local.ijn.com

Issued by R3

About this certificate

This digital certificate with serial number 04:50:cc:7b:ed:da:56:55:e2:67:ce:d7:ad:5b:73:f8:45:ce was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=local.ijn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:50:cc:7b:ed:da:56:55:e2:67:ce:d7:ad:5b:73:f8:45:ce
Serial Number (int): 375943539068599321317700815826531114304974
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2d:ed:8d:90:3d:f1:f6:e0:e3:fc:c8:1f:2b:dc:b0:30:4e:8b:11:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:a2:08:d1:a8:ea:ba:2d:29:1e:9f:be:bf:8b:39:7d:f9:7d:ec:11
Fingerprint (sha256): 72:bd:55:67:be:95:6f:86:c3:3e:fc:26:fe:9a:46:fa:7b:3a:1d:01:82:6a:76:8c:57:b3:50:95:4e:5d:90:be

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.ijn.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.ijn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

austin.ownlocal.com
citycentreparkdale.toronto.com
east-bays-courier.origami.neighbourly.co.nz
em.local.kentonline.co.uk
hauraki-herald.origami.neighbourly.co.nz
hayward.apg-wi.com
horowhenua-mail.origami.neighbourly.co.nz
km.local.kentonline.co.uk
local.abingtonnews.org
local.am-news.com
local.anchoragepress.com
local.angliaafloat.co.uk
local.appeal-democrat.com
local.baylorlariat.com
local.becclesandbungayjournal.co.uk
local.bigspringherald.com
local.bournelocal.co.uk
local.caledonianrecord.com
local.cambstimes.co.uk
local.canton-times.com
local.capjournal.com
local.centraloregon.pamplinmedia.com
local.clintonnc.com
local.cotswoldlife.co.uk
local.countystar.com
local.crestonnews.com
local.dailyherald.com
local.dglobe.com
local.douglasdispatch.com
local.elystandard.co.uk
local.etownpa.com
local.eufaulaindianjournal.com
local.gcnewsgazette.com
local.grandforksherald.com
local.gravesendreporter.co.uk
local.ijn.com
local.index.vernonpublishing.com
local.insidebiz.com
local.inyoregister.com
local.jamestownsun.com
local.kendallcountynow.com
local.madisondailyleader.com
local.maidenhead-advertiser.co.uk
local.metropolisplanet.com
local.mitchellrepublic.com
local.moraminn.com
local.muswellbrookchronicle.com.au
local.mydallaspost.com
local.mysuburbanlife.com
local.newtondailynews.com
local.nyvtmedia.com
local.observernewsonline.com
local.osceolaiowa.com
local.parkrapidsenterprise.com
local.pdclarion.com
local.pilotonline.com
local.portstephensexaminer.com.au
local.punxsutawneyspirit.com
local.robesonian.com
local.romfordrecorder.co.uk
local.saffronwaldenreporter.co.uk
local.sentinelsource.com
local.somerset-life.co.uk
local.ss-times.com
local.ssnewstelegram.com
local.starvedrockcountry.com
local.sudburymercury.co.uk
local.sunnysidesun.com
local.swnewsmedia.com
local.tahoedailytribune.com
local.the570.com
local.theameryfreepress.com
local.thegazette.com
local.theievoice.com
local.theirregular.com
local.theparisnews.com
local.thewesternnews.com
local.thnews.com
local.travelnewmex.com
local.univisionaustin.com
local.vaildaily.com
local.viannews.com
local.wabashplaindealer.com
local.wadenapj.com
local.wapakdailynews.com
local.westessexlife.co.uk
local.windomnews.com
local.yourdailyjournal.com
local.yourokmulgee.com
local.zip06.com
manukau-courier.origami.neighbourly.co.nz
muskegonshopping.mlive.com
mylocal.capitalgazette.com
origamiwahpeton.wahpetondailynews.com
ricelake.apg-wi.com
shopbirmingham.al.com
shopping.dallasnews.com
shopping.pennlive.com
stcroixvalley.presspubs.com
whangarei-leader.origami.neighbourly.co.nz

Other certificates including the domain name ijn.com

(limited to 100 certificates)
local.theameryfreepress.com
local.crestonnews.com
ijn.com
the-nelson-leader.origami.neighbourly.co.nz
ijn.com
local.hertsad.co.uk
local.brechinadvertiser.co.uk
ijn.com
www.ijn.com
local.wisbechstandard.co.uk
www.ijn.com
local.moodycountyenterprise.com
www.ijn.com
www.ijn.com
local.thetfordandbrandontimes.co.uk
local.calgaryherald.com
ijn.com
local.cessnockadvertiser.com.au
local.dglobe.com
impactousa.wanderful.ownlocal.com
admin.adforge.com
ijn.com
www.ijn.com
local.thetfordandbrandontimes.co.uk
local.tahoedailytribune.com
ijn.com
local.theledger.com
www.ijn.com
local.wenatcheeworld.com
local.ijn.com
ijn.com
www.ijn.com
ijn.com
ijn.com
local.theameryfreepress.com
local.hertsad.co.uk
ijn.com
the-nelson-leader.origami.neighbourly.co.nz
local.punxsutawneyspirit.com
ijn.com
ijn.com
mylocal.jacksonville.com
ijn.com
ijn.com
www.ijn.com
www.ijn.com
ijn.com
ijn.com
www.ijn.com
www.ijn.com
www.ijn.com
ijn.com
ijn.com
ijn.com
ijn.com
ijn.com
www.ijn.com
ijn.com
www.ijn.com
www.ijn.com
local.newsdemocratleader.com
www.ijn.com
local.cornwalllife.co.uk
www.ijn.com
ijn.com
alliston.simcoe.com
ijn.com
manukau-courier.origami.neighbourly.co.nz
local.osceolaiowa.com
local.mywebtimes.com
www.ijn.com
ijn.com
local.yourdailyjournal.com
local.columbiatribune.com
www.ijn.com
local.wahpetondailynews.com
www.ijn.com
www.ijn.com
flintshopping.mlive.com
flintshopping.mlive.com

Certificate

The complete raw certificate details for local.ijn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh6FleWSGrfogYPVZZUl
HYrY0HQoRaZoN0Y1HFhx2CIk6BNa1hDQZoTdNCAqyVd9CqAYPFJ9cKZOkz+aFK0I
lrcPEBuFWkvhgg3/4nfBSllCvzOVoPIgAAGcitPNdIQfTjVbhr0OsfZvPNrZFKoO
QHKcgcp2mSVWt64VzKvz5EVNHKNI07cU8KY7f3e91+/0ds4+xOqYAIx/RP1CoRwk
NwtX/5j0/ZKqu6G+ZWRBNIZGxZGgEC4t+aoZoLLAl9VDIbjpOb3ETL35RcSS9I3i
5urAu9Ygi5Kwg/PN5HbSKHt+TO9SM2wH8cIGX816Mp9JHxxhX3+Dy0gd2eW665fU
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375943539068599321317700815826531114304974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 09:39:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 09:39:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.ijn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25515188472796359386311075485819431368708463861607023173986594784482254673974440189361545449672111716919238007485266447194840232690389003954461422061103015326822599976696977574018790073549784487056705162534061827268104602842110081381113555004151837870295398915708008182160180847368970388004057030661797774749290429717794371572894905642089863230010755232915964176101166391868460445881999480004148786069532376163169763795528129387613585804136641233683507731708975912047903517872871476935689817461934300888642836067392338078418559192835038355865365426806350907219925645654082556052588899306380478502343464691038512731349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ded8d903df1f6e0e3fcc81f2bdcb0304e8b1164
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2657 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycentreparkdale.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'east-bays-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'em.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hauraki-herald.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayward.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horowhenua-mail.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'km.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.abingtonnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.am-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.anchoragepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.angliaafloat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.appeal-democrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baylorlariat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.becclesandbungayjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bigspringherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bournelocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonianrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cambstimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.canton-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.capjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.centraloregon.pamplinmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clintonnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cotswoldlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crestonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.douglasdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elystandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.etownpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eufaulaindianjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gcnewsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gravesendreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ijn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.index.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inyoregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kendallcountynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.madisondailyleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maidenhead-advertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.metropolisplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moraminn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muswellbrookchronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mydallaspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mysuburbanlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newtondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nyvtmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observernewsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolaiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pdclarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portstephensexaminer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.punxsutawneyspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.robesonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.romfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saffronwaldenreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sentinelsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.somerset-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ss-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ssnewstelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.starvedrockcountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sudburymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunnysidesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.swnewsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tahoedailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the570.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theameryfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theievoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theirregular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theparisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewesternnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.travelnewmex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.univisionaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vaildaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.viannews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wabashplaindealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wapakdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windomnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourdailyjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourokmulgee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.zip06.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukau-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskegonshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origamiwahpeton.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricelake.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbirmingham.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.dallasnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.pennlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixvalley.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangarei-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e7a5804fa000004030046304402200ce53338c44b916f5b16da52ce6d7912d100516239739b86536ec981948d440a02201210eb6134f22ce34ade946ad8ba60d31039f2f70ab4f64f6239fbe826c3c6e500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e7a5804e200000403004730450221008aaae1a6bcd74c848e7da535d607d4d6f456b73fbd1d19df6c98ef58b42b0db7022041c812644b94169a1633f13439cc9becc380eb4b59faa55a1817c1be51fd26a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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