tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:df:3c:a3:98:ab:5b:41:48:05:5c:cf:0d:c6:e8:a0:8c was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:df:3c:a3:98:ab:5b:41:48:05:5c:cf:0d:c6:e8:a0:8c
Serial Number (int): 271842061501908920527690064261560930967692
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:4f:f6:9a:e8:04:c7:6e:c9:39:33:68:65:f9:76:64:5b:87:e4:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:38:71:58:83:2f:ac:f3:0d:31:d6:eb:42:b6:bc:10:f5:e1:2b:a1
Fingerprint (sha256): 35:71:8e:57:f7:fd:a8:87:3b:7f:c7:4f:bb:cd:bf:b9:61:29:0b:a1:c8:aa:9a:ba:48:be:ca:e8:42:55:29:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate tls.automattic.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1015jamz.cbslocal.com
1053thefan.cbslocal.com
1057thefan.cbslocal.com
1067thefandc.cbslocal.com
610wip.cbslocal.com
910espn.cbslocal.com
937thefan.cbslocal.com
985thesportshub.cbslocal.com
987ampradio.cbslocal.com
997now.cbslocal.com
americastalk1660.cbslocal.com
amp.cbslocal.com
atlanta.cbslocal.com
b96.cbslocal.com
baltimore.cbslocal.com
boston.cbslocal.com
campaign2010.cbslocal.com
cbsimusic.cbslocal.com
cbsinlandempire.cbslocal.com
charlotte.cbslocal.com
chicago.cbslocal.com
cleveland.cbslocal.com
connecticut.cbslocal.com
cwatlanta.cbslocal.com
cwbayarea.cbslocal.com
cwdetroit.cbslocal.com
cwphilly.cbslocal.com
cwpittsburgh.cbslocal.com
cwsacramento.cbslocal.com
cwsanfrancisco.cbslocal.com
cwseattle.cbslocal.com
cwtampa.cbslocal.com
dallas.cbslocal.com
denver.cbslocal.com
detroit.cbslocal.com
dfw.cbslocal.com
downtownfoodandwinefest.cbslocal.com
gooddaysacramento.cbslocal.com
hartford.cbslocal.com
hothits957.cbslocal.com
houston.cbslocal.com
kcbs.cbslocal.com
kdka.cbslocal.com
kfwb.cbslocal.com
khtk.cbslocal.com
kikk.cbslocal.com
kiss951.cbslocal.com
klli.cbslocal.com
kluc.cbslocal.com
kmle108.cbslocal.com
kmox.cbslocal.com
kptk.cbslocal.com
krld.cbslocal.com
kxnt.cbslocal.com
kyw.cbslocal.com
lasvegas.cbslocal.com
losangeles.cbslocal.com
miami.cbslocal.com
minneapolis.cbslocal.com
minnesota.cbslocal.com
newyork.cbslocal.com
philadelphia.cbslocal.com
pittsburgh.cbslocal.com
sacramento.cbslocal.com
sanfrancisco.cbslocal.com
seattle.cbslocal.com
sk8thest8s.cbslocal.com
stlouis.cbslocal.com
tampa.cbslocal.com
tls.automattic.com
waok.cbslocal.com
washington.cbslocal.com
wbbm.cbslocal.com
wbz.cbslocal.com
wcco.cbslocal.com
wfnz.cbslocal.com
wpht.cbslocal.com
wscr.cbslocal.com
wtic.cbslocal.com
wwj.cbslocal.com
wxyt.cbslocal.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyvrQyzB5WzAGBplih6s
Elb7XoOpPOuXF3+RausxLYFEcH+Ybse7hPs0vO6RAOZzjUpd+52kQHU93AkgZWFl
681yEaNgvVVIp7IcA4spgwFEAUaZ9yKQrGFSQmTZPZfvJbWg6eb5ymEy1ukCH0+U
xQUj4IAU8JN5H9WievLTS2m6K1/jBBc9gDILg8orItIsg+AO5Lz2vbAmZBIvSU6Z
45cEdNZjL+Sj/Cm3gGRFCx47SBLXruivwgzWkH1Exszrax/GqbD5XZ16APGKH9+t
LYo6vfP8HAnWyFzUmVrr2SJDohyDDtu5BZZdbEnqo+Uv5EwnniS8je/XWDc7fXPA
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271842061501908920527690064261560930967692
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-04 08:55:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-03 08:55:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23123267071787361400275007248011557793058760850989905288870758280456629309364574601763678581495480940182082643183643149779322528470048261516519402235417165922211265797062571942050747141176537714063432959053104623291355015171107544633926199441214469307098980190560007326193545540107782262444707665158474363444282579407791517156918929691591138655152209445966417871324450730110029032762354949583614238428349978091241389989732391492353411569759580044679681858432763525168546390002777947354011807381116367714525736355429759195555686176766039929899827335799625343607123062914369381552412302876068900178769508085724341321891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f64ff69ae804c76ec939336865f976645b87e432
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1015jamz.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1053thefan.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1057thefan.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1067thefandc.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '610wip.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '910espn.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '937thefan.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '985thesportshub.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '987ampradio.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '997now.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americastalk1660.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b96.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltimore.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boston.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign2010.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsimusic.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsinlandempire.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlotte.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleveland.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticut.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwatlanta.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwbayarea.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwdetroit.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwphilly.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwpittsburgh.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwsacramento.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwsanfrancisco.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwseattle.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtampa.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallas.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detroit.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfw.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downtownfoodandwinefest.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gooddaysacramento.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartford.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hothits957.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houston.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcbs.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdka.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfwb.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khtk.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikk.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiss951.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klli.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kluc.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmle108.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmox.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kptk.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krld.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kxnt.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyw.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegas.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangeles.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miami.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneapolis.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesota.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyork.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philadelphia.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittsburgh.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacramento.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfrancisco.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattle.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk8thest8s.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouis.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tampa.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waok.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbbm.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbz.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcco.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfnz.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpht.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wscr.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtic.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwj.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wxyt.cbslocal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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