the-nelson-leader.origami.neighbourly.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:3c:43:f6:e8:3e:02:f3:d8:f6:2e:2b:e9:92:fa:9c:a4:3f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=the-nelson-leader.origami.neighbourly.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3c:43:f6:e8:3e:02:f3:d8:f6:2e:2b:e9:92:fa:9c:a4:3f
Serial Number (int): 368956426033474171212017370714304577053759
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:3b:57:60:17:ab:b6:1f:21:e8:de:a3:9e:d5:8a:23:28:4d:5e:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:ee:03:9e:c3:e9:51:e0:98:55:67:0c:e2:80:0d:a3:a6:69:b9:d7
Fingerprint (sha256): 90:b4:99:21:b5:99:fc:af:3c:22:7f:08:e8:74:50:6c:77:ba:90:61:0c:71:3c:54:d5:1c:ef:ab:bd:e1:56:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate the-nelson-leader.origami.neighbourly.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for the-nelson-leader.origami.neighbourly.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bay-chronicle.origami.neighbourly.co.nz
bracebridge.muskokaregion.com
bradford.yorkregion.com
brock.mykawartha.com
collingwood.simcoe.com
grandrapidsshopping.mlive.com
hauraki-herald.origami.neighbourly.co.nz
jacksonshopping.mlive.com
kapi-mana-news.origami.neighbourly.co.nz
local.abingtonnews.org
local.airgunshooting.co.uk
local.alexcityoutlook.com
local.altustimes.com
local.am-news.com
local.bcrnews.com
local.bemidjipioneer.com
local.bridemagazine.co.uk
local.buckscountyherald.com
local.buryfreepress.co.uk
local.caledonianrecord.com
local.cambstimes.co.uk
local.carrollspaper.com
local.cessnockadvertiser.com.au
local.cityweekly.net
local.crowrivermedia.com
local.dailyrecordnews.com
local.decaturdailydemocrat.com
local.douglasdispatch.com
local.eastbayri.com
local.easterntimesregister.com
local.essexlifemag.co.uk
local.eufaulaindianjournal.com
local.exmouthjournal.co.uk
local.frontiersman.com
local.gazette.com
local.hampshire-life.co.uk
local.hawaiitribune-herald.com
local.ijn.com
local.ivpressonline.com
local.kendallcountynow.com
local.lakecountysuburbanlife.com
local.leaderadvertiser.com
local.letstalk24.co.uk
local.maitlandmercury.com.au
local.mammothtimes.com
local.militarynews.com
local.moraminn.com
local.muswellbrookchronicle.com.au
local.mydallaspost.com
local.mysuburbanlife.com
local.newcastlestar.com.au
local.news-banner.com
local.news-sun.com
local.newsdemocratleader.com
local.norwichextra.com
local.oglecountynews.com
local.omakchronicle.com
local.osceolasun.com
local.pawtuckettimes.com
local.perhamfocus.com
local.pinecitymn.com
local.pinecountynews.com
local.prairieadvocate.com
local.princewilliamtimes.com
local.psdispatch.com
local.romfordrecorder.co.uk
local.sahuaritasun.com
local.stamfordmercury.co.uk
local.stowmarketmercury.co.uk
local.superiortelegram.com
local.tctimes.com
local.theameryfreepress.com
local.theeveningleader.com
local.thefirsthundredmiles.com
local.thegazette.com
local.theievoice.com
local.timesleader.com
local.univisionaustin.com
local.wahpetondailynews.com
local.westessexlife.co.uk
local.yadkinripple.com
localbiz.mysa.com
manukau-courier.origami.neighbourly.co.nz
marketplace-ep.tj.news
muskokan.muskokaregion.com
muskokaregion.muskokaregion.com
mylocal.capitalgazette.com
northern-outlook.origami.neighbourly.co.nz
ownlocal.neighbourly.co.nz
papakura-courier.origami.neighbourly.co.nz
perth.insideottawavalley.com
ricelake.apg-wi.com
shopping.nj.com
st.local.kentonline.co.uk
stcroixvalley.presspubs.com
the-nelson-leader.origami.neighbourly.co.nz
thornhill.yorkregion.com
toronto.torontostar.com
upper-hutt-leader.origami.neighbourly.co.nz
western-leader.origami.neighbourly.co.nz

Other certificates including the domain name neighbourly.co.nz

(limited to 100 certificates)
cdn.nikolay.dev.neighbourly.co.nz
cdn.thai.dev.neighbourly.co.nz
kalamazooshopping.mlive.com
local.flamboroughreview.com
lb.preprod.dev.neighbourly.co.nz
local.theameryfreepress.com
local.panolawatchman.com
local.thefirsthundredmiles.com
*.neighbourly.co.nz
local.crestonnews.com
c3.shared.global.fastly.net
cdn.stuff-coupon.thai.dev.neighbourly.co.nz
c3.shared.global.fastly.net
lb.jimmy.dev.neighbourly.co.nz
cdn.inyoung.dev.neighbourly.co.nz
somni.neighbourly.co.nz
lb.oliver.dev.neighbourly.co.nz
local.thegazette.com
*.devint.neighbourly.co.nz
cdn.oliver.dev.neighbourly.co.nz
shop.neighbourly.co.nz
eastern-courier.origami.neighbourly.co.nz
local.dissexpress.co.uk
local.bensonnews-sun.com
cdn.stuff-coupon.thai.dev.neighbourly.co.nz
*.neighbourly.co.nz
cognito.dev.neighbourly.co.nz
lb.stuff-coupon.oliver.dev.neighbourly.co.nz
c3.shared.global.fastly.net
local.summitdaily.com
local.alexcityoutlook.com
local.wahpetondailynews.com
local.pilotweb.aero
local.daily-chronicle.com
conroe.communityimpact.com
nor-west-news.origami.neighbourly.co.nz
lb.stuff-coupon.thai.dev.neighbourly.co.nz
peterborough.mykawartha.com
neighbourly.co.nz
c3.shared.global.fastly.net
lb.staging5.dev.neighbourly.co.nz
lb.anil.dev.neighbourly.co.nz
somni.neighbourly.co.nz
local.airgunshooting.co.uk
lb.karan.dev.neighbourly.co.nz
c3.shared.global.fastly.net
lb.property-admin.dev.neighbourly.co.nz
auth.dev.neighbourly.co.nz
*.devint.neighbourly.co.nz
lb.stuff-coupon.staging.dev.neighbourly.co.nz
local.centraloregon.pamplinmedia.com
the-nelson-leader.origami.neighbourly.co.nz
cdn.oliver.dev.neighbourly.co.nz
local.news-banner.com
flintshopping.mlive.com
local.ftimes.com
*.neighbourly.co.nz
local.dglobe.com
lb.duong.dev.neighbourly.co.nz
c3.shared.global.fastly.net
c3.shared.global.fastly.net
*.neighbourly.co.nz
western-leader.origami.neighbourly.co.nz
lb.neighbourly-user-data.oliver.dev.neighbourly.co.nz
cdn.preprod.dev.neighbourly.co.nz
portperry.durhamregion.com
shop.neighbourly.co.nz
c3.shared.global.fastly.net
local.willcoxrangenews.com
tomball.communityimpact.com
*.neighbourly.co.nz
api.user-data.neighbourly.co.nz
cdn.stuff-coupon.staging.dev.neighbourly.co.nz
lb.oliver2.dev.neighbourly.co.nz
georgina.yorkregion.com
cdn.duong.dev.neighbourly.co.nz
c3.shared.global.fastly.net
local.ottawasun.com
shop.neighbourly.co.nz
newhomes.yorkregion.com
lb.jeremy.dev.neighbourly.co.nz
c3.shared.global.fastly.net
*.dev.neighbourly.co.nz
local.hertsad.co.uk
lb.shershad-property.dev.neighbourly.co.nz
c3.shared.global.fastly.net
*.neighbourly.co.nz
cdn.rafik.dev.neighbourly.co.nz
lb.oliver2.dev.neighbourly.co.nz
*.neighbourly.co.nz
lb.jennie.dev.neighbourly.co.nz
km.local.kentonline.co.uk
local.bemidjipioneer.com
local.cambstimes.co.uk
c3.shared.global.fastly.net
whangarei-leader.origami.neighbourly.co.nz
local.wisbechstandard.co.uk
somni.neighbourly.co.nz
cdn.staging4.dev.neighbourly.co.nz
local.moodycountyenterprise.com

Certificate

The complete raw certificate details for the-nelson-leader.origami.neighbourly.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycS81RjxkDKlrf/20q2u
TlKA0zkmQTOq55B4nVebdgTc7G8JpQiAL8RmNhaY/scLJxDe6Is9ChmMJefZ3oFG
iLiZyNTGP8FuWzRwyjTqzz55uR7eMcOd/lrmdzVa/y+4jq7vLtcODlbfDSF1sHVs
JTofcxSCHRGqGQsFBCbxEsq6X22zC6caTh2biLYlggq6m0NA0fyMwMNKbO+kSCE+
5F3DtvyQD2UhD2rI47jK/HB+hTuIQwvtnUq4lXyn9vHAvMU0/LZ0Czz4+uysdSGZ
52c83sQZVPcX57DEHBzJGwRsRBQwtbRQqZrRGr/yLR6urDxcGgp0hahrjnXGgzQ5
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368956426033474171212017370714304577053759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-04 10:15:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-02 10:15:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'the-nelson-leader.origami.neighbourly.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25470914237654905868983092331897773330830434833030767834531751949672352538676636433349716953665886480552127352867405372430783655967658975544702691642226833065335707655535906763368747233598880557992134325465697572108772368540287060152597371507067791315614317135042103862957062421309331493054109851694439311182280565069851094025715717150824292204022610017691085831083739884116538029387324830124608258830318129462735603299343326087010643829097736368675641005027257355071253269555630464568225101916775134384270527594080154042826657938411168080892330319740941454297972638066994060720638429857603515807208625578935082826181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e3b576017abb61f21e8dea39ed58a23284d5e2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2756 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bay-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradford.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brock.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collingwood.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandrapidsshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hauraki-herald.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapi-mana-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.abingtonnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.airgunshooting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.alexcityoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.altustimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.am-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bcrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bridemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buckscountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buryfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonianrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cambstimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carrollspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cessnockadvertiser.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cityweekly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crowrivermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyrecordnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.decaturdailydemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.douglasdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastbayri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.easterntimesregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.essexlifemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eufaulaindianjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.frontiersman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hampshire-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hawaiitribune-herald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ijn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ivpressonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kendallcountynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lakecountysuburbanlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.letstalk24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maitlandmercury.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mammothtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.militarynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moraminn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muswellbrookchronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mydallaspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mysuburbanlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newcastlestar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-banner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newsdemocratleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norwichextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oglecountynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.omakchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pawtuckettimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinecitymn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinecountynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.prairieadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.princewilliamtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.psdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.romfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sahuaritasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stamfordmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stowmarketmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tctimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theameryfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeveningleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thefirsthundredmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theievoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.timesleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.univisionaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yadkinripple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localbiz.mysa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukau-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-ep.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokan.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokaregion.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northern-outlook.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownlocal.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakura-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perth.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricelake.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixvalley.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-nelson-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thornhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.torontostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upper-hutt-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'western-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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