local.hertsad.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:95:64:8c:1d:28:7b:22:f1:77:17:1a:b1:db:b9:ff:fb:d8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.hertsad.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:64:8c:1d:28:7b:22:f1:77:17:1a:b1:db:b9:ff:fb:d8
Serial Number (int): 399284866710796618012138847386960847174616
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: be:6b:60:84:45:96:8c:59:38:34:29:8c:2b:64:f9:1b:41:22:66:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:41:c3:73:5f:c8:54:1c:0c:35:7c:0f:99:be:03:c3:fe:e6:7a:8b
Fingerprint (sha256): 34:dd:0f:59:a9:79:d3:a5:c5:33:64:da:d4:4c:91:08:f8:a7:0b:41:c8:25:e1:c2:25:36:e8:8c:3e:a4:53:37

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.hertsad.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.hertsad.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajax.durhamregion.com
austin.ownlocal.com
bay-chronicle.origami.neighbourly.co.nz
bradford.yorkregion.com
businessdirectory.triblive.com
eastyorkbeach.toronto.com
fk.local.kentonline.co.uk
flintshopping.mlive.com
hauraki-herald.origami.neighbourly.co.nz
huntsville.muskokaregion.com
jacksonshopping.mlive.com
kalamazooshopping.mlive.com
kapiti-observer.origami.neighbourly.co.nz
ke.local.kentonline.co.uk
local.aldianews.com
local.altustimes.com
local.appeal-democrat.com
local.argusobserver.com
local.baldwin-bulletin.com
local.baystatebanner.com
local.becclesandbungayjournal.co.uk
local.bournelocal.co.uk
local.bowislandcommentator.com
local.canalboat.co.uk
local.chronicle-tribune.com
local.cotswoldlife.co.uk
local.countrymessenger.com
local.countrysmallholding.com
local.crowrivermedia.com
local.dorsetmagazine.co.uk
local.eastlondonadvertiser.co.uk
local.ftimes.com
local.gazette.com
local.gvnews.com
local.hackneygazette.co.uk
local.hertsad.co.uk
local.ijn.com
local.insidebiz.com
local.inyoregister.com
local.kelownadailycourier.ca
local.kilburntimes.co.uk
local.livingedge.co.uk
local.minstercommunitypost.com
local.montrosepress.com
local.mtairynews.com
local.myheraldreview.com
local.news-sun.com
local.newsdemocratleader.com
local.newtondailynews.com
local.norfolkmag.co.uk
local.northdevongazette.co.uk
local.northnorfolknews24.co.uk
local.nrcolumbus.com
local.observer-reporter.com
local.omakchronicle.com
local.osceolaiowa.com
local.pawtuckettimes.com
local.perhamfocus.com
local.pilotweb.aero
local.pinejournal.com
local.prairiepost.com
local.press-leader.com
local.sahuaritasun.com
local.sequoyahcountytimes.com
local.stowmarketmercury.co.uk
local.tehachapinews.com
local.the570.com
local.theabingtonjournal.com
local.theparisnews.com
local.thewestonmercury.co.uk
local.times-online.com
local.times.vernonpublishing.com
local.univisionaustin.com
local.vaildaily.com
local.vanguardia.com.mx
local.wahpetondailynews.com
local.wattonandswaffhamtimes.co.uk
local.willcoxrangenews.com
local.woonsocketcall.com
local.yourchickens.co.uk
markham.yorkregion.com
matamata-chronicle.origami.neighbourly.co.nz
midland.simcoe.com
mm.local.kentonline.co.uk
mylocal.chicagotribune.com
mylocal.latimes.com
mylocal.muleshoejournal.com
mylocal.syracusenewtimes.com
northern-outlook.origami.neighbourly.co.nz
northoaks.presspubs.com
orillia.simcoe.com
ownlocal.neighbourly.co.nz
portperry.durhamregion.com
shopping.westsidenewsny.com
shoreview.presspubs.com
stouffville.yorkregion.com
te.local.kentonline.co.uk
the-hutt-news.origami.neighbourly.co.nz
uxbridge.durhamregion.com
wasagastayner.simcoe.com

Other certificates including the domain name hertsad.co.uk

(limited to 100 certificates)
eastyorkbeach.toronto.com
local.dissexpress.co.uk
local.bensonnews-sun.com
consent.hertsad.co.uk
consent.hertsad.co.uk
*.advertiser24.co.uk
*.archant.co.uk
nor-west-news.origami.neighbourly.co.nz
local.airgunshooting.co.uk
a02342.alloaadvertiser.com
hertsad.co.uk
archant.co.uk
local.newportnewstimes.com
communityawards.hertsad.co.uk
hertsad.co.uk
local.hertsad.co.uk
archant.co.uk
archant.co.uk
consent-eng.brianmadden.com
km.local.kentonline.co.uk
local.northamptonchron.co.uk
consent.hertsad.co.uk
local.moodycountyenterprise.com
consent-eng.brianmadden.com
hertsad.co.uk
communityawards.hertsad.co.uk
*.archant.co.uk
consent.hertsad.co.uk
*.archant.co.uk
a02342.alloaadvertiser.com
muskegonshopping.mlive.com
local.mysuburbanlife.com
consent.enjoysudburymore.co.uk
*.advertiser24.co.uk
*.advertiser24.co.uk
local.bromleytimes.co.uk
kawarthalakes.mykawartha.com
local.stcatharinesstandard.ca
communityawards.hertsad.co.uk
consent-eng.brianmadden.com
consent-eng.brianmadden.com
consent.hertsad.co.uk
consent-eng.brianmadden.com
hertsad.co.uk
communityawards.hertsad.co.uk
local.news-journal.com
local.hertsad.co.uk
local.hamiltonnews.com
*.advertiser24.co.uk
communityawards.hertsad.co.uk
local.hertsad.co.uk
local.lincolncourier.com
fk.local.kentonline.co.uk
local.swcbulletin.com
local.halifaxcourier.co.uk
local.waterloochronicle.ca
hertsad.co.uk
communityawards.hertsad.co.uk
a02342.alloaadvertiser.com
local.mycaldwellcounty.com
local.brainerddispatch.com
bloorwestyork.toronto.com
archant.co.uk
archant.co.uk
hertsad.co.uk
admin.adforge.com
*.edp24.co.uk
communityawards.hertsad.co.uk
consent-eng.brianmadden.com
*.archant.co.uk
*.advertiser24.co.uk
matamata-chronicle.origami.neighbourly.co.nz
consent.hertsad.co.uk
consent.hertsad.co.uk
shopping.cleveland.com
consent-eng.brianmadden.com
local.eastlondonadvertiser.co.uk
st.local.kentonline.co.uk
archant.co.uk
*.archant.co.uk
local.eastlondonadvertiser.co.uk
horowhenua-mail.origami.neighbourly.co.nz
local.madisoncourier.com
consent-eng.brianmadden.com
st.local.kentonline.co.uk
local.duluthbudgeteer.com
local.mycaldwellcounty.com
communityawards.hertsad.co.uk
local.douglasdispatch.com
consent-eng.brianmadden.com
local.wahpetondailynews.com
consent-eng.brianmadden.com
a02342.alloaadvertiser.com
a02342.alloaadvertiser.com

Certificate

The complete raw certificate details for local.hertsad.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56gFUzp7mn1T0qnVinp+
UohJ8rHLibKeyZQ4z7JJ7ankUUk83B5NWQCByjs8mm6l4NHFPuNwDctGuwitIZNy
CndVjjZVABXu3Jr0bbrzCYnGhPUmhWIxem5EKmr8z5OQUANGbNCqgYI5c7JA/ya+
fLE3+cmz9DZ4bUHzzxjlkj8X5C7MZj7pAFdkH1tGSLJjgvrnbsduU25iT2PamHx8
IWrkTMqYUxFn6wnCYcifSGxw/S7eeQSDxr/ckFZjLcBMoNzhL3+JIXDuB8+HDVMX
d2xAIz2f3viXf8AqMF83tF/Ohh1YbfJQwqmVm/6POlNwu3lytvRZjZ5BjIjNGAXz
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399284866710796618012138847386960847174616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-28 09:25:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-27 09:25:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.hertsad.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29243902592255102826332612096170995803571574747238568396991133924196270316654662566433073057594747523245782169344249571120437954973864997248632510081983396434198028542096115559819390461557717874123098508857939308617527402996166326125983638226336656866185891623504151034848054967243294428477369993264204704284882254921057684641134183703919765276236379846414311644453121145505629969091142476883510604874208953762899257983433246793029294361763251818354605613708680563763507640997058816676489822668921333607749867364404427383276076598463619726438152696509292676935284134503328207897629828382011004022088744599180401832891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be6b608445968c593834298c2b64f91b4122666f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2705 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bay-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradford.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessdirectory.triblive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastyorkbeach.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fk.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flintshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hauraki-herald.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsville.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalamazooshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapiti-observer.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ke.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.aldianews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.altustimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.appeal-democrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.argusobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baldwin-bulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baystatebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.becclesandbungayjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bournelocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bowislandcommentator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.canalboat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chronicle-tribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cotswoldlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrymessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrysmallholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crowrivermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dorsetmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastlondonadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ftimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ijn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inyoregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kelownadailycourier.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kilburntimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.minstercommunitypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrosepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mtairynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myheraldreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newsdemocratleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newtondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norfolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northnorfolknews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nrcolumbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observer-reporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.omakchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolaiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pawtuckettimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotweb.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.prairiepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.press-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sahuaritasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sequoyahcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stowmarketmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tehachapinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the570.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theabingtonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theparisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewestonmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.univisionaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vaildaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vanguardia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wattonandswaffhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willcoxrangenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.woonsocketcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourchickens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markham.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamata-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midland.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.latimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.muleshoejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.syracusenewtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northern-outlook.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northoaks.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orillia.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownlocal.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portperry.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.westsidenewsny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreview.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stouffville.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-hutt-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uxbridge.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasagastayner.simcoe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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