local.clevelandcountyherald.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b7:29:c4:36:58:8a:1b:33:9c:98:e0:72:fb:71:06:4a:09 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.clevelandcountyherald.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b7:29:c4:36:58:8a:1b:33:9c:98:e0:72:fb:71:06:4a:09
Serial Number (int): 410776334013849118491824737685714829199881
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d6:7b:82:d4:0d:af:c4:62:ca:57:08:13:f8:f6:9b:a8:04:0b:3b:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:c3:ff:14:c6:c0:d4:3e:ac:2f:fc:10:0a:06:ee:72:3b:75:42:82
Fingerprint (sha256): 3c:ef:1c:60:97:6f:29:d7:5c:7f:d3:69:cc:33:70:7d:ab:4f:b4:51:4e:ab:ed:ab:95:e1:fd:6e:64:ff:66:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.clevelandcountyherald.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.clevelandcountyherald.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brock.mykawartha.com
burlington.insidehalton.com
fk.local.kentonline.co.uk
gravenhurst.muskokaregion.com
km.local.kentonline.co.uk
leader.local.heraldsun.com.au
local.adirondackexpress.com
local.azcentral.com
local.bannergraphic.com
local.baxterbulletin.com
local.bromleytimes.co.uk
local.brookingsregister.com
local.buckscountyherald.com
local.bucyrustelegraphforum.com
local.buxtonadvertiser.co.uk
local.caledonianrecord.com
local.caller.com
local.centraloregon.pamplinmedia.com
local.charlevoix.petoskeynews.com
local.cheyenneminuteman.com
local.chillicothegazette.com
local.chronicle-express.com
local.clarionledger.com
local.clevelandcountyherald.com
local.coppercountrynews.com
local.coshoctontribune.com
local.crookstontimes.com
local.dailyinterlake.com
local.doncasterfreepress.co.uk
local.doverpost.com
local.elpasoinc.com
local.eveningsun.com
local.exmouthherald.co.uk
local.falmouthoutlook.com
local.fayobserver.com
local.flatheadnewsgroup.com
local.fwbusinessweekly.com
local.gainsboroughstandard.co.uk
local.gaylord.petoskeynews.com
local.gazette.com
local.geneseorepublic.com
local.goupstate.com
local.greatfallstribune.com
local.greenvilleonline.com
local.guampdn.com
local.harboroughmail.co.uk
local.huntspost.co.uk
local.inverurieherald.co.uk
local.jamestownsun.com
local.jdnews.com
local.kelownadailycourier.ca
local.kitchenerpost.ca
local.lakepowellchronicle.com
local.ldnews.com
local.leamingtoncourier.co.uk
local.marionstar.com
local.mitchellrepublic.com
local.morpethherald.co.uk
local.newjerseyhills.com
local.news-banner.com
local.newsleader.com
local.newspressnow.com
local.ocala.com
local.portclintonnewsherald.com
local.register-pajaronian.com
local.rgj.com
local.rivertowns.net
local.rochellenews-leader.com
local.scsun-news.com
local.siskiyoudaily.com
local.skegnessstandard.co.uk
local.southwesternontario.ca
local.steamboattoday.com
local.sudburymercury.co.uk
local.summitdaily.com
local.superiortelegram.com
local.swcbulletin.com
local.tcpalm.com
local.telegram.com
local.the-review.com
local.theameryfreepress.com
local.theledger.com
local.thenewsenterprise.com
local.therolladailynews.com
local.thesuburbanite.com
local.tyronetimes.co.uk
local.vcstar.com
local.wabashplaindealer.com
local.wdtimes.com
local.windsorstar.com
local.worthingherald.co.uk
local.yorkregion.com
localads.reflejos.com
northyork.toronto.com
richmondhill.yorkregion.com
shopping.dnronline.com
shopping.progress-index.com
southcoastdirectory.wickedlocal.com
waynesvilledaily.wanderful.ownlocal.com
wingham.southwesternontario.ca

Other certificates including the domain name clevelandcountyherald.com

(limited to 100 certificates)
arkansashomesteader.com
kalamazooshopping.mlive.com
local.crestonnews.com
eastern-courier.origami.neighbourly.co.nz
clevelandcountyherald.com
conroe.communityimpact.com
local.southwesternontario.ca
clevelandcountyherald.com
local.dglobe.com
western-leader.origami.neighbourly.co.nz
local.clintonnc.com
clevelandcountyherald.com
clevelandcountyherald.com
local.delrionewsherald.com
www.clevelandcountyherald.com
local.kent-life.co.uk
local.clevelandcountyherald.com
local.bemidjipioneer.com
clevelandcountyarkansas.com
www.clevelandcountyherald.com
clevelandcountyarkansas.com
clevelandcountyherald.com
local.theshaunavonstandard.com
local.uintacountyherald.com
arkansashomesteader.com
www.clevelandcountyherald.com
admin.adforge.com
muskegonshopping.mlive.com
local.suffolkfreepress.co.uk
fk.local.kentonline.co.uk
shopping.cleveland.com
clevelandcountyherald.com
clevelandcountyherald.com
arkansashomesteader.com
searkads.com
eastyorkbeach.toronto.com
clevelandcountyarkansas.com
local.devonlife.co.uk
clevelandcountyarkansas.com
clevelandcountyherald.com
clevelandcountyherald.com
arkansashomesteader.com
searkads.com
clevelandcountyherald.com
local.hertsad.co.uk
local.pratttribune.com
clevelandcountyarkansas.com
mylocal.jacksonville.com
arkansashomesteader.com
local.sentinelsource.com
clevelandcountyherald.com
arkansashomesteader.com
clevelandcountyherald.com
clevelandcountyarkansas.com
clevelandcountyherald.com
clevelandcountyherald.com
clevelandcountyherald.com
clevelandcountyherald.com
shopping.cleveland.com
local.eastlondonadvertiser.co.uk
barrie.simcoe.com
st.local.kentonline.co.uk
local.eastlondonadvertiser.co.uk
clevelandcountyherald.com
st.local.kentonline.co.uk
arkansashomesteader.com
www.clevelandcountyherald.com
eastyorkbeach.toronto.com
arkansashomesteader.com
local.yakimaherald.com
western-leader.origami.neighbourly.co.nz
clevelandcountyherald.com
clevelandcountyarkansas.com
www.clevelandcountyherald.com

Certificate

The complete raw certificate details for local.clevelandcountyherald.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbUqlwdNWt54xh+JDQxy
2EqCaraSZ3hbawjS+JiYA+G0aH9LWC5R0UKtdEOfXAXb6H80oDDL+3YvCIrRIhkQ
fgllbywqv9awVonFiihrvZUOuDjCk9WWuc+jEArozeRqtnTxURwqoQuGDgoGt4/L
Mf3zjvNx9kTvIqshWbJFoHSCmyC+gkUXLa/41VCU8IZye423pW4/St4J5Ihrxat3
Tm/QCOS8Tx7pyr9mTqmvFFq0/ERs3LUwzLXE6SOzOnPb9VlYd3bG3j5Ky+abFvGG
YHHiV5KbbcUTocou724/GP4xQtwUlUpuATWpmdwd0Ezc143T6UAOKGlvZQ5xWtld
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410776334013849118491824737685714829199881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 20:46:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 20:46:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.clevelandcountyherald.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24453329323638779675358544658487091865252049237511098534878515136033582447195903795002509981676275431714202527267242429837729525115081605341404823889403663519324179059227694253456487158758241039765822398226733709605529525128352596500746350664060429962777656404101844659919624703323696342253425198257975606673368700521598721912669790720597396070182604967513178780341952579439100868788784725771271636984643720822724810830487962019551221059506969501232842542837659281057989634576349261360773187612228690008755172760961762438409588352193078502274974146750891536889434527719131047715186027197009657834260313383819825208589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d67b82d40dafc462ca570813f8f69ba8040b3b42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2640 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brock.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burlington.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fk.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravenhurst.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'km.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leader.local.heraldsun.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adirondackexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.azcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bannergraphic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baxterbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bromleytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brookingsregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buckscountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bucyrustelegraphforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buxtonadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonianrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.centraloregon.pamplinmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.charlevoix.petoskeynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cheyenneminuteman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chillicothegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chronicle-express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clarionledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clevelandcountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coppercountrynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coshoctontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crookstontimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyinterlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.doncasterfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.doverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elpasoinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eveningsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.falmouthoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fayobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.flatheadnewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fwbusinessweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gainsboroughstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gaylord.petoskeynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.geneseorepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.goupstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greatfallstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greenvilleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guampdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.harboroughmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntspost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inverurieherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jdnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kelownadailycourier.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kitchenerpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lakepowellchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ldnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leamingtoncourier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.marionstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.morpethherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newjerseyhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-banner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newsleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newspressnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ocala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portclintonnewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.register-pajaronian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rgj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rivertowns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rochellenews-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.scsun-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.siskiyoudaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.skegnessstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.steamboattoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sudburymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.summitdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.swcbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tcpalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.telegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theameryfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thenewsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.therolladailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesuburbanite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tyronetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vcstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wabashplaindealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wdtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windsorstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.worthingherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localads.reflejos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.dnronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.progress-index.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcoastdirectory.wickedlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waynesvilledaily.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingham.southwesternontario.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016709e4098e00000403004830460221008358c8e0bf7b261768c23c6781712bc600c071e63941bd5b1634f2cc9f6238f7022100cc82a5a7d77b990abe8668a283de0131d9a2d6b01665faf1c3b03dd6678dc180007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016709e409fe0000040300473045022037ca626841cd9f46340a6a303300ac0eea17a3b599067a25388194c7126ecd270221008c1bb0fc3e6abe6db1d107f6e3ecf9930d15bf7db7f675b8b46bad2295964efc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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