local.news-journal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:25:7e:0e:0c:8f:de:c7:8f:f6:3d:af:6b:d2:7e:d6:50:9c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.news-journal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:25:7e:0e:0c:8f:de:c7:8f:f6:3d:af:6b:d2:7e:d6:50:9c
Serial Number (int): 361207146977528118033832175863757341610140
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a5:00:0b:e5:29:2e:f0:9c:a4:7f:20:53:00:fd:cc:1a:ac:e4:3b:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:61:08:07:55:c8:6a:b5:b0:55:64:26:d9:8d:15:48:ef:a0:bf:76
Fingerprint (sha256): 89:49:7a:46:31:7b:1c:0a:f5:28:8f:b5:39:0d:4f:23:43:d3:da:7a:08:c6:dd:7c:36:70:12:43:e1:1d:96:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.news-journal.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.news-journal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bargainbook.wanderful.ownlocal.com
georgina.yorkregion.com
leader.local.heraldsun.com.au
local.am-news.com
local.amarillo.com
local.bcrnews.com
local.brownwoodtx.com
local.burnettcountysentinel.com
local.cheshirelife.co.uk
local.cjonline.com
local.daily-jeff.com
local.dailyherald.com
local.dailyinterlake.com
local.daventryexpress.co.uk
local.dddnews.com
local.derbyshiretimes.co.uk
local.dunstabletoday.co.uk
local.edinburghnews.scotsman.com
local.frontiersman.com
local.galesburg.com
local.geneseorepublic.com
local.grandforksherald.com
local.gvnews.com
local.h-ponline.com
local.hackneygazette.co.uk
local.halifaxcourier.co.uk
local.hampshire-life.co.uk
local.heraldtimesonline.com
local.hertfordshirelife.co.uk
local.hertsad.co.uk
local.hillsdale.net
local.hsvvoice.com
local.insidebiz.com
local.islingtongazette.co.uk
local.kent-life.co.uk
local.kirkintilloch-herald.co.uk
local.kirksvilledailyexpress.com
local.lajuntatribunedemocrat.com
local.lakepowellchronicle.com
local.lancashirelife.co.uk
local.leaderadvertiser.com
local.leaderpost.com
local.lisburntoday.co.uk
local.livingedge.co.uk
local.marshallnewsmessenger.com
local.mcphersonsentinel.com
local.morpethherald.co.uk
local.myrecordjournal.com
local.neoshodailynews.com
local.news-journal.com
local.northamptonchron.co.uk
local.nrcolumbus.com
local.nwherald.com
local.oglecountylife.com
local.olneydailymail.com
local.ourperth.ca
local.pilotonline.com
local.pinedaleroundup.com
local.ridgecrestca.com
local.rugbyadvertiser.co.uk
local.sahuaritasun.com
local.scotsman.com
local.siskiyoudaily.com
local.sitraders.com
local.spenboroughguardian.co.uk
local.starkvilledailynews.com
local.steubencourier.com
local.sudburymercury.co.uk
local.swcbulletin.com
local.swtimes.com
local.tehachapinews.com
local.the-leader.com
local.thebignickel.com
local.thebraziltimes.com
local.theforecaster.net
local.theparisnews.com
local.theresident.co.uk
local.tyronetimes.co.uk
local.union-bulletin.com
local.wapakdailynews.com
local.waterloochronicle.ca
local.yourstephenvilletx.com
marketplace-dg.tj.news
markham.yorkregion.com
mcdonoughvoice.wanderful.ownlocal.com
messenger.local.adelaidenow.com.au
minto.southwesternontario.ca
montenews.wanderful.ownlocal.com
muskokaregion.muskokaregion.com
mylocal.cadillacnews.com
mylocal.dailypress.com
newhomes.yorkregion.com
northbay.northbaynipissing.com
norwichbulletin.wanderful.ownlocal.com
richmondhill.yorkregion.com
shopbirmingham.al.com
shopping.masslive.com
shopping.silive.com
southbostondirectory.wickedlocal.com
st.local.kentonline.co.uk

Other certificates including the domain name news-journal.com

(limited to 100 certificates)
local.panolawatchman.com
news-journal.com
news-journal.com
news-journal.com
news-journal.com
news-journal.com
news-journal.com
news-journal.com
portperry.durhamregion.com
georgina.yorkregion.com
news-journal.com
local.sachem.ca
news-journal.com
news-journal.com
citycentreparkdale.toronto.com
news-journal.com
local.moorefieldexaminer.com
local.saltwire.com
news-journal.com
news-journal.com
admin.adforge.com
news-journal.com
news-journal.com
news-journal.com
news-journal.com
news-journal.com
local.topsailadvertiser.com
local.cairnspost.com.au
news-journal.com
local.news-journal.com
news-journal.com
news-journal.com
news-journal.com
local.lincolncourier.com
news-journal.com
estore.news-journal.com
mylocal.jacksonville.com
www.news-journal.com
marketplace-ml.tj.news
bloorwestyork.toronto.com
news-journal.com
news-journal.com
news-journal.com
news-journal.com
alliston.simcoe.com
local.siskiyoudaily.com
news-journal.com
news-journal.com
local.saukvalley.com
news-journal.com
marketplace-ml.tj.news
local.columbiatribune.com
news-journal.com
news-journal.com
news-journal.com
local.saltwire.com

Certificate

The complete raw certificate details for local.news-journal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPoDCCDoigAwIBAgISBCV+DgyP3seP9j2va9J+1lCcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTUxNTQzMjZaFw0x
OTA4MTMxNTQzMjZaMCExHzAdBgNVBAMTFmxvY2FsLm5ld3Mtam91cm5hbC5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/poSiI2uL2acwr91CVqUp
ghQoor2kUcFCXMDimsaB7+ZXjWpwH0xMaejvkodYGcTLGBi2lgYC5XIt2fSMzjDp
pJtSSuFm2KYGD65aoDMdk2XIV5oUMvxYJwhe5M9H2RVBtx9cc9ecdqbCuDTCW9Ql
O0PgJuoaDXgbupuF9Be6z/alM+I05rvLECyOg6NShRhFFrXdWeg/ETLrL9ZtQ6Mz
hbCKwwPbywPRTKHRPHfuu96V20AzgdINk0SsGVjwM7nVD5axWdTDjT74Wj2T9AlB
sFHmDeCUFhc3RZ+QoSOr6OkczoWu2XzWmmEk6oD+JG/YpPmjTt31CHwGBbjSeEjX
AgMBAAGjggynMIIMozAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKUAC+UpLvCcpH8g
UwD9zBqs5DvqMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wggpcBgNVHREEggpTMIIKT4IiYmFyZ2FpbmJvb2sud2FuZGVy
ZnVsLm93bmxvY2FsLmNvbYIXZ2VvcmdpbmEueW9ya3JlZ2lvbi5jb22CHWxlYWRl
ci5sb2NhbC5oZXJhbGRzdW4uY29tLmF1ghFsb2NhbC5hbS1uZXdzLmNvbYISbG9j
YWwuYW1hcmlsbG8uY29tghFsb2NhbC5iY3JuZXdzLmNvbYIVbG9jYWwuYnJvd253
b29kdHguY29tgh9sb2NhbC5idXJuZXR0Y291bnR5c2VudGluZWwuY29tghhsb2Nh
bC5jaGVzaGlyZWxpZmUuY28udWuCEmxvY2FsLmNqb25saW5lLmNvbYIUbG9jYWwu
ZGFpbHktamVmZi5jb22CFWxvY2FsLmRhaWx5aGVyYWxkLmNvbYIYbG9jYWwuZGFp
bHlpbnRlcmxha2UuY29tghtsb2NhbC5kYXZlbnRyeWV4cHJlc3MuY28udWuCEWxv
Y2FsLmRkZG5ld3MuY29tghtsb2NhbC5kZXJieXNoaXJldGltZXMuY28udWuCGmxv
Y2FsLmR1bnN0YWJsZXRvZGF5LmNvLnVrgiBsb2NhbC5lZGluYnVyZ2huZXdzLnNj
b3RzbWFuLmNvbYIWbG9jYWwuZnJvbnRpZXJzbWFuLmNvbYITbG9jYWwuZ2FsZXNi
dXJnLmNvbYIZbG9jYWwuZ2VuZXNlb3JlcHVibGljLmNvbYIabG9jYWwuZ3JhbmRm
b3Jrc2hlcmFsZC5jb22CEGxvY2FsLmd2bmV3cy5jb22CE2xvY2FsLmgtcG9ubGlu
ZS5jb22CGmxvY2FsLmhhY2tuZXlnYXpldHRlLmNvLnVrghpsb2NhbC5oYWxpZmF4
Y291cmllci5jby51a4IabG9jYWwuaGFtcHNoaXJlLWxpZmUuY28udWuCG2xvY2Fs
LmhlcmFsZHRpbWVzb25saW5lLmNvbYIdbG9jYWwuaGVydGZvcmRzaGlyZWxpZmUu
Y28udWuCE2xvY2FsLmhlcnRzYWQuY28udWuCE2xvY2FsLmhpbGxzZGFsZS5uZXSC
EmxvY2FsLmhzdnZvaWNlLmNvbYITbG9jYWwuaW5zaWRlYml6LmNvbYIcbG9jYWwu
aXNsaW5ndG9uZ2F6ZXR0ZS5jby51a4IVbG9jYWwua2VudC1saWZlLmNvLnVrgiBs
b2NhbC5raXJraW50aWxsb2NoLWhlcmFsZC5jby51a4IgbG9jYWwua2lya3N2aWxs
ZWRhaWx5ZXhwcmVzcy5jb22CIGxvY2FsLmxhanVudGF0cmlidW5lZGVtb2NyYXQu
Y29tgh1sb2NhbC5sYWtlcG93ZWxsY2hyb25pY2xlLmNvbYIabG9jYWwubGFuY2Fz
aGlyZWxpZmUuY28udWuCGmxvY2FsLmxlYWRlcmFkdmVydGlzZXIuY29tghRsb2Nh
bC5sZWFkZXJwb3N0LmNvbYIYbG9jYWwubGlzYnVybnRvZGF5LmNvLnVrghZsb2Nh
bC5saXZpbmdlZGdlLmNvLnVrgh9sb2NhbC5tYXJzaGFsbG5ld3NtZXNzZW5nZXIu
Y29tghtsb2NhbC5tY3BoZXJzb25zZW50aW5lbC5jb22CGWxvY2FsLm1vcnBldGho
ZXJhbGQuY28udWuCGWxvY2FsLm15cmVjb3Jkam91cm5hbC5jb22CGWxvY2FsLm5l
b3Nob2RhaWx5bmV3cy5jb22CFmxvY2FsLm5ld3Mtam91cm5hbC5jb22CHGxvY2Fs
Lm5vcnRoYW1wdG9uY2hyb24uY28udWuCFGxvY2FsLm5yY29sdW1idXMuY29tghJs
b2NhbC5ud2hlcmFsZC5jb22CGGxvY2FsLm9nbGVjb3VudHlsaWZlLmNvbYIYbG9j
YWwub2xuZXlkYWlseW1haWwuY29tghFsb2NhbC5vdXJwZXJ0aC5jYYIVbG9jYWwu
cGlsb3RvbmxpbmUuY29tghlsb2NhbC5waW5lZGFsZXJvdW5kdXAuY29tghZsb2Nh
bC5yaWRnZWNyZXN0Y2EuY29tghtsb2NhbC5ydWdieWFkdmVydGlzZXIuY28udWuC
FmxvY2FsLnNhaHVhcml0YXN1bi5jb22CEmxvY2FsLnNjb3RzbWFuLmNvbYIXbG9j
YWwuc2lza2l5b3VkYWlseS5jb22CE2xvY2FsLnNpdHJhZGVycy5jb22CH2xvY2Fs
LnNwZW5ib3JvdWdoZ3VhcmRpYW4uY28udWuCHWxvY2FsLnN0YXJrdmlsbGVkYWls
eW5ld3MuY29tghhsb2NhbC5zdGV1YmVuY291cmllci5jb22CGmxvY2FsLnN1ZGJ1
cnltZXJjdXJ5LmNvLnVrghVsb2NhbC5zd2NidWxsZXRpbi5jb22CEWxvY2FsLnN3
dGltZXMuY29tghdsb2NhbC50ZWhhY2hhcGluZXdzLmNvbYIUbG9jYWwudGhlLWxl
YWRlci5jb22CFmxvY2FsLnRoZWJpZ25pY2tlbC5jb22CGGxvY2FsLnRoZWJyYXpp
bHRpbWVzLmNvbYIXbG9jYWwudGhlZm9yZWNhc3Rlci5uZXSCFmxvY2FsLnRoZXBh
cmlzbmV3cy5jb22CF2xvY2FsLnRoZXJlc2lkZW50LmNvLnVrghdsb2NhbC50eXJv
bmV0aW1lcy5jby51a4IYbG9jYWwudW5pb24tYnVsbGV0aW4uY29tghhsb2NhbC53
YXBha2RhaWx5bmV3cy5jb22CGmxvY2FsLndhdGVybG9vY2hyb25pY2xlLmNhghxs
b2NhbC55b3Vyc3RlcGhlbnZpbGxldHguY29tghZtYXJrZXRwbGFjZS1kZy50ai5u
ZXdzghZtYXJraGFtLnlvcmtyZWdpb24uY29tgiVtY2Rvbm91Z2h2b2ljZS53YW5k
ZXJmdWwub3dubG9jYWwuY29tgiJtZXNzZW5nZXIubG9jYWwuYWRlbGFpZGVub3cu
Y29tLmF1ghxtaW50by5zb3V0aHdlc3Rlcm5vbnRhcmlvLmNhgiBtb250ZW5ld3Mu
d2FuZGVyZnVsLm93bmxvY2FsLmNvbYIfbXVza29rYXJlZ2lvbi5tdXNrb2thcmVn
aW9uLmNvbYIYbXlsb2NhbC5jYWRpbGxhY25ld3MuY29tghZteWxvY2FsLmRhaWx5
cHJlc3MuY29tghduZXdob21lcy55b3JrcmVnaW9uLmNvbYIebm9ydGhiYXkubm9y
dGhiYXluaXBpc3NpbmcuY29tgiZub3J3aWNoYnVsbGV0aW4ud2FuZGVyZnVsLm93
bmxvY2FsLmNvbYIbcmljaG1vbmRoaWxsLnlvcmtyZWdpb24uY29tghVzaG9wYmly
bWluZ2hhbS5hbC5jb22CFXNob3BwaW5nLm1hc3NsaXZlLmNvbYITc2hvcHBpbmcu
c2lsaXZlLmNvbYIkc291dGhib3N0b25kaXJlY3Rvcnkud2lja2VkbG9jYWwuY29t
ghlzdC5sb2NhbC5rZW50b25saW5lLmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EMAQIB
MDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA4mlLribo6UAJ6IYb
tjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFqvGCRaQAABAMARzBFAiEAvZK4lARjhIOt
Nhcn3kPDSOgN8daOp5t+fX2GlzIqj3wCIC5fBLmiI5jzHOoRgcJnQI7jI4gNaECY
QfXkccbR+FE2AHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFq
vGCRRQAABAMARjBEAiAbK2lPfgTwJ08/nMXxn5rmr4zwCscudPdHRCs/DsFY5gIg
PNr4uv1QjcIZ8NJgp84X+H1l2zqcg5WsuXXibtsv8ucwDQYJKoZIhvcNAQELBQAD
ggEBAEa7VEvaDZIlwohglnxv86R0f/IyxmHY6cT5zTuF0rjYA2ewwYbZspdBskKq
qQ1bfccvJLpHrPsHxlmy1GIBy00iNS9ldnZ9oidBJ9JhFYmRHHTw1dN5uCM27wIl
xqcANKEhzK9F7rbIdsg0xBNuv1ytKvbb1Xfw7qGS9/K1R6WddXtKtaeMS843O0W8
yTjsq6QYKRjw6fkmWD1a5bUevUh3qsBcQaTieKkI90zQSoi6r51XQOfBeItxngU6
tPgzP99YcKrvOyqIIzKJ66xGeI+QoWadQa4HqNj5JuNR8la/kwL0bJ0VTYli3HHg
Z/HLfR1hcN5wp9DPW60Pu5KmILQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6aEoiNri9mnMK/dQlal
KYIUKKK9pFHBQlzA4prGge/mV41qcB9MTGno75KHWBnEyxgYtpYGAuVyLdn0jM4w
6aSbUkrhZtimBg+uWqAzHZNlyFeaFDL8WCcIXuTPR9kVQbcfXHPXnHamwrg0wlvU
JTtD4CbqGg14G7qbhfQXus/2pTPiNOa7yxAsjoOjUoUYRRa13VnoPxEy6y/WbUOj
M4WwisMD28sD0Uyh0Tx37rveldtAM4HSDZNErBlY8DO51Q+WsVnUw40++Fo9k/QJ
QbBR5g3glBYXN0WfkKEjq+jpHM6Frtl81pphJOqA/iRv2KT5o07d9Qh8BgW40nhI
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361207146977528118033832175863757341610140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 15:43:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 15:43:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.news-journal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24193629383549824062548197128817298048521712865744376546532610436230705244056997144581508692940671373380068039241504737293798027457036230908721129473685169508164020101852424052613750278472433533183243232957416232978664130738032229160546487679401862238129337662241484827169316574993990762313113536255624406320519154735215612201574897504729418377798911596372755044777530002798139524185387986644739939172923210868768411074024611728817675097434109787305262682227382417054750536258846883579592731933646867202375913063908664652310503135289682360120815147231283893604247704679335742636799733784251852816879100538923009984727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5000be5292ef09ca47f205300fdcc1aace43bea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2643 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bargainbook.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgina.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leader.local.heraldsun.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.am-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.amarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bcrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brownwoodtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.burnettcountysentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cjonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.daily-jeff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyinterlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.daventryexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dddnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.derbyshiretimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dunstabletoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edinburghnews.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.frontiersman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.galesburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.geneseorepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.h-ponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.halifaxcourier.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hampshire-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldtimesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hillsdale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hsvvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.islingtongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kent-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kirkintilloch-herald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kirksvilledailyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lajuntatribunedemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lakepowellchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lancashirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lisburntoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.marshallnewsmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mcphersonsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.morpethherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myrecordjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.neoshodailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northamptonchron.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nrcolumbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oglecountylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.olneydailymail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ourperth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinedaleroundup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ridgecrestca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rugbyadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sahuaritasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.siskiyoudaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sitraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.spenboroughguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.starkvilledailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.steubencourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sudburymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.swcbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.swtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tehachapinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thebignickel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thebraziltimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theforecaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theparisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theresident.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tyronetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.union-bulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wapakdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.waterloochronicle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourstephenvilletx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-dg.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markham.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonoughvoice.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger.local.adelaidenow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minto.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montenews.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokaregion.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.cadillacnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhomes.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northbay.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwichbulletin.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbirmingham.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.masslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.silive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbostondirectory.wickedlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016abc6091690000040300473045022100bd92b89404638483ad361727de43c348e80df1d68ea79b7e7d7d8697322a8f7c02202e5f04b9a22398f31cea1181c267408ee323880d68409841f5e471c6d1f85136007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016abc609145000004030046304402201b2b694f7e04f0274f3f9cc5f19f9ae6af8cf00ac72e74f747442b3f0ec158e602203cdaf8bafd508dc219f0d260a7ce17f87d65db3a9c8395acb975e26edb2ff2e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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