local.brechinadvertiser.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:b0:bd:3c:7d:1a:02:a8:3c:27:5c:47:8f:ca:9a:8b:c4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.brechinadvertiser.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:b0:bd:3c:7d:1a:02:a8:3c:27:5c:47:8f:ca:9a:8b:c4
Serial Number (int): 283690138343362294697001382121222958648260
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:df:af:f6:1c:46:79:7f:cf:4b:4c:0d:d8:14:39:66:7d:d9:ea:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:cb:b1:81:f3:d7:92:7d:0f:89:00:b4:b3:4e:ab:7d:14:b4:fd:12
Fingerprint (sha256): 35:e4:3e:24:b1:51:a7:d7:78:7e:7a:d9:2a:0d:8d:c5:ff:62:7a:65:66:fe:e6:fb:a9:51:05:3c:7b:59:74:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.brechinadvertiser.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.brechinadvertiser.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

baycityshopping.mlive.com
ghwayneindependent.wanderful.ownlocal.com
lincolncourier.wanderful.ownlocal.com
local.adelaidenow.com.au
local.alicetx.com
local.ardmoreite.com
local.auroraadvertiser.net
local.ballymenatimes.com
local.ballymoneytimes.co.uk
local.barkinganddagenhampost.co.uk
local.bcdemocratonline.com
local.becclesandbungayjournal.co.uk
local.belpernews.co.uk
local.berwick-advertiser.co.uk
local.blueridgenow.com
local.bognor.co.uk
local.brechinadvertiser.co.uk
local.bridlingtonfreepress.co.uk
local.buckinghamtoday.co.uk
local.buckscountyherald.com
local.capjournal.com
local.cheshirelife.co.uk
local.cornwalllife.co.uk
local.cranbrookherald.com
local.crawleyobserver.co.uk
local.crookstontimes.com
local.dailyherald.com
local.dansvilleonline.com
local.dglobe.com
local.diariolasamericas.com
local.dominionpost.com
local.ellontimes.co.uk
local.erinadvocate.com
local.gctelegram.com
local.geelongadvertiser.com.au
local.greenun24.co.uk
local.havenews.com
local.heraldtribune.com
local.houmatoday.com
local.huntervalleynews.net.au
local.ijn.com
local.ilkestonadvertiser.co.uk
local.index.vernonpublishing.com
local.kentweddingday.co.uk
local.kilburntimes.co.uk
local.laurinburgexchange.com
local.lisburntoday.co.uk
local.lowestoftjournal.co.uk
local.mexicoledger.com
local.midsussextimes.co.uk
local.militarynews.com
local.milngavieherald.co.uk
local.monroenews.com
local.morrisherald-news.com
local.niagarathisweek.com
local.njherald.com
local.nwfdailynews.com
local.oakridger.com
local.ocala.com
local.oglecountylife.com
local.parrysound.com
local.pineandlakes.com
local.portadowntimes.co.uk
local.reviewatlas.com
local.ricentral.com
local.ripleyandheanornews.co.uk
local.ripongazette.co.uk
local.rugbyadvertiser.co.uk
local.runnelscountyregister.com
local.sahuaritasun.com
local.sheffieldtelegraph.co.uk
local.shieldsgazette.com
local.sidneyherald.com
local.siskiyoudaily.com
local.sleafordstandard.co.uk
local.spokane.exchange
local.superiortelegram.com
local.swtimes.com
local.tabertimes.com
local.tahoedailytribune.com
local.the-dispatch.com
local.thechiefleader.com
local.thedailyreporter.com
local.thefloridavillager.com
local.theparisnews.com
local.uintacountyherald.com
local.wayneindependent.com
local.yorkregion.com
local.yorkshireeveningpost.co.uk
muskokan.muskokaregion.com
mylocal.capitalgazette.com
mylocal.mcall.com
mylocal.muleshoejournal.com
mylocal.springfieldnewssun.com
orillia.simcoe.com
richmondhill.yorkregion.com
saginawshopping.mlive.com
shopping.syracuse.com
timesnewspapers.mortontimesnews.com
wasagastayner.simcoe.com

Other certificates including the domain name brechinadvertiser.co.uk

(limited to 100 certificates)
findit.brechinadvertiser.co.uk
findit.brechinadvertiser.co.uk
arbroathherald.co.uk
findit.brechinadvertiser.co.uk
arbroathherald.co.uk
local.brechinadvertiser.co.uk
www.edinburghnews.scotsman.com
www.arbroathherald.co.uk
arbroathherald.co.uk
findit.brechinadvertiser.co.uk
arbroathherald.co.uk
findit.brechinadvertiser.co.uk
www.arbroathherald.co.uk
findit.brechinadvertiser.co.uk
findit.brechinadvertiser.co.uk
local.bromleytimes.co.uk
www.scotsman.com
www.arbroathherald.co.uk
www.arbroathherald.co.uk
www.arbroathherald.co.uk
www.arbroathherald.co.uk
www.arbroathherald.co.uk
arbroathherald.co.uk
findit.brechinadvertiser.co.uk
findit.brechinadvertiser.co.uk
www.arbroathherald.co.uk
arbroathherald.co.uk
findit.brechinadvertiser.co.uk
arbroathherald.co.uk
local.mywebtimes.com
arbroathherald.co.uk
www.arbroathherald.co.uk
www.arbroathherald.co.uk

Certificate

The complete raw certificate details for local.brechinadvertiser.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK6GHMalpQDVgpoVsFWb
i1vYrhBIw7mtupprH0KDJOhBHtT+5hHLn7qEX8bVjhqn8UY5mfVDSBl0Ncfjcl5v
d8hE61ceG6thRJwf6YrBi6YuajAR2v2mPVM55YVh5IkRlTKFZiEvrzKpjrJhN2Ww
FYtSeBs8yMH6elGL8ANPXCAxpYFqrG/xkwmwkU1sl/58gwpCAeLqIMWC2LfA68O6
QWKrR4ytej+LKLQA4HHoS6WmdNYUDOaambslvX4PZgEfA3+7qWoZ9Mboubp2Aloh
DFV6JxIb9lrQm0Xl6CO/5Gt4brb9Nc2dq9AWb4Iw7/N+dsAaCVo6FE2w+hehWXYI
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283690138343362294697001382121222958648260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 09:14:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 09:14:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.brechinadvertiser.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25333721924291295878694059420218100775768029381816387916001336441033375778384890384012927011074176290693213410170877355113682060879026539398622146637969393736896565186591579689395004893612054572155140635203793075043251408479714461818944750577122191944991781682128867623648263483515339218175720745869018168204969335889156774896800234225693428315829579104814956689552318419566772518958441340974719544898415054794442810575316896482237753087545946197476882371574216944229511670896860965973853998019177653229970376099167823754625312832923702604991909272144495194926498472923518523855344140727457284470126633952985759484153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bdfaff61c46797fcf4b4c0dd81439667dd9ea91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2664 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baycityshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghwayneindependent.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolncourier.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adelaidenow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.alicetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ardmoreite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.auroraadvertiser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ballymenatimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ballymoneytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.barkinganddagenhampost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bcdemocratonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.becclesandbungayjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.belpernews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.berwick-advertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.blueridgenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bognor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brechinadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bridlingtonfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buckinghamtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buckscountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.capjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cornwalllife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cranbrookherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crawleyobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crookstontimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dansvilleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.diariolasamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dominionpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ellontimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.erinadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gctelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.geelongadvertiser.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greenun24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.havenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldtribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.houmatoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ijn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ilkestonadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.index.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kentweddingday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kilburntimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.laurinburgexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lisburntoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lowestoftjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mexicoledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midsussextimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.militarynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.milngavieherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.monroenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.morrisherald-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.niagarathisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.njherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwfdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oakridger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ocala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oglecountylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portadowntimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.reviewatlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ricentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ripleyandheanornews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ripongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rugbyadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.runnelscountyregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sahuaritasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sheffieldtelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.shieldsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sidneyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.siskiyoudaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sleafordstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.spokane.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.swtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tabertimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tahoedailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the-dispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thechiefleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedailyreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thefloridavillager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theparisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uintacountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wayneindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkshireeveningpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokan.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.muleshoejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.springfieldnewssun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orillia.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saginawshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.syracuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesnewspapers.mortontimesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasagastayner.simcoe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017014d7dfaa0000040300473045022003d52742afe20b09a1be2933e95aba27fe2ddf86b0bc2c03c6d939f7ea30eb66022100f4904d0a910a9f0aaa7ff5f7287e6268915bcb7cf8bd487b70a6106a8fb148ea007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017014d7dfa0000004030047304502202dc732fc5f884bf6a7185882ac8348647aa7bfa9243b9069e4dfa05b074600f2022100a97039c2e4682383a9972309e5856341fcfb9a2bb22f6911717211e2835b6a13
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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