local.northjersey.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f6:ad:5f:0c:43:45:49:8d:3f:60:eb:d4:32:d5:60:62:72 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.northjersey.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:ad:5f:0c:43:45:49:8d:3f:60:eb:d4:32:d5:60:62:72
Serial Number (int): 432389055949782845369683883710957265904242
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c3:86:d1:5f:cd:a9:3e:c7:d1:d8:f4:fd:75:03:a5:c6:99:48:b6:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:a5:a1:4d:b4:e2:53:e1:39:f2:fb:86:02:16:79:e4:45:ec:01:eb
Fingerprint (sha256): 34:47:7a:66:48:64:9b:05:bf:5e:64:a7:f4:68:d3:bc:02:68:b3:91:88:5e:89:8d:6a:d6:67:18:42:0e:e0:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.northjersey.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.northjersey.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bugle.telegraphjournal.com
dailygleaner.telegraphjournal.com
ghmineraldaily.wanderful.ownlocal.com
kalamazooshopping.mlive.com
local.adelaidenow.com.au
local.agweek.com
local.alamogordonews.com
local.alexcityoutlook.com
local.argusleader.com
local.bramptonguardian.com
local.caledonenterprise.com
local.capjournal.com
local.cgsentinel.com
local.chipleypaper.com
local.chronicle-tribune.com
local.clitheroeadvertiser.co.uk
local.cornwalllife.co.uk
local.crestonnews.com
local.cumbernauld-news.co.uk
local.dddnews.com
local.demingheadlight.com
local.eastlondonadvertiser.co.uk
local.edinburghnews.scotsman.com
local.edmontonjournal.com
local.frontiersman.com
local.grandforksherald.com
local.granthamjournal.co.uk
local.hackneygazette.co.uk
local.heraldtribune.com
local.hillsdale.net
local.hutchnews.com
local.iberianet.com
local.independentmail.com
local.inforum.com
local.inwhitleycounty.com
local.lancasterguardian.co.uk
local.lep.co.uk
local.livingstondaily.com
local.marketrasenmail.co.uk
local.marshallnewsmessenger.com
local.mcdonoughvoice.com
local.mearnsleader.co.uk
local.midweeknews.com
local.militarynews.com
local.moberlymonitor.com
local.monroenews.com
local.montgomeryadvertiser.com
local.morrisherald-news.com
local.motherwelltimes.co.uk
local.mtshastanews.com
local.myrecordjournal.com
local.naplesnews.com
local.newrichmond-news.com
local.newstribune.info
local.northdevongazette.co.uk
local.northjersey.com
local.northnorfolknews24.co.uk
local.oakridger.com
local.osceolaiowa.com
local.pbcommercial.com
local.pekintimes.com
local.peterboroughtoday.co.uk
local.pilotweb.aero
local.pocklingtonpost.co.uk
local.poconorecord.com
local.rugbyadvertiser.co.uk
local.sandmountainreporter.com
local.sheffieldtelegraph.co.uk
local.shieldsgazette.com
local.sleafordstandard.co.uk
local.starcourier.com
local.starkvilledailynews.com
local.stornowaygazette.co.uk
local.thametoday.co.uk
local.thenewsstar.com
local.thepilotnews.com
local.therecordherald.com
local.thespectrum.com
local.toronto.cjnews.com
local.uintacountyherald.com
local.wapakdailynews.com
local.wayneindependent.com
local.wellandtribune.ca
local.wellingtondailynews.com
local.westessexlife.co.uk
local.whtimes.co.uk
local.willcoxrangenews.com
mcdonoughvoice.wanderful.ownlocal.com
messenger.local.adelaidenow.com.au
mount.southwesternontario.ca
muskokan.muskokaregion.com
mylocal.jacksonville.com
nuecesrecordstar.wanderful.ownlocal.com
oakridger.wanderful.ownlocal.com
saintjohn.telegraphjournal.com
scarborough.toronto.com
shopping.cleveland.com
shopping.dallasnews.com
thornhill.yorkregion.com
victoria.telegraphjournal.com

Other certificates including the domain name northjersey.com

(limited to 100 certificates)
sp.gosanangelo.com
*.alamogordonews.com
gannett.com
hiring.timesposttribune.com
gannett.com
*.usatodaynetwork.com
gannett.com
*.gannett.com
jobs.thejobnetwork.com
gannett.com
gannett.com
databases.floridatoday.com
gannett.com
newhomes.northjersey.com
gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
srepdata.northjersey.com
*.alamogordonews.com
gannett.com
gannett.com
hiring.timesposttribune.com
gannett.com
gannett.com
*.gannett.com
rssfeeds.northjersey.com
gannett.com
databases.cincinnati.com
gannett.com
*.gannett.com
gannett.com
rssfeeds.northjersey.com
gannett.com
gannett.com
gannett.com
gannett.com
usatoday.com
gannett.com
tickets.indystar.com
newhomes.northjersey.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
jobs.thejobnetwork.com
gannett.com
*.gannett.com
gannett.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
usatoday.com
gannett.com
tickets.indystar.com
gannett.com
hiring.timesposttribune.com
gannett.com
*.alamogordonews.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
connect.northjersey.com
jobs.thejobnetwork.com
gannett.com
*.alamogordonews.com
gannett.com
gannett.com
newhomes.northjersey.com
connect.northjersey.com
gannett.com
gannett.com
gannett.com
gannett.com
*.alamogordonews.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
secure2.northjersey.com
gannett.com
*.gannett.com
hiring.timesposttribune.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
jobs.newsleader.com
gannett.com
gannett.com
gannett.com
gannett.com

Certificate

The complete raw certificate details for local.northjersey.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIP3TCCDsWgAwIBAgISBPatXwxDRUmNP2Dr1DLVYGJyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMTIyMDMwNTNaFw0x
OTAyMTAyMDMwNTNaMCAxHjAcBgNVBAMTFWxvY2FsLm5vcnRoamVyc2V5LmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJ6+NZvknjIF+lIEd6plCFT
hW1fzYikbXVSghoFnADQBYh48gBc54rd8v2QMhJORqKMpX92tuzVed6WR4osFc/X
J3XzBv2yrnwUqMtvMB18jURZIJugIiRLf9gSdvImy3yd3pW3dMs0f47FpQrPqg8Q
gJrzzTdIEStxcJ5+Ng+8G2oTUaNAMdTeRo2n0hEVkurK3Y/8TgyTS0Q5CUWV7y8d
fHwa1cCTIxDHXwlRGuqJdYSmIBsrW3tsTmxOzal4J9ljybCrco02mLr2Opu4DGVS
ZZykjwuTv/XwHEkfa1eOiGMBPBhsqGj2rZrg5QOKPwkV2ysHW4kEIMKm4vuh3wMC
AwEAAaOCDOUwggzhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUw4bRX82pPsfR2PT9
dQOlxplItukwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzCCCpkGA1UdEQSCCpAwggqMghpidWdsZS50ZWxlZ3JhcGhqb3Vy
bmFsLmNvbYIhZGFpbHlnbGVhbmVyLnRlbGVncmFwaGpvdXJuYWwuY29tgiVnaG1p
bmVyYWxkYWlseS53YW5kZXJmdWwub3dubG9jYWwuY29tghtrYWxhbWF6b29zaG9w
cGluZy5tbGl2ZS5jb22CGGxvY2FsLmFkZWxhaWRlbm93LmNvbS5hdYIQbG9jYWwu
YWd3ZWVrLmNvbYIYbG9jYWwuYWxhbW9nb3Jkb25ld3MuY29tghlsb2NhbC5hbGV4
Y2l0eW91dGxvb2suY29tghVsb2NhbC5hcmd1c2xlYWRlci5jb22CGmxvY2FsLmJy
YW1wdG9uZ3VhcmRpYW4uY29tghtsb2NhbC5jYWxlZG9uZW50ZXJwcmlzZS5jb22C
FGxvY2FsLmNhcGpvdXJuYWwuY29tghRsb2NhbC5jZ3NlbnRpbmVsLmNvbYIWbG9j
YWwuY2hpcGxleXBhcGVyLmNvbYIbbG9jYWwuY2hyb25pY2xlLXRyaWJ1bmUuY29t
gh9sb2NhbC5jbGl0aGVyb2VhZHZlcnRpc2VyLmNvLnVrghhsb2NhbC5jb3Jud2Fs
bGxpZmUuY28udWuCFWxvY2FsLmNyZXN0b25uZXdzLmNvbYIcbG9jYWwuY3VtYmVy
bmF1bGQtbmV3cy5jby51a4IRbG9jYWwuZGRkbmV3cy5jb22CGWxvY2FsLmRlbWlu
Z2hlYWRsaWdodC5jb22CIGxvY2FsLmVhc3Rsb25kb25hZHZlcnRpc2VyLmNvLnVr
giBsb2NhbC5lZGluYnVyZ2huZXdzLnNjb3RzbWFuLmNvbYIZbG9jYWwuZWRtb250
b25qb3VybmFsLmNvbYIWbG9jYWwuZnJvbnRpZXJzbWFuLmNvbYIabG9jYWwuZ3Jh
bmRmb3Jrc2hlcmFsZC5jb22CG2xvY2FsLmdyYW50aGFtam91cm5hbC5jby51a4Ia
bG9jYWwuaGFja25leWdhemV0dGUuY28udWuCF2xvY2FsLmhlcmFsZHRyaWJ1bmUu
Y29tghNsb2NhbC5oaWxsc2RhbGUubmV0ghNsb2NhbC5odXRjaG5ld3MuY29tghNs
b2NhbC5pYmVyaWFuZXQuY29tghlsb2NhbC5pbmRlcGVuZGVudG1haWwuY29tghFs
b2NhbC5pbmZvcnVtLmNvbYIZbG9jYWwuaW53aGl0bGV5Y291bnR5LmNvbYIdbG9j
YWwubGFuY2FzdGVyZ3VhcmRpYW4uY28udWuCD2xvY2FsLmxlcC5jby51a4IZbG9j
YWwubGl2aW5nc3RvbmRhaWx5LmNvbYIbbG9jYWwubWFya2V0cmFzZW5tYWlsLmNv
LnVrgh9sb2NhbC5tYXJzaGFsbG5ld3NtZXNzZW5nZXIuY29tghhsb2NhbC5tY2Rv
bm91Z2h2b2ljZS5jb22CGGxvY2FsLm1lYXJuc2xlYWRlci5jby51a4IVbG9jYWwu
bWlkd2Vla25ld3MuY29tghZsb2NhbC5taWxpdGFyeW5ld3MuY29tghhsb2NhbC5t
b2Jlcmx5bW9uaXRvci5jb22CFGxvY2FsLm1vbnJvZW5ld3MuY29tgh5sb2NhbC5t
b250Z29tZXJ5YWR2ZXJ0aXNlci5jb22CG2xvY2FsLm1vcnJpc2hlcmFsZC1uZXdz
LmNvbYIbbG9jYWwubW90aGVyd2VsbHRpbWVzLmNvLnVrghZsb2NhbC5tdHNoYXN0
YW5ld3MuY29tghlsb2NhbC5teXJlY29yZGpvdXJuYWwuY29tghRsb2NhbC5uYXBs
ZXNuZXdzLmNvbYIabG9jYWwubmV3cmljaG1vbmQtbmV3cy5jb22CFmxvY2FsLm5l
d3N0cmlidW5lLmluZm+CHWxvY2FsLm5vcnRoZGV2b25nYXpldHRlLmNvLnVrghVs
b2NhbC5ub3J0aGplcnNleS5jb22CHmxvY2FsLm5vcnRobm9yZm9sa25ld3MyNC5j
by51a4ITbG9jYWwub2FrcmlkZ2VyLmNvbYIVbG9jYWwub3NjZW9sYWlvd2EuY29t
ghZsb2NhbC5wYmNvbW1lcmNpYWwuY29tghRsb2NhbC5wZWtpbnRpbWVzLmNvbYId
bG9jYWwucGV0ZXJib3JvdWdodG9kYXkuY28udWuCE2xvY2FsLnBpbG90d2ViLmFl
cm+CG2xvY2FsLnBvY2tsaW5ndG9ucG9zdC5jby51a4IWbG9jYWwucG9jb25vcmVj
b3JkLmNvbYIbbG9jYWwucnVnYnlhZHZlcnRpc2VyLmNvLnVrgh5sb2NhbC5zYW5k
bW91bnRhaW5yZXBvcnRlci5jb22CHmxvY2FsLnNoZWZmaWVsZHRlbGVncmFwaC5j
by51a4IYbG9jYWwuc2hpZWxkc2dhemV0dGUuY29tghxsb2NhbC5zbGVhZm9yZHN0
YW5kYXJkLmNvLnVrghVsb2NhbC5zdGFyY291cmllci5jb22CHWxvY2FsLnN0YXJr
dmlsbGVkYWlseW5ld3MuY29tghxsb2NhbC5zdG9ybm93YXlnYXpldHRlLmNvLnVr
ghZsb2NhbC50aGFtZXRvZGF5LmNvLnVrghVsb2NhbC50aGVuZXdzc3Rhci5jb22C
FmxvY2FsLnRoZXBpbG90bmV3cy5jb22CGWxvY2FsLnRoZXJlY29yZGhlcmFsZC5j
b22CFWxvY2FsLnRoZXNwZWN0cnVtLmNvbYIYbG9jYWwudG9yb250by5jam5ld3Mu
Y29tghtsb2NhbC51aW50YWNvdW50eWhlcmFsZC5jb22CGGxvY2FsLndhcGFrZGFp
bHluZXdzLmNvbYIabG9jYWwud2F5bmVpbmRlcGVuZGVudC5jb22CF2xvY2FsLndl
bGxhbmR0cmlidW5lLmNhgh1sb2NhbC53ZWxsaW5ndG9uZGFpbHluZXdzLmNvbYIZ
bG9jYWwud2VzdGVzc2V4bGlmZS5jby51a4ITbG9jYWwud2h0aW1lcy5jby51a4Ia
bG9jYWwud2lsbGNveHJhbmdlbmV3cy5jb22CJW1jZG9ub3VnaHZvaWNlLndhbmRl
cmZ1bC5vd25sb2NhbC5jb22CIm1lc3Nlbmdlci5sb2NhbC5hZGVsYWlkZW5vdy5j
b20uYXWCHG1vdW50LnNvdXRod2VzdGVybm9udGFyaW8uY2GCGm11c2tva2FuLm11
c2tva2FyZWdpb24uY29tghhteWxvY2FsLmphY2tzb252aWxsZS5jb22CJ251ZWNl
c3JlY29yZHN0YXIud2FuZGVyZnVsLm93bmxvY2FsLmNvbYIgb2FrcmlkZ2VyLndh
bmRlcmZ1bC5vd25sb2NhbC5jb22CHnNhaW50am9obi50ZWxlZ3JhcGhqb3VybmFs
LmNvbYIXc2NhcmJvcm91Z2gudG9yb250by5jb22CFnNob3BwaW5nLmNsZXZlbGFu
ZC5jb22CF3Nob3BwaW5nLmRhbGxhc25ld3MuY29tghh0aG9ybmhpbGwueW9ya3Jl
Z2lvbi5jb22CHXZpY3RvcmlhLnRlbGVncmFwaGpvdXJuYWwuY29tMEwGA1UdIARF
MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA
VYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFnCdWd1AAABAMARzBF
AiBOYNlBYy5On9C5BfHoRFqHlU5uJsAoAqhhf1Bu0+tZBgIhANC3N95T/Bbml/7Z
8tBesdjYEZU+amUOF81Ja5XQEwDCAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk
wwz05UVH9HgAAAFnCdWepAAABAMARzBFAiAzhuC2QJxp1DiHRuxsgogyGogqnHBC
XuFxD4gzY98AFQIhAKkDPkOBMXvQ9QPHwPrD4/n2lC7SEjuU+feNtQnNgUvQMA0G
CSqGSIb3DQEBCwUAA4IBAQCPKpnnxkpQM4j2CNiNAH7U7WI8SL3j/lyW1RppUlC6
bUbn3xxdCdM/4aaBFrTFHFJevP46XiXwNl6M0KIG4BKJ88lNPh24x360LWOgsxPm
nIm/cK8/yJK/iT7PRi0OPPXauoh7gYiPisS2UadBHQsgRvJ4Xb5GXKIf/Gh2Dqsz
gtacp+Ko3G2tkak34Ts3hAOLkIh+G3DBHZSJJnf3+ZXn4z2pkiZcr231oGIPTypD
BeDvlaKoBL8EXXaFi5SwGmsUWwk+HqSfLM4XadgwONEGrl/mfwXyy2tL9JInawhv
lXL5Pleq91/Ny8HmyVZ+dx8nvO7awR7PJWaySivI/qaO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonr41m+SeMgX6UgR3qmU
IVOFbV/NiKRtdVKCGgWcANAFiHjyAFznit3y/ZAyEk5Gooylf3a27NV53pZHiiwV
z9cndfMG/bKufBSoy28wHXyNRFkgm6AiJEt/2BJ28ibLfJ3elbd0yzR/jsWlCs+q
DxCAmvPNN0gRK3Fwnn42D7wbahNRo0Ax1N5GjafSERWS6srdj/xODJNLRDkJRZXv
Lx18fBrVwJMjEMdfCVEa6ol1hKYgGytbe2xObE7NqXgn2WPJsKtyjTaYuvY6m7gM
ZVJlnKSPC5O/9fAcSR9rV46IYwE8GGyoaPatmuDlA4o/CRXbKwdbiQQgwqbi+6Hf
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432389055949782845369683883710957265904242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 20:30:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 20:30:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.northjersey.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20511245168639981623649583059746172306762035333724124522962061171433896717147381811123936193492052889671748229905072348273229497002330824751347455476377144017123950036372414002559640423857631913557304051991564032669818058306288770113858071744360084206086710198530018754928897801445609380550274534074343708986266238271919166800968959930207788528888655115537426734239748460442077047676493526462332256251945754257052471227372643226508563320950187165611527316859961401866080315302010477332338701560286106132560101759329587239428489205609353063511270157292550049745300699195471177844884190747822029805369179760293023178499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c386d15fcda93ec7d1d8f4fd7503a5c69948b6e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2704 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugle.telegraphjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailygleaner.telegraphjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghmineraldaily.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalamazooshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adelaidenow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.alamogordonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.alexcityoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.argusleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bramptonguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.capjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cgsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chipleypaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chronicle-tribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clitheroeadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cornwalllife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crestonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cumbernauld-news.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dddnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.demingheadlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastlondonadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edinburghnews.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edmontonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.frontiersman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.granthamjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldtribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hillsdale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hutchnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.iberianet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inwhitleycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lancasterguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.livingstondaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.marketrasenmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.marshallnewsmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mcdonoughvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mearnsleader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midweeknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.militarynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moberlymonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.monroenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montgomeryadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.morrisherald-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.motherwelltimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mtshastanews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myrecordjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.naplesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newrichmond-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newstribune.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northnorfolknews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oakridger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolaiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pbcommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pekintimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.peterboroughtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotweb.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pocklingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.poconorecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rugbyadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sandmountainreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sheffieldtelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.shieldsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sleafordstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.starcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.starkvilledailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stornowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thametoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thenewsstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thepilotnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.therecordherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thespectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.toronto.cjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uintacountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wapakdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wayneindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wellandtribune.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wellingtondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willcoxrangenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonoughvoice.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger.local.adelaidenow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mount.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokan.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.jacksonville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuecesrecordstar.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakridger.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintjohn.telegraphjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarborough.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.dallasnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thornhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoria.telegraphjournal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016709d59dd4000004030047304502204e60d941632e4e9fd0b905f1e8445a87954e6e26c02802a8617f506ed3eb5906022100d0b737de53fc16e697fed9f2d05eb1d8d811953e6a650e17cd496b95d01300c2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016709d59ea4000004030047304502203386e0b6409c69d4388746ec6c8288321a882a9c70425ee1710f883363df0015022100a9033e4381317bd0f503c7c0fac3e3f9f6942ed2123b94f9f78db509cd814bd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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