sp.usatoday.com
Issued by R3
About this certificate
This digital certificate with serial number 04:dd:a6:11:72:6b:99:65:f2:f0:c7:14:10:c6:d2:bc:c2:e6 was issued on by Let's Encrypt.
With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sp.usatoday.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:dd:a6:11:72:6b:99:65:f2:f0:c7:14:10:c6:d2:bc:c2:e6Serial Number (int): 423872289253634860799454515109856584450790
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 38:56:24:44:0d:de:06:a7:0d:7d:96:15:e2:7c:0e:17:7c:bd:cf:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c1:dd:78:eb:89:82:a4:7c:ab:90:5f:c4:09:76:37:ce:10:84:5e:a1
Fingerprint (sha256): 3b:d8:18:f8:e3:04:e6:c7:7f:02:1a:c2:2e:15:a5:a7:25:d5:15:9a:68:0b:f0:cd:67:84:52:63:3b:28:a8:f6
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sp.usatoday.com
48
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sp.usatoday.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sp.ardmoreite.com
sp.news-star.com
sp.postcrescent.com
sp.poughkeepsiejournal.com
sp.press-citizen.com
sp.pressconnects.com
sp.publicopiniononline.com
sp.pushsquare.com
sp.recordonline.com
sp.redding.com
sp.reporternews.com
sp.rgj.com
sp.ruidosonews.com
sp.scsun-news.com
sp.sctimes.com
sp.sheboyganpress.com
sp.shreveporttimes.com
sp.stargazette.com
sp.statesmanjournal.com
sp.stevenspointjournal.com
sp.tallahassee.com
sp.tcpalm.com
sp.tennessean.com
sp.theadvertiser.com
sp.thecalifornian.com
sp.thedailyjournal.com
sp.thegleaner.com
sp.theleafchronicle.com
sp.thenews-messenger.com
sp.thenewsstar.com
sp.thenorthwestern.com
sp.thespectrum.com
sp.thestarpress.com
sp.thetimesherald.com
sp.thetowntalk.com
sp.timesrecordnews.com
sp.todaysgolfer.co.uk
sp.upstateparent.com
sp.usatoday.com
sp.vcstar.com
sp.visaliatimesdelta.com
sp.wausaudailyherald.com
sp.wisconsinrapidstribune.com
sp.wisfarmer.com
sp.wunderground.com
sp.ydr.com
sp.yorkdispatch.com
sp.zanesvilletimesrecorder.com
sp.news-star.com
sp.postcrescent.com
sp.poughkeepsiejournal.com
sp.press-citizen.com
sp.pressconnects.com
sp.publicopiniononline.com
sp.pushsquare.com
sp.recordonline.com
sp.redding.com
sp.reporternews.com
sp.rgj.com
sp.ruidosonews.com
sp.scsun-news.com
sp.sctimes.com
sp.sheboyganpress.com
sp.shreveporttimes.com
sp.stargazette.com
sp.statesmanjournal.com
sp.stevenspointjournal.com
sp.tallahassee.com
sp.tcpalm.com
sp.tennessean.com
sp.theadvertiser.com
sp.thecalifornian.com
sp.thedailyjournal.com
sp.thegleaner.com
sp.theleafchronicle.com
sp.thenews-messenger.com
sp.thenewsstar.com
sp.thenorthwestern.com
sp.thespectrum.com
sp.thestarpress.com
sp.thetimesherald.com
sp.thetowntalk.com
sp.timesrecordnews.com
sp.todaysgolfer.co.uk
sp.upstateparent.com
sp.usatoday.com
sp.vcstar.com
sp.visaliatimesdelta.com
sp.wausaudailyherald.com
sp.wisconsinrapidstribune.com
sp.wisfarmer.com
sp.wunderground.com
sp.ydr.com
sp.yorkdispatch.com
sp.zanesvilletimesrecorder.com
Other certificates including the domain name usatoday.com
(limited to 100 certificates)
ydr.com
gannett.com
ugaforum.usatoday.com
gannett.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
hoosiertimes.com
columbiatribune.com
amestrib.com
southernkitchen.com
golftips.golfweek.usatoday.com
recordnet.com
echo-pilot.com
reporternews.com
gadsdentimes.com
*.scsun-news.com
the-daily-record.com
*.usatodaynetwork.com
chiefsforum.usatoday.com
the-review.com
examiner-enterprise.com
coloradoan.com
dnj.com
mycentraljersey.com
journalstandard.com
gannett.com
tcpalm.com
cantondailyledger.com
siskiyoudaily.com
coloradoan.com
tricountyindependent.com
*.gannett.com
secure17.nexternal.com
adelnews.com
sussexcountian.com
reviewatlas.com
jobs.thejobnetwork.com
news-press.com
providencejournal.com
scsuntimes.com
games.usatoday.com
hollandsentinel.com
marionstar.com
mt-edge-b.3scale.net
classroom.synonym.com
savannahnow.com
gannett.com
san-005.ceros.com
dnj.com
paris-express.com
gannett.com
patriotledger.com
dailyamerican.com
progress-index.com
cdn-le5.arkadiumhosted.com
*.scsun-news.com
secure12.nexternal.com
mtshastanews.com
delawareonline.com
journalstandard.com
rgj.com
databases.floridatoday.com
giantsforum.usatoday.com
secure17.nexternal.com
draftwire.usatoday.com
ftw.usatoday.com
gannett.com
wickedlocal.com
br.bikeradar.com
the-leader.com
sentinel-standard.com
ydr.com
wickedlocal.com
ndinsider.com
gannett.com
newarkadvocate.com
billswire.usatoday.com
gannett.com
blackmountainnews.com
cdn-le4.arkadiumhosted.com
*.gannett.com
mortontimesnews.com
celticswire.usatoday.com
gosanangelo.com
marionstar.com
duckswire.usatoday.com
getcreative.usatoday.com
chillicothetimesbulletin.com
gainesville.com
timesonline.com
cdn-le4.arkadiumhosted.com
gannett.com
gannett.com
hockessincommunitynews.com
lebronwire.usatoday.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
gannett.com
ruidosonews.com
fightingirishforum.usatoday.com
gannett.com
ugaforum.usatoday.com
gannett.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
hoosiertimes.com
columbiatribune.com
amestrib.com
southernkitchen.com
golftips.golfweek.usatoday.com
recordnet.com
echo-pilot.com
reporternews.com
gadsdentimes.com
*.scsun-news.com
the-daily-record.com
*.usatodaynetwork.com
chiefsforum.usatoday.com
the-review.com
examiner-enterprise.com
coloradoan.com
dnj.com
mycentraljersey.com
journalstandard.com
gannett.com
tcpalm.com
cantondailyledger.com
siskiyoudaily.com
coloradoan.com
tricountyindependent.com
*.gannett.com
secure17.nexternal.com
adelnews.com
sussexcountian.com
reviewatlas.com
jobs.thejobnetwork.com
news-press.com
providencejournal.com
scsuntimes.com
games.usatoday.com
hollandsentinel.com
marionstar.com
mt-edge-b.3scale.net
classroom.synonym.com
savannahnow.com
gannett.com
san-005.ceros.com
dnj.com
paris-express.com
gannett.com
patriotledger.com
dailyamerican.com
progress-index.com
cdn-le5.arkadiumhosted.com
*.scsun-news.com
secure12.nexternal.com
mtshastanews.com
delawareonline.com
journalstandard.com
rgj.com
databases.floridatoday.com
giantsforum.usatoday.com
secure17.nexternal.com
draftwire.usatoday.com
ftw.usatoday.com
gannett.com
wickedlocal.com
br.bikeradar.com
the-leader.com
sentinel-standard.com
ydr.com
wickedlocal.com
ndinsider.com
gannett.com
newarkadvocate.com
billswire.usatoday.com
gannett.com
blackmountainnews.com
cdn-le4.arkadiumhosted.com
*.gannett.com
mortontimesnews.com
celticswire.usatoday.com
gosanangelo.com
marionstar.com
duckswire.usatoday.com
getcreative.usatoday.com
chillicothetimesbulletin.com
gainesville.com
timesonline.com
cdn-le4.arkadiumhosted.com
gannett.com
gannett.com
hockessincommunitynews.com
lebronwire.usatoday.com
classroom.synonym.com
cdn-le4.arkadiumhosted.com
gannett.com
ruidosonews.com
fightingirishforum.usatoday.com
Certificate
The complete raw certificate details for sp.usatoday.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJHzCCCAegAwIBAgISBN2mEXJrmWXy8McUEMbSvMLmMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTEwMTMxNzA3NTZaFw0yMjAxMTExNzA3NTVaMBoxGDAWBgNVBAMT D3NwLnVzYXRvZGF5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALICUopwQNVVLswNiCEmO53Qa37sfZnZKXfXDXFmglK8LbLbcYEjPb0+3gMpAla8 S9E/2df9mzL7FSmN41CQKBNBXtL1H34uPQZbIu1PwGJvtD00XopMGYPyndPi89EN dYVmOQucZMoP3/To3cjlLerywOya+32N3OMwOsTWtDxbqi9vLhBibf06mt9aOWgi bXpqXwK3/5g801dAqKenzuGSgg0KG6t2PFL+4ibOjIKo0AI/zVH4Y0OdS3pQwUTT Nnz5luUdAyd39EvwOKbxldC4Sxw21npjl7jp2PxBmtjmsWFyu/1y7DcYERsiGRLQ yjW+gCytDoTmq9o1la4eTP8CAwEAAaOCBkUwggZBMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUOFYkRA3eBqcNfZYV4nwOF3y9z/MwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wggQUBgNVHREEggQLMIIEB4IRc3AuYXJkbW9yZWl0ZS5jb22CEHNwLm5ld3Mt c3Rhci5jb22CE3NwLnBvc3RjcmVzY2VudC5jb22CGnNwLnBvdWdoa2VlcHNpZWpv dXJuYWwuY29tghRzcC5wcmVzcy1jaXRpemVuLmNvbYIUc3AucHJlc3Njb25uZWN0 cy5jb22CGnNwLnB1YmxpY29waW5pb25vbmxpbmUuY29tghFzcC5wdXNoc3F1YXJl LmNvbYITc3AucmVjb3Jkb25saW5lLmNvbYIOc3AucmVkZGluZy5jb22CE3NwLnJl cG9ydGVybmV3cy5jb22CCnNwLnJnai5jb22CEnNwLnJ1aWRvc29uZXdzLmNvbYIR c3Auc2NzdW4tbmV3cy5jb22CDnNwLnNjdGltZXMuY29tghVzcC5zaGVib3lnYW5w cmVzcy5jb22CFnNwLnNocmV2ZXBvcnR0aW1lcy5jb22CEnNwLnN0YXJnYXpldHRl LmNvbYIXc3Auc3RhdGVzbWFuam91cm5hbC5jb22CGnNwLnN0ZXZlbnNwb2ludGpv dXJuYWwuY29tghJzcC50YWxsYWhhc3NlZS5jb22CDXNwLnRjcGFsbS5jb22CEXNw LnRlbm5lc3NlYW4uY29tghRzcC50aGVhZHZlcnRpc2VyLmNvbYIVc3AudGhlY2Fs aWZvcm5pYW4uY29tghZzcC50aGVkYWlseWpvdXJuYWwuY29tghFzcC50aGVnbGVh bmVyLmNvbYIXc3AudGhlbGVhZmNocm9uaWNsZS5jb22CGHNwLnRoZW5ld3MtbWVz c2VuZ2VyLmNvbYISc3AudGhlbmV3c3N0YXIuY29tghZzcC50aGVub3J0aHdlc3Rl cm4uY29tghJzcC50aGVzcGVjdHJ1bS5jb22CE3NwLnRoZXN0YXJwcmVzcy5jb22C FXNwLnRoZXRpbWVzaGVyYWxkLmNvbYISc3AudGhldG93bnRhbGsuY29tghZzcC50 aW1lc3JlY29yZG5ld3MuY29tghVzcC50b2RheXNnb2xmZXIuY28udWuCFHNwLnVw c3RhdGVwYXJlbnQuY29tgg9zcC51c2F0b2RheS5jb22CDXNwLnZjc3Rhci5jb22C GHNwLnZpc2FsaWF0aW1lc2RlbHRhLmNvbYIYc3Aud2F1c2F1ZGFpbHloZXJhbGQu Y29tgh1zcC53aXNjb25zaW5yYXBpZHN0cmlidW5lLmNvbYIQc3Aud2lzZmFybWVy LmNvbYITc3Aud3VuZGVyZ3JvdW5kLmNvbYIKc3AueWRyLmNvbYITc3AueW9ya2Rp c3BhdGNoLmNvbYIec3AuemFuZXN2aWxsZXRpbWVzcmVjb3JkZXIuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAF8etbsAwAABAMA RjBEAiAbHnnc9zPg925/k1+kDv2J5VfPH4sTjYw8WsUw+BvldAIgVqb9tpfpHCzl CrxqXZ7jFYzXSnEej+bq8ChYwwzNKV8AdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79 SbiFq/L8cP5tRwAAAXx61uyQAAAEAwBHMEUCIQDdP72cHY5b2dDqd2YOtpxjfz94 cn6VWCjYWN8jPG3AqwIgGMdOxiAagE+2gyWFSzV5UldGTYw8iBMRWR0UTlW/Evow DQYJKoZIhvcNAQELBQADggEBAFf20mAvWwrdK+iONOjdVPP7iH/3lFaLpQIMNgQa 24IxatrCakrYAuGBt+EGicPzg3ONx4CG/LiJhrYeM0qJexGtbCdTqxnH1L8SA2Gm dVGGNqWN51Nb7bo0oBMFy8A/iAhpN9c31DSyYWjsEaLsvzH/reo46SSW+3X5sFTf bPxMsD8Kk5nJigZB8geaosJXPzJoA+KIeL7nvc0t2s7UYKT5Tkh/hSC9VDNqxv1N SaOvZ5pjYOtzjFfQavW+VwJLssQ7P5povk2n+A6lTehqLNVqiyf1awxu+4+2gKY5 J8LzjLfTKeCZ7hVhCbM7JekwD+hi0BvlAc5vywwC855BBko= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgJSinBA1VUuzA2IISY7 ndBrfux9mdkpd9cNcWaCUrwtsttxgSM9vT7eAykCVrxL0T/Z1/2bMvsVKY3jUJAo E0Fe0vUffi49Blsi7U/AYm+0PTReikwZg/Kd0+Lz0Q11hWY5C5xkyg/f9OjdyOUt 6vLA7Jr7fY3c4zA6xNa0PFuqL28uEGJt/Tqa31o5aCJtempfArf/mDzTV0Cop6fO 4ZKCDQobq3Y8Uv7iJs6MgqjQAj/NUfhjQ51LelDBRNM2fPmW5R0DJ3f0S/A4pvGV 0LhLHDbWemOXuOnY/EGa2OaxYXK7/XLsNxgRGyIZEtDKNb6ALK0OhOar2jWVrh5M /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 423872289253634860799454515109856584450790 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 17:07:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 17:07:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sp.usatoday.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22471563514361773867858632104745248209558807735983291928660447885013238584125516321472458985786745170912887430066702784171629698376632160218226010205008561550843103636722339794940974115711132502162385612180903120448903663139269817567270007837219144692620200172660414637314215926523158574166911390175112557888444382705363633142043734956001076589442083969504059186885981910963391129054120904901594745579110715463054817880484910959282280332247363265702400367046122956078384021638801758889302544455229260133500157810691171280538103842826975711153696772842861909132254555254462992442000399757488781074660143353106679090431 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 385624440dde06a70d7d9615e27c0e177cbdcff3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1035 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ardmoreite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.news-star.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.postcrescent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.poughkeepsiejournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.press-citizen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pressconnects.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.publicopiniononline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.recordonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.redding.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.reporternews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.rgj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ruidosonews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.scsun-news.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.sctimes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.sheboyganpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.shreveporttimes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.stargazette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.statesmanjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.stevenspointjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.tallahassee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.tcpalm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.tennessean.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.theadvertiser.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thecalifornian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thedailyjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thegleaner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.theleafchronicle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thenews-messenger.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thenewsstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thenorthwestern.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thespectrum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thestarpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thetimesherald.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.thetowntalk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.timesrecordnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.todaysgolfer.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.upstateparent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.usatoday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.vcstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.visaliatimesdelta.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wausaudailyherald.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wisconsinrapidstribune.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wisfarmer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.wunderground.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ydr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.yorkdispatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.zanesvilletimesrecorder.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017c7ad6ec03000004030046304402201b1e79dcf733e0f76e7f935fa40efd89e557cf1f8b138d8c3c5ac530f81be574022056a6fdb697e91c2ce50abc6a5d9ee3158cd74a711e8fe6eaf02858c30ccd295f00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017c7ad6ec900000040300473045022100dd3fbd9c1d8e5bd9d0ea77660eb69c637f3f78727e955828d858df233c6dc0ab022018c74ec6201a804fb68325854b35795257464d8c3c881311591d144e55bf12fa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0057f6d2602f5b0add2be88e34e8dd54f3fb887ff794568ba5020c36041adb82316adac26a4ad802e181b7e10689c3f383738dc78086fcb88986b61e334a897b11ad6c2753ab19c7d4bf120361a675518636a58de7535bedba34a01305cbc03f88086937d737d434b26168ec11a2ecbf31ffadea38e92496fb75f9b054df6cfc4cb03f0a9399c98a0641f2079aa2c2573f326803e28878bee7bdcd2ddaced460a4f94e487f8520bd54336ac6fd4d49a3af679a6360eb738c57d06af5be57024bb2c43b3f9a68be4da7f80ea54de86a2cd56a8b27f56b0c6efb8fb680a63927c2f38cb7d329e099ee156109b33b25e9300fe862d01be501ce6fcb0c02f39e41064a