minto.southwesternontario.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b2:b4:0d:0f:80:44:c1:c4:80:20:48:e4:c8:c9:8d:03:78 was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=minto.southwesternontario.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b2:b4:0d:0f:80:44:c1:c4:80:20:48:e4:c8:c9:8d:03:78
Serial Number (int): 409258733892467106980757403204218377798520
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:d9:43:7a:2f:a8:4b:cd:55:0b:bf:bc:82:37:ce:24:c3:f5:7c:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:51:fa:7e:e7:66:15:53:ff:f7:54:9f:b9:0c:d5:da:ba:29:ea:f4
Fingerprint (sha256): 54:91:64:a5:a6:20:ca:a3:75:a6:70:cf:64:13:84:36:5b:4b:56:a7:d6:a0:98:b8:f8:a0:05:ec:c8:cc:a1:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate minto.southwesternontario.ca

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for minto.southwesternontario.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajax.durhamregion.com
alliston.simcoe.com
arnprior.insideottawavalley.com
aurora.yorkregion.com
bracebridge.muskokaregion.com
brock.mykawartha.com
citycentreparkdale.toronto.com
collingwood.simcoe.com
dc.qconline.com
eastgwillimbury.yorkregion.com
eastyorkbeach.toronto.com
erin.southwesternontario.ca
gravenhurst.muskokaregion.com
huntsville.muskokaregion.com
kawarthalakes.mykawartha.com
kemptville.insideottawavalley.com
local.adelaidenow.com.au
local.anchoragepress.com
local.azdailysun.com
local.beatricedailysun.com
local.bismarcktribune.com
local.bramptonguardian.com
local.caledonenterprise.com
local.cambridgetimes.ca
local.capjournal.com
local.columbustelegram.com
local.dailyjournalonline.com
local.durhamregion.com
local.eacourier.com
local.elkodaily.com
local.fauquier.com
local.frontiersman.com
local.gazettetimes.com
local.globegazette.com
local.goldcoastbulletin.com.au
local.guelphmercury.com
local.gvnews.com
local.helenair.com
local.herald-review.com
local.heraldsun.com.au
local.hmbreview.com
local.ifallsjournal.com
local.lacrossetribune.com
local.maysville-online.com
local.missoulian.com
local.montreal.cjnews.com
local.muskokaregion.com
local.mykawartha.com
local.niagarathisweek.com
local.northumberlandnews.com
local.orangeville.com
local.parrysound.com
local.poststar.com
local.qctimes.com
local.rapidcityjournal.com
local.ravallirepublic.com
local.santamariatimes.com
local.siouxcityjournal.com
local.thespec.com
local.toronto.cjnews.com
local.toronto.com
local.trib.com
local.tucson.com
local.wcfcourier.com
local.willistonherald.com
local.yorkregion.com
markham.yorkregion.com
milton.insidehalton.com
minto.southwesternontario.ca
mount.southwesternontario.ca
muskokaregion.muskokaregion.com
northyork.toronto.com
origaminewsmonitor.wahpetondailynews.com
parrysoundnorth.parrysound.com
perth.insideottawavalley.com
portperry.durhamregion.com
quest.local.couriermail.com.au
sachemglanbrook.sachem.ca
scarborough.toronto.com
smithsfalls.insideottawavalley.com
thornhill.yorkregion.com

Other certificates including the domain name southwesternontario.ca

(limited to 100 certificates)
eastyorkbeach.toronto.com
local.flamboroughreview.com
*.southwesternontario.ca
local.pilotweb.aero
local.newstribune.info
*.southwesternontario.ca
local.southwesternontario.ca
local.thesouthern.com
local.bridemagazine.co.uk
admin.adforge.com
local.northjersey.com
www.southwesternontario.ca
local.brookingsregister.com
local.kent-life.co.uk
local.clevelandcountyherald.com
local.pontiacdailyleader.com
local.militarynews.com
minto.southwesternontario.ca
local.fraserburghherald.co.uk
www.southwesternontario.ca
local.suffolkfreepress.co.uk
mm.local.kentonline.co.uk
southwesternontario.ca
adsack.wanderful.ownlocal.com
local.cotswoldlife.co.uk
*.southwesternontario.ca
local.news-journal.com
www.southwesternontario.ca
*.southwesternontario.ca
local.lincolncourier.com
local.montenews.com
local.swcbulletin.com
admin.adforge.com
timestranscript.telegraphjournal.com
local.thepeterboroughexaminer.com
local.sentinelsource.com
local.waterloochronicle.ca
local.madisoncourier.com
local.windsorstar.com
*.southwesternontario.ca
admin.adforge.com
local.fauquier.com
local.the-review.com
southwesternontario.ca
local.columbiatribune.com
local.carrickfergustimes.co.uk
*.southwesternontario.ca
southwesternontario.ca

Certificate

The complete raw certificate details for minto.southwesternontario.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+PjslIzsix7yfFY0pNX
bMCbzNVx9mF34T+P+vtObBJZGKj0+455HPQWPQa+mD4Wf+LC/oig00sEqziXgU0x
WYSXDHii/L35vNbTCpS2/FeOafMlEW61bl33TZIFQX2SLDIApnHMFtlFkGQx9qv/
c6vM8DaEtYQf8i6s4AfuIPbWN7InsM82ZMnXQPJNTBCEANgT3UL+uL6TyXFwopty
uAEARVm7StUD5W9QE3QlD2LoJ3AlRseRJS4UZrdNTjzhf837n2BSmbIRPfOtaHVR
seFBNxcD6QLOeYALdRe/9rIctvH1+IeHcuwmigvGrEo7lGHJOyxpPv24D+OTdwui
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409258733892467106980757403204218377798520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-27 12:04:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-25 12:04:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minto.southwesternontario.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20689220180518997036546640107648366678996950577096529261475889766433165128728767398422821390634416002584531720189034661365240069038573640245773628243865165309911955111132556851585985675948560504983271596508559247587813758770425393542809361114493771014709501370146196412028529553556187847084895185246235401051740994908305348898249274980224075006560114065790003874298915574705650891004621825262930223046606425260072633157321956821989965164815927289981572391345031315553271644996696057402619847058529396113442507493556796598380117721737943095369746835805365607947797339655019104971483655712626953613716367606291888841253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8d9437a2fa84bcd550bbfbc8237ce24c3f57ccd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2097 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliston.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnprior.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brock.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycentreparkdale.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collingwood.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.qconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastgwillimbury.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastyorkbeach.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erin.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravenhurst.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsville.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawarthalakes.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemptville.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adelaidenow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.anchoragepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.azdailysun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.beatricedailysun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bismarcktribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bramptonguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cambridgetimes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.capjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.columbustelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyjournalonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eacourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elkodaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fauquier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.frontiersman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gazettetimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.globegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.goldcoastbulletin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guelphmercury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.helenair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.herald-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldsun.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hmbreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ifallsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lacrossetribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maysville-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.missoulian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montreal.cjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.niagarathisweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northumberlandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.orangeville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.poststar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.qctimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rapidcityjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ravallirepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.santamariatimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.siouxcityjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thespec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.toronto.cjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.trib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wcfcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willistonherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markham.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milton.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minto.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mount.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokaregion.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origaminewsmonitor.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundnorth.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perth.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portperry.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quest.local.couriermail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sachemglanbrook.sachem.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarborough.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithsfalls.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thornhill.yorkregion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164415884de0000040300483046022100dfe42d38b36e155c79e5217a2646e3e65cd3ea541c730590d0638bad665aabe1022100bd6b319449192c2ae8ed05dc9794a1d1790a70947ac504f1869a9c9238823003007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164415884cc000004030047304502210082853336aabc2620dc7db8286e30f6c2e5ebf111883e42fa447631b9af3eaca602200d144d03f253d29c0341b353fe114944cd1e0587cdce7b80c07e68f510b5138f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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