local.punxsutawneyspirit.com

Issued by R3

About this certificate

This digital certificate with serial number 04:dc:c2:b2:ce:a4:95:69:a0:5a:5a:01:76:e7:78:49:14:4e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.punxsutawneyspirit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dc:c2:b2:ce:a4:95:69:a0:5a:5a:01:76:e7:78:49:14:4e
Serial Number (int): 423570063100886579392602457114390964016206
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:af:7a:5a:4f:8b:f8:af:f7:7d:cf:4f:96:21:0b:d1:91:40:8a:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:a7:7e:69:63:65:44:cf:b5:ab:71:e4:1a:2c:24:98:46:f1:a2:ba
Fingerprint (sha256): 94:f7:f8:7d:55:56:c3:41:79:3e:fc:08:59:8c:44:96:9c:70:f1:8a:01:af:1f:d0:70:36:55:22:d3:00:6f:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.punxsutawneyspirit.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.punxsutawneyspirit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

austin.ownlocal.com
bracebridge.muskokaregion.com
hayward.apg-wi.com
local.ansonrecord.com
local.baldwin-bulletin.com
local.barkinganddagenhampost.co.uk
local.becclesandbungayjournal.co.uk
local.buckscountyherald.com
local.calaverasenterprise.com
local.caledonianrecord.com
local.carrollspaper.com
local.centraloregon.pamplinmedia.com
local.countystar.com
local.crowrivermedia.com
local.dailyinterlake.com
local.dl-online.com
local.douglasdispatch.com
local.eadt.co.uk
local.echopress.com
local.elystandard.co.uk
local.eufaulaindianjournal.com
local.greenun24.co.uk
local.hamhigh.co.uk
local.hampshire-life.co.uk
local.hennesseyclipper.com
local.hmbreview.com
local.hungryhorsenews.com
local.idahopress.com
local.ijn.com
local.insidebiz.com
local.ivpressonline.com
local.janesvillemarketplace.com
local.kilburntimes.co.uk
local.lodinews.com
local.maconcountytimes.com
local.malvern-online.com
local.mammothtimes.com
local.mcintoshdemocrat.com
local.midiario.com
local.montrosepress.com
local.mydallaspost.com
local.norfolkmag.co.uk
local.northsomersettimes.co.uk
local.norwichextra.com
local.osceolasun.com
local.perutribune.com
local.pinkun.com
local.portstephensexaminer.com.au
local.punxsutawneyspirit.com
local.republicanherald.com
local.robesonian.com
local.rutland-times.co.uk
local.saltillo360.com
local.saukvalley.com
local.statesmanexaminer.com
local.sunnysidesun.com
local.svindependent.com
local.tctimes.com
local.theameryfreepress.com
local.thecomet.net
local.thedickinsonpress.com
local.theeasleyprogress.com
local.theforecaster.net
local.theparisnews.com
local.townandcountrymagazine.com.au
local.unioneagle.com
local.univisionaustin.com
local.viannews.com
local.wadenapj.com
local.wctrib.com
local.wenatcheeworld.com
local.westhawaiitoday.com
local.willistonherald.com
local.windomnews.com
local.yadkinripple.com
local.yakimaherald.com
local.yourchickens.co.uk
marketplace-sj.tj.news
marketplace-vs.tj.news
markham.yorkregion.com
mylocal.baltimoresun.com
mylocal.cadillacnews.com
mylocal.chicagotribune.com
mylocal.dailypress.com
mylocal.mrt.com
mylocal.muleshoejournal.com
mylocal.syracusenewtimes.com
newhomes.yorkregion.com
newmarket.yorkregion.com
north-shore-times.origami.neighbourly.co.nz
renfrew.insideottawavalley.com
shopbirmingham.al.com
shopping.dallasnews.com
shopping.pennlive.com
shopping.syracuse.com
st.local.kentonline.co.uk
stcroixvalley.presspubs.com
taupo-times.origami.neighbourly.co.nz
the-hutt-news.origami.neighbourly.co.nz
upper-hutt-leader.origami.neighbourly.co.nz

Other certificates including the domain name punxsutawneyspirit.com

(limited to 100 certificates)
local.thefirsthundredmiles.com
www.punxsutawneyspirit.com
cdn-le.arkadiumhosted.com
eastern-courier.origami.neighbourly.co.nz
local.dissexpress.co.uk
local.daily-chronicle.com
punxsutawneyspirit.com
cdn-le.arkadiumhosted.com
local.airgunshooting.co.uk
punxsutawneyspirit.com
markham.yorkregion.com
portperry.durhamregion.com
local.lutontoday.co.uk
local.delrionewsherald.com
cdn-le.arkadiumhosted.com
cdn-le.arkadiumhosted.com
punxsutawneyspirit.com
punxsutawneyspirit.com
cdn-le.arkadiumhosted.com
local.brookingsregister.com
punxsutawneyspirit.com
www.punxsutawneyspirit.com
www.punxsutawneyspirit.com
local.cambstimes.co.uk
local.wisbechstandard.co.uk
local.thefirsthundredmiles.com
cdn-le.arkadiumhosted.com
cdn-le3.arkadiumhosted.com
local.eastlondonadvertiser.co.uk
cdn-le.arkadiumhosted.com
local.thetfordandbrandontimes.co.uk
local.guymondailyherald.com
local.dglobe.com
local.thetfordandbrandontimes.co.uk
local.tahoedailytribune.com
local.fraserburghherald.co.uk
punxsutawneyspirit.com
cdn-le.arkadiumhosted.com
cdn-le.arkadiumhosted.com
fk.local.kentonline.co.uk
mylocal.journal-news.com
shopping.cleveland.com
northern-news.origami.neighbourly.co.nz
punxsutawneyspirit.com
local.ijn.com
kawarthalakes.mykawartha.com
cdn-le.arkadiumhosted.com
local.uniondailytimes.com
local.punxsutawneyspirit.com
punxsutawneyspirit.com
local.halifaxcourier.co.uk
local.durhamtimes.co.uk
local.daily-chronicle.com
punxsutawneyspirit.com
www.punxsutawneyspirit.com
local.cambstimes.co.uk
cdn-le.arkadiumhosted.com
punxsutawneyspirit.com
cdn-le.arkadiumhosted.com
bloorwestyork.toronto.com
local.beloitdailynews.com
cdn-le.arkadiumhosted.com
local.janesvillemarketplace.com
cdn-le.arkadiumhosted.com
local.eastlondonadvertiser.co.uk
local.eastlondonadvertiser.co.uk
shopping.nj.com
local.wahpetondailynews.com
local.fenlandcitizen.co.uk
punxsutawneyspirit.com
punxsutawneyspirit.com
cdn-le.arkadiumhosted.com
cdn-le.arkadiumhosted.com
local.frontiersman.com
local.news-banner.com
local.wahpetondailynews.com
cdn-le.arkadiumhosted.com
cdn-le.arkadiumhosted.com
local.uniondailytimes.com
local.theintell.com
www.punxsutawneyspirit.com
punxsutawneyspirit.com

Certificate

The complete raw certificate details for local.punxsutawneyspirit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q3dyIIfdfdozHpysA+r
NyerWVYLHrA8iOFHw+LiGRziYdvxOUCd6WP+ciHL+DPDFJ+HYpAbLEDJrWiMfppC
6Xxd3pqE6PunZQBXALLm5UJ17eO3ejexkNJpCG69EDFRUwqw9zcM4uwbbg7W1FIx
TsQ9/4HBbvGPYdQ5C65d797pO+BVBoHC/MKXS5/qsr82Vf1iOlbxRvlGeDO+LDj8
y0EvpPhipXJTXAIddo8eEEO9arL+zsLn9lQdohtApOcxklv2AnTbkC/FXKw368f0
l8JwzTL7UKDQxqTp3kIkbAu9sL3QwQ5dC8urI3Ayuh30AoU4ZRweNZUOLANKEXDr
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423570063100886579392602457114390964016206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 09:39:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-11 09:39:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.punxsutawneyspirit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27400549925111660376434224430055125118274054647213929922192927219302566603257817485390143141132923631889706790388690425535248001772752644737066848186976103952333804714776525736759491438590507745207446964965206195658423079849764447184378947436618053444384777832413737016880859412425230347986190557273834771443980641810101919145176499075670248619502824061553402419119092345501204417981749060508322307818065242603048987054741707076732251125508926190567194788692410902190762541611938142196577605066662573100784324489883427136483116373656625572796388656372803776612312018365033377551203236969203175912559508076923722984439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5af7a5a4f8bf8aff77dcf4f96210bd191408a0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayward.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ansonrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baldwin-bulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.barkinganddagenhampost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.becclesandbungayjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buckscountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.calaverasenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonianrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carrollspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.centraloregon.pamplinmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crowrivermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyinterlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.douglasdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eadt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elystandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eufaulaindianjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greenun24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hamhigh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hampshire-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hennesseyclipper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hmbreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hungryhorsenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.idahopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ijn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ivpressonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.janesvillemarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kilburntimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lodinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maconcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.malvern-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mammothtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mcintoshdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midiario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrosepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mydallaspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norfolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northsomersettimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norwichextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.perutribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinkun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portstephensexaminer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.punxsutawneyspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.republicanherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.robesonian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rutland-times.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saltillo360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saukvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.statesmanexaminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunnysidesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.svindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tctimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theameryfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thecomet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeasleyprogress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theforecaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theparisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.townandcountrymagazine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.unioneagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.univisionaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.viannews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wenatcheeworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westhawaiitoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willistonherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windomnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yadkinripple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yakimaherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourchickens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-sj.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-vs.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markham.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.cadillacnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.mrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.muleshoejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.syracusenewtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhomes.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmarket.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-shore-times.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renfrew.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopbirmingham.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.dallasnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.pennlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.syracuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixvalley.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupo-times.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-hutt-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upper-hutt-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185a06a083e0000040300483046022100f76c438a0ac07d182b281909aa1855ada41403e516475323c24dab0f0f7007d8022100eaa8b08c6eb47f484d07b9fd91bc120f475367e9c8a607d695160158aeb16a9e0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185a06a084c0000040300483046022100bcb78f49433f8255664e3f5906df8f86e3902f35da3ddc50e6ec8d973beead3202210080c171a9f96e2c580d57b908b35f2a44097465ab0005ed599cb6502a74e24c90
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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