local.gettysburgtimes.com

Issued by R3

About this certificate

This digital certificate with serial number 04:26:4d:89:bd:f7:92:35:5d:3f:2b:4d:5d:24:24:b3:41:48 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.gettysburgtimes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:4d:89:bd:f7:92:35:5d:3f:2b:4d:5d:24:24:b3:41:48
Serial Number (int): 361482939423371726547739240417239816683848
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:e3:d0:18:73:72:4c:2e:9a:71:2d:4b:83:e9:ee:cd:b4:f7:37:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:8c:91:e3:c1:71:c3:38:22:e6:f1:58:9e:b3:bb:cb:26:00:79:78
Fingerprint (sha256): 64:f4:1e:2f:62:e6:d6:39:86:4f:98:e6:1a:6f:be:6e:64:47:62:eb:a6:fc:44:4b:c8:cc:13:21:dd:e7:c9:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.gettysburgtimes.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.gettysburgtimes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bloorwestyork.toronto.com
bracebridge.muskokaregion.com
eastern-courier.origami.neighbourly.co.nz
etobicoke.toronto.com
gm.local.kentonline.co.uk
handelaars.kw.be
hayward.apg-wi.com
hugo.presspubs.com
innisfil.simcoe.com
kapi-mana-news.origami.neighbourly.co.nz
local.adirondackexpress.com
local.airgunshooting.co.uk
local.angliaafloat.co.uk
local.argusobserver.com
local.bentoncourier.com
local.bridemagazine.co.uk
local.brookingsregister.com
local.buryfreepress.co.uk
local.cambstimes.co.uk
local.cessnockadvertiser.com.au
local.cityweekly.net
local.cotswoldlife.co.uk
local.countrysmallholding.com
local.daily-chronicle.com
local.dailyrecordnews.com
local.dl-online.com
local.echopress.com
local.elystandard.co.uk
local.gcnewsgazette.com
local.gettysburgtimes.com
local.gravesendreporter.co.uk
local.greatyarmouthmercury.co.uk
local.gvnews.com
local.hackneygazette.co.uk
local.hungryhorsenews.com
local.ilfordrecorder.co.uk
local.infortwayne.com
local.inforum.com
local.ipswichstar.co.uk
local.kcchronicle.com
local.kemmerergazette.com
local.localcommunitynews.com
local.lynnnews.co.uk
local.mcintoshdemocrat.com
local.medicinehatnews.com
local.millelacsmessenger.com
local.montevistajournal.com
local.mycaldwellcounty.com
local.news-banner.com
local.northdevongazette.co.uk
local.nwherald.com
local.observer-reporter.com
local.observernewsonline.com
local.okeenerecord.com
local.pawtuckettimes.com
local.prairieadvocate.com
local.rutland-times.co.uk
local.sidmouthherald.co.uk
local.southeastiowaunion.com
local.styleweekly.com
local.sudburymercury.co.uk
local.sunnysouthnews.com
local.taosnews.com
local.theabingtonjournal.com
local.theameryfreepress.com
local.theday.com
local.theeveningleader.com
local.theievoice.com
local.thelocalvoice.net
local.thesunchronicle.com
local.thnews.com
local.times-journal.com
local.unioneagle.com
local.urbanviewsweekly.com
local.vaildaily.com
local.viannews.com
local.wadenapj.com
local.westessexlife.co.uk
local.yourchickens.co.uk
marketplace-wb.tj.news
marlborough-midweek.origami.neighbourly.co.nz
mylocal.latimes.com
mylocal.mcall.com
north-harbour-news.origami.neighbourly.co.nz
northoaks.presspubs.com
orangeville.orangeville.com
ownlocal.neighbourly.co.nz
parrysoundnorth.parrysound.com
perth.insideottawavalley.com
peterborough.mykawartha.com
renfrew.insideottawavalley.com
scarborough.toronto.com
shopbirmingham.al.com
shopping.nola.com
shopping.oregonlive.com
shopping.syracuse.com
smithsfalls.insideottawavalley.com
taupo-times.origami.neighbourly.co.nz
te.local.kentonline.co.uk
thornhill.yorkregion.com

Other certificates including the domain name gettysburgtimes.com

(limited to 100 certificates)
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
local.alexcityoutlook.com
local.wahpetondailynews.com
conroe.communityimpact.com
peterborough.mykawartha.com
local.centraloregon.pamplinmedia.com
flintshopping.mlive.com
local.dglobe.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
km.local.kentonline.co.uk
whangarei-leader.origami.neighbourly.co.nz
statejournal.wanderful.ownlocal.com
parrysoundnorth.parrysound.com
local.thetfordandbrandontimes.co.uk
gettysburgtimes.com
impactousa.wanderful.ownlocal.com
peterborough.mykawartha.com
gettysburgtimes.com
whangarei-leader.origami.neighbourly.co.nz
local.thetfordandbrandontimes.co.uk
local.tahoedailytribune.com
gettysburgtimes.com
local.gettysburgtimes.com
muskegonshopping.mlive.com
gettysburgtimes.com
gettysburgtimes.com
hugo.presspubs.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
local.edp24.co.uk
eastyorkbeach.toronto.com
local.malvern-online.com
gettysburgtimes.com
epaper.gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
hugo.presspubs.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
flintshopping.mlive.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
epaper.gettysburgtimes.com
epaper.gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
epaper.gettysburgtimes.com
alliston.simcoe.com
barrie.simcoe.com
epaper.gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
gettysburgtimes.com
eastyorkbeach.toronto.com
gettysburgtimes.com
local.news-banner.com
parrysoundnorth.parrysound.com
gettysburgtimes.com

Certificate

The complete raw certificate details for local.gettysburgtimes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviIGWoS0yWW8mURsbS7w
/GDSp1wk6DttBIrPCmP5CHXeJjjSvWL0htviZKoegkIFHgaPJQddhMYHfZBYGPp2
TUmqJgXnb3BEpOTdqRuNd2wwmat0ITAQFgNsEFZMQNgfbUOxF1R+6hrk/sr4WDzb
+MlHT+fgH7HjH9G8n/gIUizpp0u4aXMgzwdb01JADraSJHZTrxfHY9PL53rlG9lO
5AI+GFOuIxrq3b8kJwNlYZO4LVkQpwihfSAUrI/+FH0ZJQDEVvPNCxsI8gXZyB7P
8F63CtzMKVSjvUmJg40wwUoEtjVkfIOG3p82Ya+mk/di51kT7BDUWbieTXpgdyB5
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361482939423371726547739240417239816683848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-24 11:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-24 11:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.gettysburgtimes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24002056206987004531437905314783103672455124521985462378485659862351586215687131291717701541169378566168131403259272516746725573818409093936749420363391077210070905405195989973824931402053973119277382556919080456595109630772952448222975512105915712662279299741102535394231948390011115090377645084998841334447236895866565963408542001384087814288590900152197317620186806651345824309210660749965903888435085094442345235725155960688403735666738145532914816101203172956095645520002326620916085376642196317033530300392236333185009390534231530263952930207399834468561092174947375119677378440103504948860374867020724446460209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83e3d01873724c2e9a712d4b83e9eecdb4f7374d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2661 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloorwestyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastern-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etobicoke.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayward.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugo.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innisfil.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapi-mana-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adirondackexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.airgunshooting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.angliaafloat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.argusobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bentoncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bridemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brookingsregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buryfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cambstimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cessnockadvertiser.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cityweekly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cotswoldlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrysmallholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.daily-chronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyrecordnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elystandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gcnewsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gettysburgtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gravesendreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greatyarmouthmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hungryhorsenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ilfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.infortwayne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ipswichstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kcchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kemmerergazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.localcommunitynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lynnnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mcintoshdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.medicinehatnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.millelacsmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montevistajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mycaldwellcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-banner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observer-reporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observernewsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.okeenerecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pawtuckettimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.prairieadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rutland-times.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sidmouthherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southeastiowaunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.styleweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sudburymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunnysouthnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.taosnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theabingtonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theameryfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeveningleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theievoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thelocalvoice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesunchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.unioneagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.urbanviewsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vaildaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.viannews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourchickens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-wb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.latimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-harbour-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northoaks.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangeville.orangeville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownlocal.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundnorth.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perth.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterborough.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renfrew.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarborough.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbirmingham.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.syracuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithsfalls.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupo-times.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thornhill.yorkregion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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