austinmetro.communityimpact.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c2:b6:30:7a:5c:49:2e:c0:0d:92:6f:22:97:d6:fe:e2:29 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=austinmetro.communityimpact.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:b6:30:7a:5c:49:2e:c0:0d:92:6f:22:97:d6:fe:e2:29
Serial Number (int): 327593808185190477732426530015703090520617
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:77:15:db:a3:30:13:01:b1:d0:3b:98:84:a3:7f:dd:c6:45:24:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:cd:62:64:dc:ae:8b:da:2c:5f:a4:e1:c9:4f:ec:97:e2:40:cf:42
Fingerprint (sha256): 7c:8a:00:4e:59:f5:a8:ec:49:fd:f9:fa:b9:d3:8f:7d:76:95:18:96:28:3d:4a:89:75:17:8c:ed:62:7f:e8:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate austinmetro.communityimpact.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for austinmetro.communityimpact.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advertisertribune.wanderful.ownlocal.com
annarborshopping.mlive.com
austinmetro.communityimpact.com
bayarea.communityimpact.com
chandler.communityimpact.com
cy-fair.communityimpact.com
dallasmetro.communityimpact.com
eastyorkbeach.toronto.com
georgetown.communityimpact.com
gm.local.kentonline.co.uk
handelaars.kw.be
kawarthalakes.mykawartha.com
keller.communityimpact.com
ladailynews.wanderful.ownlocal.com
local.101highlandlakes.com
local.agweek.com
local.baystatebanner.com
local.bemidjipioneer.com
local.cheyenneminuteman.com
local.dailyinterlake.com
local.devon24.co.uk
local.djournal.com
local.duluth.com
local.eacourier.com
local.etownpa.com
local.eveningnews24.co.uk
local.fenlandcitizen.co.uk
local.gvnews.com
local.hackneygazette.co.uk
local.hampshire-life.co.uk
local.hmbreview.com
local.hungryhorsenews.com
local.iberianet.com
local.idahopress.com
local.insideottawavalley.com
local.kelownadailycourier.ca
local.lebanondemocrat.com
local.montrosepress.com
local.moorefieldexaminer.com
local.mountainstatesman.com
local.mycaldwellcounty.com
local.myheraldreview.com
local.myrecordjournal.com
local.northnorfolknews24.co.uk
local.northsomersettimes.co.uk
local.observer-reporter.com
local.paducahsun.com
local.panolawatchman.com
local.pawtuckettimes.com
local.pilotweb.aero
local.pinkun.com
local.rutland-times.co.uk
local.sidmouthherald.co.uk
local.silverbelt.com
local.sunnysidesun.com
local.svindependent.com
local.swnewsmedia.com
local.tabertimes.com
local.theforecaster.net
local.thelocalvoice.net
local.theparisnews.com
local.thesiuslawnews.com
local.thewestonmercury.co.uk
local.victoriaadvocate.com
local.wadenapj.com
local.wctrib.com
local.whatsuppub.com
local.whtimes.co.uk
local.windomnews.com
local.wnypapers.com
local.wvnews.com
local.wymondhamandattleboroughmercury.co.uk
local.yourchickens.co.uk
local.yourokmulgee.com
marketplace-kr.tj.news
mauinews.wanderful.ownlocal.com
mckinney.communityimpact.com
mm.local.kentonline.co.uk
muskegonshopping.mlive.com
mylocal.carrollcountytimes.com
mylocal.chicagotribune.com
mylocal.courant.com
nashvillemetro.communityimpact.com
newmarket.yorkregion.com
north-harbour-news.origami.neighbourly.co.nz
northoaks.presspubs.com
planosouth.communityimpact.com
rcjflyerboard.wanderful.ownlocal.com
sangabrielvalley.wanderful.ownlocal.com
shopping.nj.com
shopping.nola.com
shopping.pennlive.com
shopping.syracuse.com
shoreview.presspubs.com
south-waikato-news.origami.neighbourly.co.nz
starledger.wanderful.ownlocal.com
sugarland.communityimpact.com
thewoodlands.communityimpact.com
western-leader.origami.neighbourly.co.nz
whitebear.presspubs.com

Other certificates including the domain name communityimpact.com

(limited to 100 certificates)
www.communityimpact.com
local.panolawatchman.com
communityimpact.com
local.dissexpress.co.uk
communityimpact.com
conroe.communityimpact.com
communityimpact.com
staging.communityimpact.com
news.communityimpact.com
portperry.durhamregion.com
projects.communityimpact.com
tomball.communityimpact.com
georgina.yorkregion.com
local.ottawasun.com
local.moodycountyenterprise.com
communityimpact.com
www.communityimpact.com
local.saltwire.com
www.communityimpact.com
kawarthalakes.mykawartha.com
*.communityimpact.com
communityimpact.com
communityimpact.com
northern-news.origami.neighbourly.co.nz
www.communityimpact.com
communityimpact.com
*.communityimpact.com
austinmetro.communityimpact.com
www.communityimpact.com
www.communityimpact.com
sni194623.cloudflaressl.com
communityimpact.com
www.communityimpact.com
www.communityimpact.com
communityimpact.com
communityimpact.com
www.communityimpact.com
*.communityimpact.com
*.communityimpact.com
communityimpact.com
editions.communityimpact.com
communityimpact.com
www.communityimpact.com
alliston.simcoe.com
communityimpact.com
local.kent-life.co.uk
communityimpact.com
local.brainerddispatch.com
staging.communityimpact.com
communityimpact.com
editions.communityimpact.com
communityimpact.com
communityimpact.com
local.saltwire.com

Certificate

The complete raw certificate details for austinmetro.communityimpact.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EWK2Z4J0t6/flvkVXa2
4/e7wCSaFk8qI7v0WMpODAazlsN4ZfwWafE13eB/zGdK5t+Rm9KigMLe4Cys8K9B
cLpPyFu22FuIXsPFlaNb4UJ58XVwtJ0BiAuL4G3ksoOensMZixWKXWW1Pc43ywFT
K8KlPr8fKiZOJAcod5dsJ+6q8GqNrRmGnZqZsgjSme/EQ2GfMS2ViXSnRmd6SFay
khO3fo4uX85Q116hKLKO6+T81XKJvCOOXMZpa7+FLyBdBPva2te6bZjURdADzqXx
YtJ9+Nw90HUQ7Y2x94r8Bmm7EFQoj911QRdIPI7KpGzwt61UCi611PO7gcq9iPia
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327593808185190477732426530015703090520617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 05:21:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-14 05:21:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'austinmetro.communityimpact.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26796813280003438942442998250354793140188222740545905940903302064240258636380863695496661787853958284917682763320405115908313355169402901607806195281250335342623413920388494616943634731876392323735792532678204931563857525069668342815802836643619466803233321448807917901651955062089666561065262588626175502967404425122527857858621748167679207233796525584142490155143269886918104679370909146264640064827858599877425891613182201448817405987737456780575765737968702434097850085013777319042888160099678599453800946560925986064984588423334719511208558636858665134118940999975515902342211260655626597811473990275334242081461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							657715dba3301301b1d03b9884a37fddc6452454
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2709 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertisertribune.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annarborshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinmetro.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayarea.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chandler.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cy-fair.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasmetro.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastyorkbeach.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgetown.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawarthalakes.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keller.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladailynews.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.101highlandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baystatebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cheyenneminuteman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyinterlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.devon24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.djournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eacourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.etownpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fenlandcitizen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hampshire-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hmbreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hungryhorsenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.iberianet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.idahopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kelownadailycourier.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lebanondemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrosepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moorefieldexaminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mountainstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mycaldwellcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myheraldreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myrecordjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northnorfolknews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northsomersettimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observer-reporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.paducahsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.panolawatchman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pawtuckettimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotweb.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinkun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rutland-times.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sidmouthherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.silverbelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunnysidesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.svindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.swnewsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tabertimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theforecaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thelocalvoice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theparisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesiuslawnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewestonmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.victoriaadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whatsuppub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windomnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wnypapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wymondhamandattleboroughmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourchickens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourokmulgee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-kr.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauinews.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckinney.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskegonshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.carrollcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashvillemetro.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmarket.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-harbour-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northoaks.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planosouth.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcjflyerboard.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangabrielvalley.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.pennlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.syracuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreview.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south-waikato-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starledger.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarland.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewoodlands.communityimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'western-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitebear.presspubs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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