flyertown.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:06:d8:52:83:dd:36:22:0f:08:0d:4b:62:84:10:b3:00 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flyertown.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:06:d8:52:83:dd:36:22:0f:08:0d:4b:62:84:10:b3:00
Serial Number (int): 298436734367364123894192837367309064516352
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:e2:0c:ab:3e:42:35:68:0c:21:2c:c5:ba:b7:50:6e:14:2f:93:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:23:47:8f:47:56:d2:4d:4a:a3:2f:96:d3:44:bc:06:9f:16:01:7a
Fingerprint (sha256): 46:48:6f:46:94:69:82:c2:99:3e:d3:ee:60:c0:b1:d6:1f:5e:1a:56:20:a9:a2:22:63:2b:7b:8d:b9:26:75:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flyertown.ca

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flyertown.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

circulars.wkrn.com
circulars.wnyt.com
circulars.wpta21.com
circulars.wtkr.com
circulars.wtvr.com
circulars.wycoreport.com
circulars.yourdailyjournal.com
digitalmagazine.harryrosen.com
dswflyer.townshoes.ca
e-flyer.thebargainshop.com
flipp.bashas.com
flipp.myfoodcity.com
flipp.timesuniononline.com
flyer.breauxmart.com
flyer.fiestamart.com
flyer.lococos.ca
flyer.totalpet.ca
flyer.windsorplywood.com
flyers.100milefreepress.net
flyers.abbynews.com
flyers.accesswinnipeg.com
flyers.albernivalleynews.com
flyers.aldergrovestar.com
flyers.arrowlakesnews.com
flyers.ash-cache-journal.com
flyers.betrgrocery.com
flyers.boundarycreektimes.com
flyers.brantbasics.com
flyers.brianssupermarket.com
flyers.bulkbarn.ca
flyers.burnabynewsleader.com
flyers.bvbasics.com
flyers.caledoniacourier.com
flyers.canex.ca
flyers.carterssupermarket.com
flyers.castlegarnews.com
flyers.chilliwacktimes.com
flyers.clearwatertimes.com
flyers.cloverdalereporter.com
flyers.clubentrepot.ca
flyers.coastmountainnews.com
flyers.comoxvalleyrecord.com
flyers.connorsbasics.com
flyers.coopconnection.ca
flyers.cowichannewsleader.com
flyers.crestonvalleyadvance.ca
flyers.daiglesmarket.com
flyers.dailybulletin.ca
flyers.dailytownsman.com
flyers.dealathons.com
flyers.dierbergs.com
flyers.eaglevalleynews.com
flyers.econofoods.com
flyers.ecscoffee.com
flyers.grandforksgazette.ca
flyers.greaudfinefoods.com
flyers.harvestsupermarket.com
flyers.hopestandard.com
flyers.houston-today.com
flyers.hubbensmarket.com
flyers.hudsonsbayhome.com
flyers.interior-news.com
flyers.invermerevalleyecho.com
flyers.janisessupermarket.com
flyers.johnsgrocerystore.com
flyers.justdeals.com
flyers.jysk.ca
flyers.kelownacapnews.com
flyers.keremeosreview.com
flyers.kootenayadvertiser.com
flyers.ladysmithchronicle.com
flyers.lakecountrycalendar.com
flyers.lakecowichangazette.com
flyers.langleytimes.com
flyers.ldnews.net
flyers.lintermarcheinternational.ca
flyers.lowerys.com
flyers.lowesfoods.com
flyers.manleys.com
flyers.mapleridgenews.com
flyers.mathernes.com
flyers.megacoop.com
flyers.missesgrocery.com
flyers.missioncityrecord.com
flyers.monarchbasics.com
flyers.nofrillssupermarkets.com
flyertown.ca

Other certificates including the domain name flyertown.ca

(limited to 100 certificates)
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
feeds.flyertown.ca
flyertown.ca
api.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
editorials.circularhub.com
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
api.flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca

Certificate

The complete raw certificate details for flyertown.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUaxERx3ucf/Oy46ETzi
1psaEtn1PRmUS1ZO4SwUlHlPxXMjX2rcuYGC++P66XEWJu/gi4gS2hcMz3VFfpwy
i2eOHB4dugnkPnRrDMfK79Rifnsfn5vkxcdScN6qAOSvU0x+JzWqjBoQNXBZWCrv
pI5563XyFIvX/FGqn30l235YT+6A2OZyXVov2nCAtXieUSRXsTPr5BXygiLgxrGQ
6I5GIkWajpEx6GMn/Tzur286egGRlTGENp+oeVpxL2x4609v+At1u+Zqn66zDMvZ
b+bw7aacjkV0LcwOteA4lrGrRJxDsvX6RihDO+BmCSLt1+IplS6fvKiJeDDTRc2M
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298436734367364123894192837367309064516352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 21:43:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 21:43:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flyertown.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21369132899658482473981985808677816867344008844711891327563026620440277301066928893289014571490395186320836148137010116337703132342179769619153008025004114974745618525396326377357861657536608239347352079106640913964508310639278504235980684342948939916955130995121202463473324716163550977744680565840460209181104503724771399906422600154457289225659749321042819225944674795014832680556968332176149721637818762300541113383100013917172820864362488097967870048081949892474373768815343720967279467121933083355354502426088467629340857493820681619484370912356323954306051563640304665294248846330909076394194151958913804504191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2e20cab3e4235680c212cc5bab7506e142f9336
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wkrn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wnyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wpta21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wtkr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wtvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.wycoreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.yourdailyjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmagazine.harryrosen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dswflyer.townshoes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-flyer.thebargainshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipp.bashas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipp.myfoodcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipp.timesuniononline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.breauxmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.fiestamart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.lococos.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.totalpet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.windsorplywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.100milefreepress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.abbynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.accesswinnipeg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.albernivalleynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.aldergrovestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.arrowlakesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.ash-cache-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.betrgrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.boundarycreektimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.brantbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.brianssupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.bulkbarn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.burnabynewsleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.bvbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.caledoniacourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.canex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.carterssupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.castlegarnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.chilliwacktimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.clearwatertimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.cloverdalereporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.clubentrepot.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.coastmountainnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.comoxvalleyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.connorsbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.coopconnection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.cowichannewsleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.crestonvalleyadvance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.daiglesmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.dailybulletin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.dailytownsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.dealathons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.dierbergs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.eaglevalleynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.econofoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.ecscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.grandforksgazette.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.greaudfinefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.harvestsupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.hopestandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.houston-today.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.hubbensmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.hudsonsbayhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.interior-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.invermerevalleyecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.janisessupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.johnsgrocerystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.justdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.jysk.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.kelownacapnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.keremeosreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.kootenayadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.ladysmithchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lakecountrycalendar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lakecowichangazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.langleytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.ldnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lintermarcheinternational.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lowerys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.lowesfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.manleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.mapleridgenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.mathernes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.megacoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.missesgrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.missioncityrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.monarchbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyers.nofrillssupermarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyertown.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a291656c000004030047304502205ee11a340dbeac6c0e100fc33eb358a842e68cf6146ef06834a63d4b094949340221009b1b1ec90c260a904c1fc069132f81ebe523f1ad84a9a0a1162119f3c38b4ce500750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a29165b90000040300463044022076f613476fef9792cfed0db4717efcb16337f5bfe4288ea38d55f8cd2883cef3022063c10d09f62943dc8c76b15689bf3a1bb1c117d4856120db7e2279f97ffa291b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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