local.theshaunavonstandard.com

Issued by R3

About this certificate

This digital certificate with serial number 03:97:10:16:61:f8:3c:a0:b4:96:0c:f1:4b:ac:7d:16:6f:2b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.theshaunavonstandard.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:10:16:61:f8:3c:a0:b4:96:0c:f1:4b:ac:7d:16:6f:2b
Serial Number (int): 312740879065866973582279469841947047653163
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:51:3b:11:7c:e6:a7:ee:50:75:99:79:e6:8d:a4:53:61:c4:4b:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:bc:ff:fb:f2:8b:f9:1a:d7:de:18:1a:ad:cd:6f:36:26:35:93:e6
Fingerprint (sha256): 49:e5:57:a5:2b:f2:6e:25:d1:3c:0f:f1:b9:43:9b:74:be:c9:2f:e5:35:ea:b9:75:bf:e9:f0:e4:c7:d1:98:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.theshaunavonstandard.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.theshaunavonstandard.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

austin.ownlocal.com
barrie.simcoe.com
baycityshopping.mlive.com
bloorwestyork.toronto.com
brighton.northumberlandnews.com
brock.mykawartha.com
citycentreparkdale.toronto.com
etobicoke.toronto.com
forestlake.presspubs.com
hauraki-herald.origami.neighbourly.co.nz
huntsville.muskokaregion.com
kalamazooshopping.mlive.com
kapiti-observer.origami.neighbourly.co.nz
local.101highlandlakes.com
local.abingtonnews.org
local.airgunshooting.co.uk
local.altustimes.com
local.appeal-democrat.com
local.bcrnews.com
local.brainerddispatch.com
local.brookingsregister.com
local.carrollspaper.com
local.cgsentinel.com
local.citizensvoice.com
local.clevelandcountyherald.com
local.coppercountrynews.com
local.countystar.com
local.douglasdispatch.com
local.dunmowbroadcast.co.uk
local.eastbayri.com
local.exmouthjournal.co.uk
local.falmouthoutlook.com
local.fauquier.com
local.francepropertyshop.com
local.hennesseyclipper.com
local.huntervalleynews.net.au
local.idahostatejournal.com
local.ilfordrecorder.co.uk
local.insidebiz.com
local.jcsentinel.com
local.kcchronicle.com
local.kelownadailycourier.ca
local.lakecountysuburbanlife.com
local.leaderadvertiser.com
local.lethbridgeherald.com
local.loganbanner.com
local.mcintoshdemocrat.com
local.midweekherald.co.uk
local.montevistajournal.com
local.monvalleyindependent.com
local.news-banner.com
local.northnorfolknews24.co.uk
local.perhamfocus.com
local.pilotweb.aero
local.pineandlakes.com
local.pinedaleroundup.com
local.plainsman.com
local.republicanherald.com
local.rifleshootermagazine.co.uk
local.rutland-times.co.uk
local.sandmountainreporter.com
local.sierrasun.com
local.spaldingtoday.co.uk
local.staradvertiser.com
local.styleweekly.com
local.sunnysidesun.com
local.tehachapinews.com
local.the-messenger.com
local.thecarrollnews.com
local.theeveningleader.com
local.thefirsthundredmiles.com
local.theherald-news.com
local.theievoice.com
local.thelocalvoice.net
local.thepilotnews.com
local.thepostandmail.com
local.therecorddelta.com
local.theshaunavonstandard.com
local.thetimes-tribune.com
local.uintacountyherald.com
local.unioneagle.com
local.westhawaiitoday.com
local.willistonherald.com
local.winterhavensun.com
local.yadkinripple.com
local.yakimaherald.com
marketplace-sj.tj.news
marlborough-midweek.origami.neighbourly.co.nz
midland.simcoe.com
mylocal.chicagotribune.com
mylocal.mcall.com
mylocal.myplainview.com
newmarket.yorkregion.com
nor-west-news.origami.neighbourly.co.nz
northoaks.presspubs.com
perth.insideottawavalley.com
peterborough.mykawartha.com
shopping.cleveland.com
shoreview.presspubs.com
spooner.apg-wi.com

Other certificates including the domain name theshaunavonstandard.com

(limited to 100 certificates)
kalamazooshopping.mlive.com
local.bensonnews-sun.com
local.wahpetondailynews.com
local.ftimes.com
western-leader.origami.neighbourly.co.nz
local.cambstimes.co.uk
local.eastlondonadvertiser.co.uk
local.theshaunavonstandard.com
local.thetfordandbrandontimes.co.uk
local.thetfordandbrandontimes.co.uk
local.theledger.com
local.mysuburbanlife.com
local.guernseygazette.com
local.newtondailynews.com
local.cambstimes.co.uk
bloorwestyork.toronto.com
matamata-chronicle.origami.neighbourly.co.nz
shopping.cleveland.com
manukau-courier.origami.neighbourly.co.nz
local.wnypapers.com
local.saukvalley.com
local.duluthbudgeteer.com
local.douglasdispatch.com
local.wahpetondailynews.com
western-leader.origami.neighbourly.co.nz

Certificate

The complete raw certificate details for local.theshaunavonstandard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx20N86XbDQp8c3XIkB5
22avAkxbl1NpQvhH5/4ho9Vw+tz2g0cf3B6O6ZB8Q7u+e9Qbbju0jazgTJYgQ32w
aCgzA1RF3pdX4uejcL7dxnvcXwaPAQM/s5R1oJJXZxvFBHy9A53BXsL7KcVz75wo
pp7J5iGM8B/2b8MFlJSj+yqONFhgaSDGgOVQDTu+FsdprhqzZRz5vgufA6DZTvx8
PbdUlcHcv5OO9vjX9nkkf9MDC+v15oErjMTTircaCSuvEzv9fe3VtREPzWrhvBmW
l3q9/IPGablZxAfzPQU9DFzWG9PaqX6LhY3az2Lnlx8Ezv5KnyLnP9dgO5N7eI8F
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312740879065866973582279469841947047653163
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-24 10:25:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-24 10:25:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.theshaunavonstandard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21601397725954116156917722842370207938564731275107985332884809997667551211389456577936193708517800779915733081435338192306387912148053505386378927198366067930491546488886465496205902492498039908498498730132516364079551856845445858725110431499638058391393209510529377996786644008798018689426933805580199294773569342546446801388676976960101423753672406726284059316117722596577702696124200210523540537620910074370974697170985495189958501185940136151462748904973935129597198931876384354565211489972988811722258611129982986679874428435079956255223500216846336853381318941400604835335386301632153327020758321734098059461949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39513b117ce6a7ee50759979e68da45361c44b19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2682 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrie.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baycityshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloorwestyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighton.northumberlandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brock.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycentreparkdale.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etobicoke.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestlake.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hauraki-herald.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsville.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalamazooshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapiti-observer.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.101highlandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.abingtonnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.airgunshooting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.altustimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.appeal-democrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bcrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brookingsregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carrollspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cgsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.citizensvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clevelandcountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coppercountrynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.douglasdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dunmowbroadcast.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastbayri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.falmouthoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fauquier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.francepropertyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hennesseyclipper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.idahostatejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ilfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jcsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kcchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kelownadailycourier.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lakecountysuburbanlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lethbridgeherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.loganbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mcintoshdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midweekherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montevistajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.monvalleyindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-banner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northnorfolknews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotweb.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinedaleroundup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.plainsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.republicanherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rifleshootermagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rutland-times.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sandmountainreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sierrasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.spaldingtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.staradvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.styleweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunnysidesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tehachapinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the-messenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thecarrollnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeveningleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thefirsthundredmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theherald-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theievoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thelocalvoice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thepilotnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thepostandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.therecorddelta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theshaunavonstandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thetimes-tribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uintacountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.unioneagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westhawaiitoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willistonherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.winterhavensun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yadkinripple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yakimaherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-sj.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midland.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.myplainview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmarket.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nor-west-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northoaks.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perth.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterborough.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreview.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spooner.apg-wi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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