*.forum.cue.cloud

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:15:ae:7f:df:23:b5:d1:22:17:a6:b9:7c:a0:a0:d5:70:47 was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.forum.cue.cloud

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:ae:7f:df:23:b5:d1:22:17:a6:b9:7c:a0:a0:d5:70:47
Serial Number (int): 268714737119394653873189119637909063168071
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:8b:9a:68:54:67:d6:8d:b1:87:e2:eb:e9:d6:5f:2e:aa:d9:ac:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:c2:c8:39:b0:81:5d:5a:60:82:a8:6b:b7:a2:11:c9:e6:3f:33:28
Fingerprint (sha256): 37:16:1c:0c:28:3c:e6:5b:76:20:40:db:ae:0d:4a:15:e0:a0:7d:57:82:4d:a5:c6:81:15:72:86:9c:ce:1c:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.forum.cue.cloud

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.forum.cue.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.forum.cue.cloud
bemidjipioneer.com
brainerddispatch.com
dglobe.com
dl-online.com
duluthnewstribune.com
echopress.com
fccnn.com
grandforksherald.com
inforum.com
jamestownsun.com
lcnewschronicle.com
mitchellrepublic.com
parkrapidsenterprise.com
perhamfocus.com
pineandlakes.com
pinejournal.com
rivertowns.net
stevenscountytimes.com
superiortelegram.com
thedickinsonpress.com
theosakisreview.com
wadenapj.com
wctrib.com
westfargopioneer.com
www.agweek.forum.cue.cloud
www.bemidjipioneer.com
www.brainerddispatch.com
www.dglobe.com
www.dl-online.com
www.duluthnewstribune.com
www.echopress.com
www.farmingtonindependent.forum.cue.cloud
www.fccnn.com
www.grandforksherald.com
www.hastingsstargazette.forum.cue.cloud
www.hudsonstarobserver.forum.cue.cloud
www.inforum.com
www.jamestownsun.com
www.lcnewschronicle.com
www.mitchellrepublic.com
www.newrichmond-news.forum.cue.cloud
www.parkrapidsenterprise.com
www.perhamfocus.com
www.piercecountyherald.forum.cue.cloud
www.pineandlakes.com
www.pinejournal.com
www.prairiebusinessmagazine.forum.cue.cloud
www.republican-eagle.forum.cue.cloud
www.riverfallsjournal.forum.cue.cloud
www.rivertowns.forum.cue.cloud
www.rivertowns.net
www.rosemounttownpages.forum.cue.cloud
www.stevenscountytimes.com
www.superiortelegram.com
www.swcbulletin.forum.cue.cloud
www.thedickinsonpress.com
www.theosakisreview.com
www.therinklive.forum.cue.cloud
www.training.forum.cue.cloud
www.wadenapj.com
www.wadenapj.forum.cue.cloud
www.wctrib.com
www.wday.forum.cue.cloud
www.wdaz.forum.cue.cloud
www.westfargopioneer.com
www.woodburybulletin.forum.cue.cloud

Other certificates including the domain name cue.cloud

(limited to 100 certificates)
nexo.cue.cloud
prod.globalblue.cue.cloud
ece-qatest15.cci.cue.cloud
elsoldemexico.test1.oem.cue.cloud
*.forum.cue.cloud
*.rwp.devtest.vrm.cue.cloud
elsoldemexico.com.mx
elsoldemexico.staging.oem.cue.cloud
*.test.madsack.cue.cloud
*.cue.cloud
escenic.cue.cloud
*.bnn.cue.cloud
*.cue.cloud
ece.banjo-vanadium.poc.cue.cloud
*.staging.forum.cue.cloud
elsoldemexico.oem.cue.cloud
*.cue.cloud
ece-stingray.cci.cue.cloud
*.oem.cue.cloud
ece-redspot.cci.cue.cloud
*.oem.cue.cloud
prod-site.vrm.cue.cloud
escenic.cue.cloud
*.staging.forum.cue.cloud
*.forum.cue.cloud
forum.cue.cloud
bnn.de
*.staging.mcc.cue.cloud
*.forum.cue.cloud
*.mcc.cue.cloud
*.bnn.cue.cloud
mediahuis.cue.cloud
dev.pd.cue.cloud
sites.vrm.cue.cloud
elsoldemexico.com.mx
*.cue.cloud
elsoldemexico.oem.cue.cloud
*.cue.cloud
www.elsoldemexico.staging.oem.cue.cloud
*.forum.cue.cloud
belo.cue.cloud
*.oem.cue.cloud
*.forum.cue.cloud
*.cci.cue.cloud
*.test.mcc.cue.cloud
*.oem.cue.cloud
ng-cue-unstable-contentstore.cci.cue.cloud
bnn.de
escenic.cue.cloud
ng-cueways.cci.cue.cloud
*.oem.cue.cloud
katura.pola.cue.cloud
elsoldemexico.staging.oem.cue.cloud
ng-stratus.cci.cue.cloud
*.cue.cloud
diariodelsur.com.mx
nexojornal.com.br
*.cue.cloud
dynatrace-activegate.cci.cue.cloud
um-qa.cci.cue.cloud
devnglb.belo.cue.cloud
img.digital.staging.vrm.cue.cloud
elsoldemexico.com.mx
*.oem.cue.cloud
elsoldemexico.com.mx
cook.staging.borsen.cue.cloud
nexojornal.com.br
*.cue.cloud
*.staging.forum.cue.cloud
nglb.hearst.cue.cloud
*.bnn.cue.cloud
*.forum.cue.cloud
escenic.cue.cloud
*.staging.forum.cue.cloud
*.staging.oem.cue.cloud
ng-fuji.cci.cue.cloud
*.cue.cloud
stagnglb.hearst.cue.cloud
elsoldemexico.test1.oem.cue.cloud
*.oem.cue.cloud
*.dynatrace.cci.cue.cloud
staging.pd.cue.cloud
elsoldemexico.com.mx
secure.test.globalblue.cue.cloud
*.staging.forum.cue.cloud
monitorlb.belo.cue.cloud
www.noticiasvespertinas.staging.oem.cue.cloud
nglb.belo.cue.cloud
sandbox.service.bnn.de
nexo.cue.cloud
test2.bnn.cue.cloud
*.bnn.cue.cloud
cue-um-unstable-nightly.cci.cue.cloud
prod.globalblue.cue.cloud
elsoldetoluca.staging.oem.cue.cloud
dagen.cue.cloud
*.oem.cue.cloud
*.cue.cloud
*.psus.cue.cloud
elsoldemexico.test.oem.cue.cloud

Certificate

The complete raw certificate details for *.forum.cue.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodDoDSOOS2G23F/G2kds
JLC7e5hfXGfLPd0E78YhIkLNqFI4poQFFAzKXFYqVeVGYg7IYiP/w/BHGUeLugAs
xbr7eplPqLgHd6z2MiOKv5r3A9uocY11ar+gARIoa3h/u3n+nKcVh1Vz4Rl2k3j0
TXd6Zbq5mJ5W5qOi6HNNCVByVqQZijd4fjr7xswNoTtQItGVLVBrDPxa1U5ow3+q
fHbK7fQZ/Qne+qyUwEifQGic8AklubjbCRjjEUeCGln44da5BlwRSAIRCXvNrBUc
CYf4/v+SRKHaHPX0m8IIItm3NEYhJgP8oF06D1CZSWa+GIpL+dFCbyUc3hAmnD2V
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268714737119394653873189119637909063168071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 05:00:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 05:00:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.forum.cue.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20427382709713248036876001338420850662648915070143466417476685164056089088127658775516761149171851316260459713448115022622408791172457259519369169279579346556619157399317722344259509012240023570637120735898307007857019372878851471259580426413554063018863701717189335868364201031327420459815004315399511658685606003977669072858164653135852314888088921264592078351880281320027382648924363949931683420871756664900391258187962159294602492316328356689977111676440624574679600149782727904379994702751088232398516941187950490828586990879329649837475454587449416223665891002467728390702379670564527214451286676120362641364467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a08b9a685467d68db187e2ebe9d65f2eaad9ac66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1651 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcnewschronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertowns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenscountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theosakisreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westfargopioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agweek.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmingtonindependent.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fccnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsstargazette.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsonstarobserver.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcnewschronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newrichmond-news.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piercecountyherald.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiebusinessmagazine.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.republican-eagle.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverfallsjournal.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertowns.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertowns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosemounttownpages.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevenscountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swcbulletin.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theosakisreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therinklive.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.training.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wadenapj.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wday.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdaz.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westfargopioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodburybulletin.forum.cue.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c50ea4fb300000403004730450220066891110776bdfb22cf78e3f03ebef719ca4248a6f208893bb6d622f0c2bb44022100f5fcf8df17130b553e4551222a17914cb613eed6d5b158a1832dda46677d65fc00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c50ea51c50000040300473045022064bf15df12779945806cbb73cfa3e201f6436ec4a9294917de10069c39713943022100e233b6c88dc371b9cb7619c1d3e35dc0de049546faac92767e77cb699220568b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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