocrecord.com
local.maidenhead-advertiser.co.uk
local.maitlandmercury.com.au
local.mississauga.com
local.missoulian.com
local.montrosepress.com
local.myrecordjournal.com
local.newcastlestar.com.au
local.newhamrecorder.co.uk
local.niagarafallsreview.ca
local.northnorfolknews24.co.uk
local.northumberlandnews.com
local.norwichextra.com
local.nwi.com
local.ourperth.ca
local.parrysound.com
local.portstephensexaminer.com.au
local.princewilliamtimes.com
local.ravallirepublic.com
local.sconeadvocate.com.au
local.sentinelsource.com
local.sidneyherald.com
local.singletonargus.com.au
local.siouxcityjournal.com
local.southendstandard.co.uk
local.spaldingtoday.co.uk
local.sportingshooter.co.uk
local.sudburymercury.co.uk
local.suffolkfreepress.co.uk
local.tdn.com
local.thesouthern.com
local.thetandd.com
local.thewestonmercury.co.uk
local.toronto.cjnews.com
local.wahpetondailynews.com
local.wcfcourier.com
messenger.local.adelaidenow.com.au
mount.southwesternontario.ca
northbay.northbaynipissing.com
northyork.toronto.com
oshawa.durhamregion.com
ottawawest.ottawacommunitynews.com
parrysoundnorth.parrysound.com
peterborough.mykawartha.com
renfrew.insideottawavalley.com
shopping.cleveland.com
smithsfalls.insideottawavalley.com

Other certificates including the domain name adforge.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for admin.adforge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyU6zxeLuHXKpvT0lxTL
3XU52Ip+IhXvSvw7mnwzvn26loB/NELWrXbXS3h+JPsWBCywLQCB3PPK1YCdXW6D
owCo96oUlu3Zq/LvO2WTb7vFhsnHCAfmGapDL/9KzLWxNZIbJQ3BVzCISmgo2jHx
lK+b4Ew/grZTJrMgaIGLSB6VedRC7BijHtfGvDF92uLwoR0vKWJ1EF+1Rfj2lsjc
plMMdB/Yapuy20b17i3GV/beXTpdB7p9u6yLetKZu1vcH5A3oMFQURUrcSNmP4+g
i2oie36J+XU64pZiHHt0vQBE8CaGupRK3DDhl/gLV6YOhYoH3jRHU4epB2QEbcsB
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278821256302097912944749064190994877621490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-30 19:21:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 19:21:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.adforge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24634828128769399191418015402632210310329127467399205406108659604169140182876496570079925855372732006973221771430256334004333149346595728230851512911131807593973243738738380156053618466637399049322133432411637074613167455165690939192323653344685219373821101592859643435314812627538791403171049882818373301876010644242038941394786927259282447223247611863847767392432019022394004063547308514325334839276116268555637097031034664677445345510995441729583944089351129723582888185250266214645616824941148741527125964980378410465590811122941675117809479980923252092605530099291200642628257293147063163665079811800517957058843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c30c19c34359841fd3cf3c85b3a346b85740af8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2770 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.adforge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almaguin.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnprior.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloorwestyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradford.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carletonplace.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innisfil.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemptville.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leader.local.heraldsun.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.anchoragepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.angliaafloat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.argusobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ayradvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bensonnews-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.berksandbucks.greatbritishlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.billingsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bordercountiesadvertizer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.braintreeandwithamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bramptonguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bridemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bridgwatermercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cambridgetimes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.capjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clydebankpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coastalscene24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.completefrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.derbyshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dunmowbroadcast.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eacourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastlothiancourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edp24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elystandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fremonttribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.globegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.granthamjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gravesendreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guelphmercury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guthriecountynewspapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.halsteadgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hamiltonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.harwichandmanningtreestandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldsun.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hola-arkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ilfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.irvinetimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lompocrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maidenhead-advertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maitlandmercury.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mississauga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.missoulian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrosepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myrecordjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newcastlestar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newhamrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.niagarafallsreview.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northnorfolknews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northumberlandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norwichextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ourperth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portstephensexaminer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.princewilliamtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ravallirepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sconeadvocate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sentinelsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sidneyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.singletonargus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.siouxcityjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southendstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.spaldingtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sportingshooter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sudburymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.suffolkfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesouthern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thetandd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewestonmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.toronto.cjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wcfcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger.local.adelaidenow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mount.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northbay.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshawa.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottawawest.ottawacommunitynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundnorth.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterborough.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renfrew.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithsfalls.insideottawavalley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001658c7fdb780000040300473045022074fb1132ebf8b2153d0f47b1cbb958f0cf1f89b96ae1dc27f520fae67f1efa1c022100e14a89295dfca03827552c61959b6745af7007ae43caa77af72ce2187b8204f7007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001658c7fdd87000004030046304402207ead9d5af65a938a400cf59190912aea423f60b5fa3aa1e40095c4375ad73f3702205737534e4a3c826aa0d0ea2709fe590b60d74ce1759c701368c84e0032b2b2f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00237733f4da5ae182424ed818ec4af35815e3c9729bfeb027f32195e0e677c5edd5c3f34f300b8072f02cd2af7e06a6698fe5bdb94f320791a845e74fa4d3e92642fae69a5d89bf86c5f0d3111d4899174658f71b047b7c081e8fd0fa9294edc7ea956a213e7eecac88cb6768a7e2294016c311c9d9eaed50d693ee98bcec93641499c310b54c8943dd1850a5d9afd9c0db7b2e74ba76af22212b91cff61cc4316af45952599aa01e9b29fc5e0e08a572b70da796681d34202acda3c8b6cac37f911485b5f029f4ed5504fccaf1438921971ef40a66b660972daab24e1c76b4e9b2811a6148d01455a7f2f1800a15c18df4892d771e231f4d045d0f5d69b0494b