mylocal.journal-news.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:0d:c2:e0:ab:8c:da:a0:53:60:4b:91:09:67:cd:30:a7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mylocal.journal-news.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:0d:c2:e0:ab:8c:da:a0:53:60:4b:91:09:67:cd:30:a7
Serial Number (int): 341661788215009336192369487077410259939495
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:fb:da:6c:36:64:a8:f8:42:ea:44:3d:ca:79:95:e0:6c:fa:3f:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6f:ff:66:94:a6:1c:09:64:0e:77:22:f1:0a:45:8c:6d:e7:5a:92:52
Fingerprint (sha256): 6e:ac:56:43:50:72:b8:13:db:32:13:f9:a8:62:24:4b:0d:de:a4:f9:12:b8:e6:d9:2f:c3:f3:24:3c:28:dd:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mylocal.journal-news.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mylocal.journal-news.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajax.durhamregion.com
barrie.simcoe.com
carbondalenews.wanderful.ownlocal.com
citycentreparkdale.toronto.com
echopilot.wanderful.ownlocal.com
ghdevilslake.wanderful.ownlocal.com
ghmineraldaily.wanderful.ownlocal.com
handelaars.kw.be
hugo.presspubs.com
local.advertiser.vernonpublishing.com
local.angliaafloat.co.uk
local.bastropenterprise.com
local.bensonnews-sun.com
local.bentoncourier.com
local.bramptonguardian.com
local.cambstimes.co.uk
local.carlukegazette.co.uk
local.carricktoday.co.uk
local.chorley-guardian.co.uk
local.chroniclejournal.com
local.coppercountrynews.com
local.crestviewbulletin.com
local.daily-jeff.com
local.daventryexpress.co.uk
local.decaturdailydemocrat.com
local.discoverourcoast.com
local.duluthbudgeteer.com
local.duluthnewstribune.com
local.dunmowbroadcast.co.uk
local.eastlothiannews.co.uk
local.ehextra.com
local.francepropertyshop.com
local.gallowaygazette.co.uk
local.gastongazette.com
local.goldcoastbulletin.com.au
local.guymondailyherald.com
local.hamiltonnews.com
local.hennesseyclipper.com
local.heralddemocrat.com
local.idahopress.com
local.idahostatejournal.com
local.inyoregister.com
local.ivpressonline.com
local.jacksonnewspapers.com
local.janesvillemarketplace.com
local.kcchronicle.com
local.kenilworthweeklynews.co.uk
local.kinston.com
local.lcnewschronicle.com
local.leavenworthtimes.com
local.littlehamptongazette.co.uk
local.medicinehatnews.com
local.moorefieldexaminer.com
local.mountainstatesman.com
local.mydallaspost.com
local.mywebtimes.com
local.norfolkdailynews.com
local.northamptonchron.co.uk
local.nowtoronto.com
local.osceolaiowa.com
local.ottawaherald.com
local.peterboroughtoday.co.uk
local.pinkun.com
local.pocklingtonpost.co.uk
local.prairiepost.com
local.punxsutawneyspirit.com
local.registerguard.com
local.ryeandbattleobserver.co.uk
local.sj-r.com
local.stjamesnews.com
local.stowmarketmercury.co.uk
local.sunnysidesun.com
local.taosnews.com
local.thebignickel.com
local.thedickinsonpress.com
local.theeasleyprogress.com
local.theforecaster.net
local.theledger.com
local.therecorddelta.com
local.thesouthernreporter.co.uk
local.thornegazette.co.uk
local.townsvillebulletin.com.au
local.waxahachietx.com
local.westessexlife.co.uk
local.whitbygazette.co.uk
local.windomnews.com
local.winterhavensun.com
local.worksopguardian.co.uk
local.yoursun.com
local.yourvalleyvoice.com
marketplace-nl.tj.news
marketplace-wb.tj.news
mylocal.journal-news.com
mylocal.latimes.com
parrysoundnorth.parrysound.com
perth.insideottawavalley.com
providencejournal.wanderful.ownlocal.com
ricelake.apg-wi.com
shopping.cleveland.com
shopping.dnronline.com

Other certificates including the domain name journal-news.com

(limited to 100 certificates)
*.1033theeagle.com
www.pagesuite.com
hub.coxmediagroup.com
www.pagesuite.com
host.coxohio.com
daytondailynews.com
*.coxmediagroup.com
www.pagesuite.com
wildcard.coxmediagroup.com
jamiedupree.blog.journal-news.com
thingstodo.dayton.com
teamplayer.daytondailynews.com
wildcard.coxmediagroup.com
homes.journal-news.com
membercenter.coxmediagroup.com
coxohio.web.arc-cdn.net
cdn-le5.arkadiumhosted.com
membercenter.coxmediagroup.com
placeanad.daytondailynews.com
hits973.com
www.pagesuite.com
www.pagesuite.com
classifieds.ajc.com
membercenter-qa.coxmediagroup.com
www.pagesuite.com
membercenter.coxmediagroup.com
daytondailynews.com
wildcard.coxmediagroup.com
www.pagesuite.com
app-events.ajc.com
jamiedupree.blog.journal-news.com
www.journal-news.com
wildcard.coxmediagroup.com
subscriber.pagesuite.com
www.pagesuite.com
migration.subscriber.pagesuite.com
hits973.com
subscriber.pagesuite.com
hub.coxmediagroup.com
membercenter.coxmediagroup.com
subscribe.ajc.com
*.coxmediagroup.com
journal-news.com
membercenter-staging.ajc.com
jamiedupree.blog.journal-news.com
hub.coxmediagroup.com
www.pagesuite.com
ohiopolitics.blog.journal-news.com
homes.journal-news.com
jamiedupree.blog.journal-news.com
placeanad.daytondailynews.com
*.journal-news.com
homes.journal-news.com
www.pagesuite.com
myaccount.ajc.com
classifieds.ajc.com
placeanad.daytondailynews.com
membercenter.coxmediagroup.com
membercenter-qa.coxmediagroup.com
journal-news.com
insidetheshoe.com
membercenter-staging-politics.myajc.com
www.pagesuite.com
www.pagesuite.com
512tech.com
hub.coxmediagroup.com
journal-news.com
membercenter.coxmediagroup.com
accessatlanta.com
membercenter.coxmediagroup.com
wildcard.coxmediagroup.com
512tech.com
jamiedupree.blog.journal-news.com
app-events.ajc.com
migration.subscriber.pagesuite.com
homes.journal-news.com
jamiedupree.blog.journal-news.com
jamiedupree.blog.journal-news.com
*.coxmediagroup.com
journal-news.com
homes.ajchomefinder.com
jamiedupree.blog.journal-news.com
wildcard.coxmediagroup.com
dailylawjournal.org
wildcard.coxmediagroup.com
www.pagesuite.com
www.pagesuite.com
membercenter-staging.coxmediagroup.com
*.tampabay.com
myaccount.ajc.com
membercenter-qa.coxmediagroup.com
jamiedupree.blog.journal-news.com
wildcard.coxmediagroup.com
jamiedupree.blog.journal-news.com
homes.journal-news.com
hub.coxmediagroup.com
jotoddphd.me
*.coxmediagroup.com
membercenter-qa.coxmediagroup.com
journal-news.com

Certificate

The complete raw certificate details for mylocal.journal-news.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn40flyNQLq/FA48tmjj
ONDggaT8yH7eZawofJbDDgkxJIhYOE7dFY4TNj61UqnIjecnGETOSCAsKJwJJODJ
klJqtbRgpN+bfF6SuVPo2E6Dt/xCgy1wPaH6oLiNh3d/++SXivaTBbgB9+FFDJMe
ff4hETChYHsQzZgjFusu7Gipfmw5EhmKmSPsos+M6kdKrbQYUpGwtsSKFXyx7veV
9OaRQ/c0fvIQ7QW7sWd4TktjO2O3ihqD4HygVVSd8G5wjtRqecyS7YYFwbcJ6q+Q
Rbb1WwbrUnBrLB0KuPPdh9KuUWlviHgGPqfQeSxpGFYgVoxq20s8kegwcoa9culr
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341661788215009336192369487077410259939495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 09:23:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 09:23:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mylocal.journal-news.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25562371634333362057336429700448567757267789261419519046987320272195161454335314937129717560080894372710403624583911870511114393694120949387673529941625882839867860210454810363311917246269083318436155904106880970573085571277413935474319699952758765665945360995919483372902931838791478348150307976401353823316245698286898483998481049207441165131528253522414604732100186756083099672164776110261032757478730714987679467759506171765632645223157687241385192705131713474359508256500360386781067414561185552601880269244146623724732463968988216045796376389241592085189825015799026210978650408350145820739306360706141518392249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edfbda6c3664a8f842ea443dca7995e06cfa3fdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2705 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrie.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbondalenews.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycentreparkdale.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echopilot.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghdevilslake.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghmineraldaily.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugo.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.advertiser.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.angliaafloat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bastropenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bensonnews-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bentoncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bramptonguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cambstimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carlukegazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carricktoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chorley-guardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chroniclejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coppercountrynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crestviewbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.daily-jeff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.daventryexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.decaturdailydemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.discoverourcoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluthbudgeteer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dunmowbroadcast.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastlothiannews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ehextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.francepropertyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gallowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gastongazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.goldcoastbulletin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guymondailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hamiltonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hennesseyclipper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heralddemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.idahopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.idahostatejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inyoregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ivpressonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jacksonnewspapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.janesvillemarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kcchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kenilworthweeklynews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kinston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lcnewschronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leavenworthtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.littlehamptongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.medicinehatnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moorefieldexaminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mountainstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mydallaspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mywebtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norfolkdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northamptonchron.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nowtoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolaiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ottawaherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.peterboroughtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinkun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pocklingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.prairiepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.punxsutawneyspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.registerguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ryeandbattleobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sj-r.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stjamesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stowmarketmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunnysidesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.taosnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thebignickel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeasleyprogress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theforecaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.therecorddelta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesouthernreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thornegazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.townsvillebulletin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.waxahachietx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whitbygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windomnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.winterhavensun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.worksopguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yoursun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourvalleyvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-nl.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-wb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.journal-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.latimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundnorth.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perth.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providencejournal.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricelake.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.dnronline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017014e025d00000040300463044022035f531e65757a98798dfcd7087f3e83278ba1e14c1f68ce78f0d3596950426e102204934888c152f09b85c589bd37ddb010406b332254ddfb30b5adf053d5c3982ae007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017014e025f40000040300473045022100a617d53f877d305418068a781db99f73005324c4e2d598c62435fa525c06de0b022026578e4a8e3881ccca6f2f4beeeef581bcfbe7b27c47c326cbd91c10ccc78ede
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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