local.bemidjipioneer.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c7:36:1b:8d:97:a6:61:ad:9c:1a:6a:69:b4:cd:43:5b:41 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.bemidjipioneer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c7:36:1b:8d:97:a6:61:ad:9c:1a:6a:69:b4:cd:43:5b:41
Serial Number (int): 416237256119930005965013208509299466394433
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5f:e3:67:82:77:17:be:67:c7:e8:3f:39:d5:b5:df:cd:1f:6b:ca:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3c:dc:b9:e0:72:b2:09:99:cf:63:f7:f4:73:67:b4:a6:a2:ce:fb:19
Fingerprint (sha256): 3f:da:31:e4:a2:0a:66:0d:f8:50:bc:f3:cf:72:ec:5f:d1:ad:c9:2c:93:e4:26:00:c9:2c:f8:a6:ce:d9:8c:1c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.bemidjipioneer.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.bemidjipioneer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annarborshopping.mlive.com
aurora.yorkregion.com
central-leader.origami.neighbourly.co.nz
citycentreparkdale.toronto.com
eastgwillimbury.yorkregion.com
forestlake.presspubs.com
handelaars.kw.be
kapi-mana-news.origami.neighbourly.co.nz
kawarthalakes.mykawartha.com
km.local.kentonline.co.uk
local.abingtonnews.org
local.alamosanews.com
local.aldianews.com
local.aspentimes.com
local.baldwin-bulletin.com
local.becclesandbungayjournal.co.uk
local.bemidjipioneer.com
local.bladenjournal.com
local.cheshirelife.co.uk
local.clevelandcountyherald.com
local.countrymessenger.com
local.crowrivermedia.com
local.dglobe.com
local.dominionpost.com
local.duluthnewstribune.com
local.dunmowbroadcast.co.uk
local.edp24.co.uk
local.elkintribune.com
local.etownpa.com
local.eufaulaindianjournal.com
local.exmouthjournal.co.uk
local.fakenhamtimes.co.uk
local.francepropertyshop.com
local.guernseygazette.com
local.hackneygazette.co.uk
local.haverhillecho.co.uk
local.hertfordshirelife.co.uk
local.huntervalleynews.net.au
local.index.vernonpublishing.com
local.infortwayne.com
local.insidebiz.com
local.inyoregister.com
local.jcsentinel.com
local.lebanondemocrat.com
local.lowestoftjournal.co.uk
local.madisoncourier.com
local.maitlandmercury.com.au
local.mendotareporter.com
local.midiario.com
local.mydallaspost.com
local.myrecordjournal.com
local.norfolkdailynews.com
local.norwichextra.com
local.nwherald.com
local.observer-reporter.com
local.perutribune.com
local.pilotonline.com
local.pinejournal.com
local.plainsman.com
local.robesonian.com
local.rutland-times.co.uk
local.southeastiowaunion.com
local.spaldingtoday.co.uk
local.staradvertiser.com
local.tabertimes.com
local.theforecaster.net
local.times.vernonpublishing.com
local.uniondailytimes.com
local.urbanviewsweekly.com
local.vanguardia.com.mx
local.viannews.com
local.wadenapj.com
local.wattonandswaffhamtimes.co.uk
local.whatsuppub.com
local.willistonherald.com
local.windomnews.com
localbiz.mysa.com
marketplace-tb.tj.news
marketplace-wb.tj.news
marlborough-midweek.origami.neighbourly.co.nz
midland.simcoe.com
mm.local.kentonline.co.uk
mylocal.capitalgazette.com
mylocal.carrollcountytimes.com
mylocal.courant.com
mylocal.myplainview.com
newmarket.yorkregion.com
north-taranaki-midweek.origami.neighbourly.co.nz
oakville.insidehalton.com
orangeville.orangeville.com
price.apg-wi.com
ricelake.apg-wi.com
shopping.masslive.com
shopping.westsidenewsny.com
south-taranaki-star.origami.neighbourly.co.nz
stcroixvalley.presspubs.com
taupo-times.origami.neighbourly.co.nz
the-nelson-leader.origami.neighbourly.co.nz
upper-hutt-leader.origami.neighbourly.co.nz
vaughan.yorkregion.com

Other certificates including the domain name bemidjipioneer.com

(limited to 100 certificates)
link.bemidjipioneer.com
link.bemidjipioneer.com
subscriber.agweek.com
local.pilotweb.aero
www.forumcomm.com
the-nelson-leader.origami.neighbourly.co.nz
url8498.bemidjipioneer.com
epaper.agweek.com
*.forum.cue.cloud
flintshopping.mlive.com
local.newportnewstimes.com
dealers.aws.wehaa.net
local.lutontoday.co.uk
origin.web.production.forum-communications.brightspot.cloud
*.forum.cue.cloud
link.bemidjipioneer.com
dealers.aws.wehaa.net
sli.bemidjipioneer.com
www.forumcomm.com
local.bemidjipioneer.com
local.militarynews.com
local.thetfordandbrandontimes.co.uk
citycentreparkdale.toronto.com
local.guymondailyherald.com
local.dglobe.com
web.production.forum-communications.brightspot.cloud
local.thetfordandbrandontimes.co.uk
web.production.forum-communications.brightspot.cloud
origin.web.production.forum-communications.brightspot.cloud
local.fdlreporter.com
muskegonshopping.mlive.com
local.mysuburbanlife.com
origin.web.production.forum-communications.brightspot.cloud
link.bemidjipioneer.com
eastern-courier.origami.neighbourly.co.nz
*.forum.cue.cloud
www.forumcomm.com
web.production.forum-communications.brightspot.cloud
local.yourokmulgee.com
austinmetro.communityimpact.com
local.toronto.cjnews.com
www.forumcomm.com
www.forumcomm.com
web.production.forum-communications.brightspot.cloud
the-nelson-leader.origami.neighbourly.co.nz
cms.forumcomm.com
kg.local.kentonline.co.uk
local.insidebiz.com
*.forum.cue.cloud
fk.local.kentonline.co.uk
*.forum.cue.cloud
admin.adforge.com
local.durhamtimes.co.uk
subscriber.bemidjipioneer.com
*.forum.cue.cloud
www.forumcomm.com
local.newtondailynews.com
flintshopping.mlive.com
www.forumcomm.com
www.forumcomm.com
*.forum.cue.cloud
local.spokane.exchange
link.bemidjipioneer.com
web.production.forum-communications.brightspot.cloud
local.newsdemocratleader.com
subscriber.agweek.com
*.forum.cue.cloud
mylocal.carrollcountytimes.com
dealers.aws.wehaa.net
link.bemidjipioneer.com
cms.forumcomm.com
www.forumcomm.com
local.kent-life.co.uk
local.saukvalley.com
web.production.forum-communications.brightspot.cloud
local.mywebtimes.com
www.forumcomm.com
web.production.forum-communications.brightspot.cloud
local.wellsvilledaily.com
dealers.aws.wehaa.net
local.pentictonherald.ca

Certificate

The complete raw certificate details for local.bemidjipioneer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HbKcP2kfetHAvzUX4sa
R1fWcpcChM3qQrTWfWzBHdiXFSP4ABdPpdIRRCYPKHitDyAuRxFA/wqaFKMNp5zA
F9QeHY1sBKEKTJdbK/KOLtrIruPLelY5WYwdZq3bzManUch678wHLWFpruZSSkp4
HN32htLm0muXreDhxjJyVLjYGyfHCsjnmkC7xhHtjaziaBW7M5Cf8eB5SeVihJj3
5WyxrOBEJ9p3F2WtulZNATJ1K3k9bKit3vu02C9K18WnS6irK3FeF091Hrwlxfef
pR0Quu13zizHoyE3TxSicIWTj3nS8kBRK70b8fpZraQ7I2RKiQWpIxHDf7tFr5BQ
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416237256119930005965013208509299466394433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-25 10:46:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-25 10:46:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.bemidjipioneer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30355771111956816140175394637365837305718808897920189944790606499105951852762321731916911089154932686344706103740621143229655121473167124631178905797709291798311863555579992760992209265221308910608256544414269743422570621439081688566659351305059975952755083177789336348404676419928794529470196491429014372630525155695247898082032451760436594926570818011949210977775270319718285185987793562138087802546802743448195109532766988067654429314834911495373852385424513416396690278552454196394879861314317773959213257695881658228869906125409287302043815727385545931526778319755945841575667075871942245072184799400857722441883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fe367827717be67c7e83f39d5b5dfcd1f6bca44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2731 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annarborshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycentreparkdale.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastgwillimbury.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestlake.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapi-mana-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawarthalakes.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'km.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.abingtonnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.alamosanews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.aldianews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.aspentimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baldwin-bulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.becclesandbungayjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bladenjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clevelandcountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrymessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crowrivermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dominionpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dunmowbroadcast.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edp24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elkintribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.etownpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eufaulaindianjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fakenhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.francepropertyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guernseygazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.haverhillecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.index.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.infortwayne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inyoregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jcsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lebanondemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lowestoftjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.madisoncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maitlandmercury.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mendotareporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midiario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mydallaspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myrecordjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norfolkdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norwichextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observer-reporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.perutribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.plainsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.robesonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rutland-times.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southeastiowaunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.spaldingtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.staradvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tabertimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theforecaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uniondailytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.urbanviewsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vanguardia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.viannews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wattonandswaffhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whatsuppub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willistonherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windomnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localbiz.mysa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-tb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-wb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midland.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.carrollcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.myplainview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmarket.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-taranaki-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakville.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangeville.orangeville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'price.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricelake.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.masslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.westsidenewsny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south-taranaki-star.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixvalley.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupo-times.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-nelson-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upper-hutt-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaughan.yorkregion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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