local.edp24.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:d2:84:07:b3:46:cd:69:23:69:9f:b6:a0:fc:3a:b5:a8:1c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.edp24.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d2:84:07:b3:46:cd:69:23:69:9f:b6:a0:fc:3a:b5:a8:1c
Serial Number (int): 420083938858120544513924156200571318413340
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1c:9f:60:fe:26:12:20:cc:a4:16:9d:30:42:eb:74:92:42:5d:75:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:65:da:3f:3d:79:58:1a:07:7a:8e:22:eb:81:d4:12:9e:6e:8a:2b
Fingerprint (sha256): 84:c5:03:25:f8:6e:dd:a3:94:fd:e7:7e:95:66:2c:87:06:6d:2b:ac:a9:01:1f:db:bd:39:d4:1e:53:18:34:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.edp24.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.edp24.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajax.durhamregion.com
arnprior.insideottawavalley.com
bracebridge.muskokaregion.com
central-leader.origami.neighbourly.co.nz
gravenhurst.muskokaregion.com
horowhenua-mail.origami.neighbourly.co.nz
huntsville.muskokaregion.com
kalamazooshopping.mlive.com
king.yorkregion.com
local.agweek.com
local.aldianews.com
local.beloitdailynews.com
local.bensonnews-sun.com
local.bromleytimes.co.uk
local.burnettcountysentinel.com
local.calaverasenterprise.com
local.derbyshirelife.co.uk
local.devonlife.co.uk
local.diariolasamericas.com
local.dl-online.com
local.duluthnewstribune.com
local.eacourier.com
local.echopress.com
local.edp24.co.uk
local.etownpa.com
local.eveningnews24.co.uk
local.fauquier.com
local.fenlandcitizen.co.uk
local.fergusfallsjournal.com
local.frontiersman.com
local.gettysburgtimes.com
local.gravesendreporter.co.uk
local.guernseygazette.com
local.haverhillecho.co.uk
local.hennesseyclipper.com
local.hertfordshirelife.co.uk
local.iberianet.com
local.inforum.com
local.ivpressonline.com
local.lcnewschronicle.com
local.leaderadvertiser.com
local.luskherald.com
local.lynnnews.co.uk
local.maconcountytimes.com
local.madisoncourier.com
local.mcintoshdemocrat.com
local.midweeknews.com
local.montevistajournal.com
local.newhamrecorder.co.uk
local.newmarketjournal.co.uk
local.newsdemocratleader.com
local.nogalesinternational.com
local.northnorfolknews24.co.uk
local.nwherald.com
local.oglecountynews.com
local.okeenerecord.com
local.paducahsun.com
local.pentictonherald.ca
local.pilotweb.aero
local.pineandlakes.com
local.pinecountynews.com
local.portstephensexaminer.com.au
local.redfieldpress.com
local.sandmountainreporter.com
local.sconeadvocate.com.au
local.spokane.exchange
local.thecomet.net
local.theirregular.com
local.theparisnews.com
local.thepilotnews.com
local.thetfordandbrandontimes.co.uk
local.thewesterlysun.com
local.thnews.com
local.timesleader.com
local.uintacountyherald.com
local.urbanviewsweekly.com
local.vaildaily.com
local.wadenapj.com
local.wattonandswaffhamtimes.co.uk
local.wenatcheeworld.com
local.westessexlife.co.uk
local.windomnews.com
local.wnypapers.com
local.wymondhamandattleboroughmercury.co.uk
local.yorkshirelife.co.uk
local.yourokmulgee.com
marketplace-wb.tj.news
markham.yorkregion.com
marlborough-midweek.origami.neighbourly.co.nz
midland.simcoe.com
mylocal.latimes.com
shopbirmingham.al.com
shopping.dnronline.com
shopping.oregonlive.com
shoreview.presspubs.com
south-waikato-news.origami.neighbourly.co.nz
stouffville.yorkregion.com
toronto.torontostar.com
upper-hutt-leader.origami.neighbourly.co.nz
western-leader.origami.neighbourly.co.nz

Other certificates including the domain name edp24.co.uk

(limited to 100 certificates)
*.edp24.co.uk
edp24.co.uk
*.uat.archant.co.uk
local.bensonnews-sun.com
app.edp24.co.uk
*.advertiser24.co.uk
consent.edp24.co.uk
local.newstribune.info
*.archant.co.uk
nor-west-news.origami.neighbourly.co.nz
app.edp24.co.uk
a02342.alloaadvertiser.com
consent.norfolkbusinessawards.edp24.co.uk
consent.foodawards.devonlife.co.uk
flintshopping.mlive.com
consent.edp24.co.uk
edp24.co.uk
consent.foodawards.devonlife.co.uk
local.lutontoday.co.uk
admin.adforge.com
search.edp24.co.uk
local.hutchnews.com
consent.foodawards.devonlife.co.uk
local.bemidjipioneer.com
*.cyan.archant.co.uk
*.uat.archant.co.uk
local.pontiacdailyleader.com
parrysoundnorth.parrysound.com
consent.edp24.co.uk
local.hertfordshirelife.co.uk
app.edp24.co.uk
local.cessnockadvertiser.com.au
local.dglobe.com
*.archant.co.uk
search.edp24.co.uk
analytics.edp24.co.uk
local.fraserburghherald.co.uk
*.archant.co.uk
a02342.alloaadvertiser.com
app.edp24.co.uk
app.edp24.co.uk
local.thegazette.com
*.advertiser24.co.uk
*.advertiser24.co.uk
local.bromleytimes.co.uk
edp24.co.uk
local.eastlondonadvertiser.co.uk
*.uat.archant.co.uk
edp24.co.uk
*.uat.archant.co.uk
consent.foodawards.devonlife.co.uk
www.edp24.co.uk
local.edp24.co.uk
consent.norfolkbusinessawards.edp24.co.uk
*.uat.archant.co.uk
consent.edp24.co.uk
*.advertiser24.co.uk
local.eastlondonadvertiser.co.uk
consent.agriculturaltrader.co.uk
local.insidebiz.com
*.uat.archant.co.uk
fk.local.kentonline.co.uk
local.durhamtimes.co.uk
mylocal.jacksonville.com
consent.foodawards.devonlife.co.uk
consent.foodawards.devonlife.co.uk
consent.norfolkbusinessawards.edp24.co.uk
search.edp24.co.uk
consent.edp24.co.uk
consent.foodawards.devonlife.co.uk
flintshopping.mlive.com
a02342.alloaadvertiser.com
local.wvnews.com
consent.edp24.co.uk
edp24.co.uk
app.edp24.co.uk
consent.foodawards.devonlife.co.uk
search.edp24.co.uk
edp24.co.uk
consent.foodawards.devonlife.co.uk
*.edp24.co.uk
consent.foodawards.devonlife.co.uk
*.archant.co.uk
*.advertiser24.co.uk
consent.norfolkbusinessawards.edp24.co.uk
shopping.nola.com
*.edp24.co.uk
consent.edp24.co.uk
consent.norfolkbusinessawards.edp24.co.uk
shopping.cleveland.com
local.eastlondonadvertiser.co.uk
manukau-courier.origami.neighbourly.co.nz
shopping.nj.com
*.cyan.archant.co.uk
*.archant.co.uk
local.eastlondonadvertiser.co.uk
consent.edp24.co.uk
app.edp24.co.uk
local.madisoncourier.com
consent.norfolkbusinessawards.edp24.co.uk

Certificate

The complete raw certificate details for local.edp24.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPpjCCDo6gAwIBAgISBNKEB7NGzWkjaZ+2oPw6tagcMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEwMjAyMzQyMTFaFw0yMjAxMTgyMzQyMTBaMBwxGjAYBgNVBAMT
EWxvY2FsLmVkcDI0LmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdKe649e377tH+87EagXUNExRBLi3nH725EI7k4ymnFGPnQlFZGdgTqUgl+w
bjzWRreRsQftEZIZN5sc49huUhgqmbnQk35KmXQA/Ma2ZoT0CXq0+WIlGpV5Emv2
6V/ZKrT0rO9wo9XFzMu/9ezOCYXueDIZRPjrx4zoJ/sx7ahi/tCWCPmWuLL5NL3P
4ilL8pdNS3nDshnps6SpMadWSKWgYjSwuu2md4sPkW75gaDfA9A6+0G+s32+LP0V
dQC9ffVHKGRyPNE4D9C5EjmYOrNSKnD7CYvk2PCvvsEWkdfIN8hKTmmug5ocnDWL
kEZVtzwZaDEveFNNYkG8i2ikmQIDAQABo4IMyjCCDMYwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQcn2D+JhIgzKQWnTBC63SSQl11hzAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCCpgGA1UdEQSCCo8wggqLghVhamF4LmR1cmhhbXJlZ2lvbi5jb22CH2Fy
bnByaW9yLmluc2lkZW90dGF3YXZhbGxleS5jb22CHWJyYWNlYnJpZGdlLm11c2tv
a2FyZWdpb24uY29tgihjZW50cmFsLWxlYWRlci5vcmlnYW1pLm5laWdoYm91cmx5
LmNvLm56gh1ncmF2ZW5odXJzdC5tdXNrb2thcmVnaW9uLmNvbYIpaG9yb3doZW51
YS1tYWlsLm9yaWdhbWkubmVpZ2hib3VybHkuY28ubnqCHGh1bnRzdmlsbGUubXVz
a29rYXJlZ2lvbi5jb22CG2thbGFtYXpvb3Nob3BwaW5nLm1saXZlLmNvbYITa2lu
Zy55b3JrcmVnaW9uLmNvbYIQbG9jYWwuYWd3ZWVrLmNvbYITbG9jYWwuYWxkaWFu
ZXdzLmNvbYIZbG9jYWwuYmVsb2l0ZGFpbHluZXdzLmNvbYIYbG9jYWwuYmVuc29u
bmV3cy1zdW4uY29tghhsb2NhbC5icm9tbGV5dGltZXMuY28udWuCH2xvY2FsLmJ1
cm5ldHRjb3VudHlzZW50aW5lbC5jb22CHWxvY2FsLmNhbGF2ZXJhc2VudGVycHJp
c2UuY29tghpsb2NhbC5kZXJieXNoaXJlbGlmZS5jby51a4IVbG9jYWwuZGV2b25s
aWZlLmNvLnVrghtsb2NhbC5kaWFyaW9sYXNhbWVyaWNhcy5jb22CE2xvY2FsLmRs
LW9ubGluZS5jb22CG2xvY2FsLmR1bHV0aG5ld3N0cmlidW5lLmNvbYITbG9jYWwu
ZWFjb3VyaWVyLmNvbYITbG9jYWwuZWNob3ByZXNzLmNvbYIRbG9jYWwuZWRwMjQu
Y28udWuCEWxvY2FsLmV0b3ducGEuY29tghlsb2NhbC5ldmVuaW5nbmV3czI0LmNv
LnVrghJsb2NhbC5mYXVxdWllci5jb22CGmxvY2FsLmZlbmxhbmRjaXRpemVuLmNv
LnVrghxsb2NhbC5mZXJndXNmYWxsc2pvdXJuYWwuY29tghZsb2NhbC5mcm9udGll
cnNtYW4uY29tghlsb2NhbC5nZXR0eXNidXJndGltZXMuY29tgh1sb2NhbC5ncmF2
ZXNlbmRyZXBvcnRlci5jby51a4IZbG9jYWwuZ3Vlcm5zZXlnYXpldHRlLmNvbYIZ
bG9jYWwuaGF2ZXJoaWxsZWNoby5jby51a4IabG9jYWwuaGVubmVzc2V5Y2xpcHBl
ci5jb22CHWxvY2FsLmhlcnRmb3Jkc2hpcmVsaWZlLmNvLnVrghNsb2NhbC5pYmVy
aWFuZXQuY29tghFsb2NhbC5pbmZvcnVtLmNvbYIXbG9jYWwuaXZwcmVzc29ubGlu
ZS5jb22CGWxvY2FsLmxjbmV3c2Nocm9uaWNsZS5jb22CGmxvY2FsLmxlYWRlcmFk
dmVydGlzZXIuY29tghRsb2NhbC5sdXNraGVyYWxkLmNvbYIUbG9jYWwubHlubm5l
d3MuY28udWuCGmxvY2FsLm1hY29uY291bnR5dGltZXMuY29tghhsb2NhbC5tYWRp
c29uY291cmllci5jb22CGmxvY2FsLm1jaW50b3NoZGVtb2NyYXQuY29tghVsb2Nh
bC5taWR3ZWVrbmV3cy5jb22CG2xvY2FsLm1vbnRldmlzdGFqb3VybmFsLmNvbYIa
bG9jYWwubmV3aGFtcmVjb3JkZXIuY28udWuCHGxvY2FsLm5ld21hcmtldGpvdXJu
YWwuY28udWuCHGxvY2FsLm5ld3NkZW1vY3JhdGxlYWRlci5jb22CHmxvY2FsLm5v
Z2FsZXNpbnRlcm5hdGlvbmFsLmNvbYIebG9jYWwubm9ydGhub3Jmb2xrbmV3czI0
LmNvLnVrghJsb2NhbC5ud2hlcmFsZC5jb22CGGxvY2FsLm9nbGVjb3VudHluZXdz
LmNvbYIWbG9jYWwub2tlZW5lcmVjb3JkLmNvbYIUbG9jYWwucGFkdWNhaHN1bi5j
b22CGGxvY2FsLnBlbnRpY3RvbmhlcmFsZC5jYYITbG9jYWwucGlsb3R3ZWIuYWVy
b4IWbG9jYWwucGluZWFuZGxha2VzLmNvbYIYbG9jYWwucGluZWNvdW50eW5ld3Mu
Y29tgiFsb2NhbC5wb3J0c3RlcGhlbnNleGFtaW5lci5jb20uYXWCF2xvY2FsLnJl
ZGZpZWxkcHJlc3MuY29tgh5sb2NhbC5zYW5kbW91bnRhaW5yZXBvcnRlci5jb22C
GmxvY2FsLnNjb25lYWR2b2NhdGUuY29tLmF1ghZsb2NhbC5zcG9rYW5lLmV4Y2hh
bmdlghJsb2NhbC50aGVjb21ldC5uZXSCFmxvY2FsLnRoZWlycmVndWxhci5jb22C
FmxvY2FsLnRoZXBhcmlzbmV3cy5jb22CFmxvY2FsLnRoZXBpbG90bmV3cy5jb22C
I2xvY2FsLnRoZXRmb3JkYW5kYnJhbmRvbnRpbWVzLmNvLnVrghhsb2NhbC50aGV3
ZXN0ZXJseXN1bi5jb22CEGxvY2FsLnRobmV3cy5jb22CFWxvY2FsLnRpbWVzbGVh
ZGVyLmNvbYIbbG9jYWwudWludGFjb3VudHloZXJhbGQuY29tghpsb2NhbC51cmJh
bnZpZXdzd2Vla2x5LmNvbYITbG9jYWwudmFpbGRhaWx5LmNvbYISbG9jYWwud2Fk
ZW5hcGouY29tgiJsb2NhbC53YXR0b25hbmRzd2FmZmhhbXRpbWVzLmNvLnVrghhs
b2NhbC53ZW5hdGNoZWV3b3JsZC5jb22CGWxvY2FsLndlc3Rlc3NleGxpZmUuY28u
dWuCFGxvY2FsLndpbmRvbW5ld3MuY29tghNsb2NhbC53bnlwYXBlcnMuY29tgits
b2NhbC53eW1vbmRoYW1hbmRhdHRsZWJvcm91Z2htZXJjdXJ5LmNvLnVrghlsb2Nh
bC55b3Jrc2hpcmVsaWZlLmNvLnVrghZsb2NhbC55b3Vyb2ttdWxnZWUuY29tghZt
YXJrZXRwbGFjZS13Yi50ai5uZXdzghZtYXJraGFtLnlvcmtyZWdpb24uY29tgi1t
YXJsYm9yb3VnaC1taWR3ZWVrLm9yaWdhbWkubmVpZ2hib3VybHkuY28ubnqCEm1p
ZGxhbmQuc2ltY29lLmNvbYITbXlsb2NhbC5sYXRpbWVzLmNvbYIVc2hvcGJpcm1p
bmdoYW0uYWwuY29tghZzaG9wcGluZy5kbnJvbmxpbmUuY29tghdzaG9wcGluZy5v
cmVnb25saXZlLmNvbYIXc2hvcmV2aWV3LnByZXNzcHVicy5jb22CLHNvdXRoLXdh
aWthdG8tbmV3cy5vcmlnYW1pLm5laWdoYm91cmx5LmNvLm56ghpzdG91ZmZ2aWxs
ZS55b3JrcmVnaW9uLmNvbYIXdG9yb250by50b3JvbnRvc3Rhci5jb22CK3VwcGVy
LWh1dHQtbGVhZGVyLm9yaWdhbWkubmVpZ2hib3VybHkuY28ubnqCKHdlc3Rlcm4t
bGVhZGVyLm9yaWdhbWkubmVpZ2hib3VybHkuY28ubnowTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBByMqx3yJG
ShDGoToJQodeTjGLGwPr60vHaPCQYpYG9gAAAXygTF2TAAAEAwBHMEUCIQDtS4Ph
B1+8mB4tShOoaRuK6XL3Iz9vw1kekLKpdRCmpAIgM4V5tyij36eRpTa/f5w5/mfW
eYEe583UTtTh8W2e2pYAdgApeb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZcJV3H
hAAAAXygTF1vAAAEAwBHMEUCIQCLOXK8E7KmA17wSWRkd0dfdDnSJL4yYBVS8Zs9
rNNLYQIgAkuQDwRRiXepFj2cbuVAcokz+qVSNSWoI5nfrZCvwUkwDQYJKoZIhvcN
AQELBQADggEBAFrgPXzZgqVw4rwlQgDt5rIR5qPXUh4MEhxH5G0Iqmm7Sv2/2hqd
CiyHFSkh8K2Zei4eBAGeQH6yX0Ltp9gj+O8uKIMOk8x3voR7RxMLgszhDJ2j2tDk
w1jcwljI+FjSuZfDPFGb7wbPemYJUdjWZFPkgNP9cJYpjyvvAv92rEORYSKWWY8k
2CVjxsrOgpX5w/MhsJ20NCXO+pP/fssOLtn2Nrw25/qKaxVuv07zNKlIK55zjoL1
oj1LxP+opWgl7yOZgepueTK4Dj1flqe+eFcDvrdZ+Czpx6LNs0avGqXUtJq1FIQ6
vVPfCxqL1gQY36Cnwoyg73/jEqOj4MnprVk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdKe649e377tH+87EagX
UNExRBLi3nH725EI7k4ymnFGPnQlFZGdgTqUgl+wbjzWRreRsQftEZIZN5sc49hu
UhgqmbnQk35KmXQA/Ma2ZoT0CXq0+WIlGpV5Emv26V/ZKrT0rO9wo9XFzMu/9ezO
CYXueDIZRPjrx4zoJ/sx7ahi/tCWCPmWuLL5NL3P4ilL8pdNS3nDshnps6SpMadW
SKWgYjSwuu2md4sPkW75gaDfA9A6+0G+s32+LP0VdQC9ffVHKGRyPNE4D9C5EjmY
OrNSKnD7CYvk2PCvvsEWkdfIN8hKTmmug5ocnDWLkEZVtzwZaDEveFNNYkG8i2ik
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420083938858120544513924156200571318413340
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-20 23:42:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-18 23:42:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.edp24.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24467853836936644327999414126526919865679431640289911859842268946974955061215391500765442804977382857246086651915919817555409824472795064825218809172930622721926111995976990600605588378893662068239567436600239426988559749922636331084638206431650553458340528211562623513339858653119449440135776849872671721608076048791298283992774725067873256989941779436219537488311853618282235364967394445163255434574472414200988290251787457033091291719021623007062536022639008578944026371016224562383895094629761269736031599831211061789519542430611667330325362476462462204200114434682502062968763840994754730892546569537200205636761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c9f60fe261220cca4169d3042eb7492425d7587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2703 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnprior.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravenhurst.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horowhenua-mail.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsville.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalamazooshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'king.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.aldianews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.beloitdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bensonnews-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bromleytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.burnettcountysentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.calaverasenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.derbyshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.devonlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.diariolasamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eacourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edp24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.etownpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fauquier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fenlandcitizen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fergusfallsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.frontiersman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gettysburgtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gravesendreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guernseygazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.haverhillecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hennesseyclipper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.iberianet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ivpressonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lcnewschronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.luskherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lynnnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maconcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.madisoncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mcintoshdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midweeknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montevistajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newhamrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newmarketjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newsdemocratleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nogalesinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northnorfolknews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oglecountynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.okeenerecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.paducahsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pentictonherald.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotweb.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinecountynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portstephensexaminer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.redfieldpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sandmountainreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sconeadvocate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.spokane.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thecomet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theirregular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theparisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thepilotnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thetfordandbrandontimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewesterlysun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.timesleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uintacountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.urbanviewsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vaildaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wattonandswaffhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wenatcheeworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windomnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wnypapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wymondhamandattleboroughmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourokmulgee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-wb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markham.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midland.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.latimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbirmingham.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.dnronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreview.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south-waikato-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stouffville.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.torontostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upper-hutt-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'western-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ca04c5d930000040300473045022100ed4b83e1075fbc981e2d4a13a8691b8ae972f7233f6fc3591e90b2a97510a6a40220338579b728a3dfa791a536bf7f9c39fe67d679811ee7cdd44ed4e1f16d9eda960076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ca04c5d6f00000403004730450221008b3972bc13b2a6035ef049646477475f7439d224be32601552f19b3dacd34b610220024b900f04518977a9163d9c6ee540728933faa5523525a82399dfad90afc149
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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