local.lincolncourier.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:48:38:a5:0b:8d:04:2a:ff:0b:ee:78:65:27:55:b8:36:5b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.lincolncourier.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:38:a5:0b:8d:04:2a:ff:0b:ee:78:65:27:55:b8:36:5b
Serial Number (int): 373024767876373135965326796843465861248603
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8c:06:aa:88:25:0f:59:20:cf:d0:00:b5:d0:d2:31:39:88:1b:4a:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:e9:aa:10:05:0f:4d:d1:e3:71:8a:fe:55:32:fd:b8:3d:c3:7c:ef
Fingerprint (sha256): 99:0b:5b:2e:a2:75:b3:47:d8:7e:00:c4:6c:ba:95:cf:06:3d:7d:a9:d5:6c:f5:96:f3:4b:90:c7:9f:4d:66:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.lincolncourier.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.lincolncourier.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bradford.yorkregion.com
connect.stalbertgazette.com
flintshopping.mlive.com
ghwayneindependent.wanderful.ownlocal.com
listowel.southwesternontario.ca
local.adirondackexpress.com
local.bcrnews.com
local.beauregarddailynews.net
local.berksandbucks.greatbritishlife.co.uk
local.brainerddispatch.com
local.bridemagazine.co.uk
local.buxtonadvertiser.co.uk
local.cheshirelife.co.uk
local.cheyenneminuteman.com
local.columbiadailyherald.com
local.courier-tribune.com
local.cranbrookherald.com
local.dailyrecordnews.com
local.doncasterfreepress.co.uk
local.doverpost.com
local.edinburghnews.scotsman.com
local.edmontonjournal.com
local.eveningnews24.co.uk
local.falkirkherald.co.uk
local.fraserburghherald.co.uk
local.goupstate.com
local.h-ponline.com
local.heraldtimesonline.com
local.hertfordshirelife.co.uk
local.hertsad.co.uk
local.hillsdale.net
local.huntspost.co.uk
local.ifallsjournal.com
local.infortwayne.com
local.insidehalton.com
local.inverurieherald.co.uk
local.jcsentinel.com
local.lancasterguardian.co.uk
local.leaderpost.com
local.lincolncourier.com
local.md-times.com
local.midlothianadvertiser.co.uk
local.mississauga.com
local.morningsun.net
local.morrisherald-news.com
local.news-journal.com
local.news-journalonline.com
local.news-sun.com
local.northbaynipissing.com
local.northumberlandgazette.co.uk
local.norwichbulletin.com
local.norwichextra.com
local.nwherald.com
local.ocala.com
local.oglecountylife.com
local.ohio.com
local.osceolaiowa.com
local.ottawacitizen.com
local.pilotonline.com
local.prairiepost.com
local.princewilliamtimes.com
local.redfieldpress.com
local.republican-eagle.com
local.republicanherald.com
local.sheffieldtelegraph.co.uk
local.sj-r.com
local.srpressgazette.com
local.standardspeaker.com
local.stategazette.com
local.steubencourier.com
local.stornowaygazette.co.uk
local.stowmarketmercury.co.uk
local.summitdaily.com
local.surreylife.co.uk
local.tehachapinews.com
local.theforecaster.net
local.thesuburbanite.com
local.tmnews.com
local.topsailadvertiser.com
local.uintacountyherald.com
local.victoriaadvocate.com
local.vvdailypress.com
local.wadenapj.com
local.waxahachietx.com
local.westhawaiitoday.com
local.worksopguardian.co.uk
local.yorkshirepost.co.uk
marketplace-dg.tj.news
mcdonoughvoice.wanderful.ownlocal.com
mylocal.jacksonville.com
mylocal.latimes.com
newmarket.yorkregion.com
oshawa.durhamregion.com
ownlocal.neighbourly.co.nz
parrysoundbeacon.parrysound.com
quest.local.couriermail.com.au
scarborough.toronto.com
shophuntsville.al.com
shopping.cleveland.com
te.local.kentonline.co.uk

Other certificates including the domain name lincolncourier.com

(limited to 100 certificates)
*.usatodaynetwork.com
incapsula.com
lincolncourier.com
lincolncourier.com
incapsula.com
lincolncourier.com
incapsula.com
sli.lincolncourier.com
local.newportnewstimes.com
dispatch.com
local.bridemagazine.co.uk
lincolncourier.com
dispatch.com
incapsula.com
dispatch.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
local.kent-life.co.uk
incapsula.com
dispatch.com
statejournal.wanderful.ownlocal.com
local.lincolncourier.com
incapsula.com
lincolncourier.com
local.lincolncourier.com
lincolncourier.com
incapsula.com
hiring.swtimes.com
*.usatodaynetwork.com
lincolncourier.com
*.usatodaynetwork.com
incapsula.com
lincolncourier.com
incapsula.com
*.usatodaynetwork.com
incapsula.com
incapsula.com
dispatch.com
dispatch.com
hiring.swtimes.com
lincolncourier.com
local.starkvilledailynews.com
*.usatodaynetwork.com
*.usatodaynetwork.com
incapsula.com
incapsula.com
dispatch.com
incapsula.com
incapsula.com
local.lincolncourier.com
local.observer-reporter.com
*.usatodaynetwork.com
incapsula.com
hiring.swtimes.com
dispatch.com
lincolncourier.com
lincolncourier.com
jobs.mediajobboard.com
incapsula.com
dispatch.com
incapsula.com
incapsula.com
jobs.mediajobboard.com
jobs.mediajobboard.com
dispatch.com
lincolncourier.com
lincolncourier.com
jobs.mediajobboard.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
local.wahpetondailynews.com
local.saukvalley.com
dispatch.com
local.perutribune.com
*.usatodaynetwork.com
lincolncourier.com
incapsula.com
incapsula.com
dispatch.com
incapsula.com
*.usatodaynetwork.com
dispatch.com

Certificate

The complete raw certificate details for local.lincolncourier.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPqDCCDpCgAwIBAgISBEg4pQuNBCr/C+54ZSdVuDZbMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTQyMzA3MzBaFw0x
OTEwMTIyMzA3MzBaMCMxITAfBgNVBAMTGGxvY2FsLmxpbmNvbG5jb3VyaWVyLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKELa/f5tjT122abRAh5
N1GvsgyH4cFGoo6GtEQBdfND2bodBnMe34KSGa1V9HBlfR87ocndQ6FfrV6inol3
fOdd8kR/3OYdi/gQyu5+3VpB5V0EgDwD2MVIPKT+n9KTNnK0MCrlcaipeD5AWZOG
OwQyC8OLZh8Ik2/T4/AxHlgFI8o6L5IFBESbdIfKVF8fq492hToE/qe3b7IWjCzI
+cfcp2Bvp8jD56DD1+/t/WZXx5F8ogu7gNzEx5Ux1+lBx11M8Inqeato41XX2gTB
aqAUfEwMDjGar/s7ReQb48lq20MlLTcG5nAb++p3IeMU0xH3qQSAHL1vUER7ytb1
XT0CAwEAAaOCDK0wggypMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUjAaqiCUPWSDP
0AC10NIxOYgbSpUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCCl8GA1UdEQSCClYwggpSghdicmFkZm9yZC55b3JrcmVn
aW9uLmNvbYIbY29ubmVjdC5zdGFsYmVydGdhemV0dGUuY29tghdmbGludHNob3Bw
aW5nLm1saXZlLmNvbYIpZ2h3YXluZWluZGVwZW5kZW50LndhbmRlcmZ1bC5vd25s
b2NhbC5jb22CH2xpc3Rvd2VsLnNvdXRod2VzdGVybm9udGFyaW8uY2GCG2xvY2Fs
LmFkaXJvbmRhY2tleHByZXNzLmNvbYIRbG9jYWwuYmNybmV3cy5jb22CHWxvY2Fs
LmJlYXVyZWdhcmRkYWlseW5ld3MubmV0gipsb2NhbC5iZXJrc2FuZGJ1Y2tzLmdy
ZWF0YnJpdGlzaGxpZmUuY28udWuCGmxvY2FsLmJyYWluZXJkZGlzcGF0Y2guY29t
ghlsb2NhbC5icmlkZW1hZ2F6aW5lLmNvLnVrghxsb2NhbC5idXh0b25hZHZlcnRp
c2VyLmNvLnVrghhsb2NhbC5jaGVzaGlyZWxpZmUuY28udWuCG2xvY2FsLmNoZXll
bm5lbWludXRlbWFuLmNvbYIdbG9jYWwuY29sdW1iaWFkYWlseWhlcmFsZC5jb22C
GWxvY2FsLmNvdXJpZXItdHJpYnVuZS5jb22CGWxvY2FsLmNyYW5icm9va2hlcmFs
ZC5jb22CGWxvY2FsLmRhaWx5cmVjb3JkbmV3cy5jb22CHmxvY2FsLmRvbmNhc3Rl
cmZyZWVwcmVzcy5jby51a4ITbG9jYWwuZG92ZXJwb3N0LmNvbYIgbG9jYWwuZWRp
bmJ1cmdobmV3cy5zY290c21hbi5jb22CGWxvY2FsLmVkbW9udG9uam91cm5hbC5j
b22CGWxvY2FsLmV2ZW5pbmduZXdzMjQuY28udWuCGWxvY2FsLmZhbGtpcmtoZXJh
bGQuY28udWuCHWxvY2FsLmZyYXNlcmJ1cmdoaGVyYWxkLmNvLnVrghNsb2NhbC5n
b3Vwc3RhdGUuY29tghNsb2NhbC5oLXBvbmxpbmUuY29tghtsb2NhbC5oZXJhbGR0
aW1lc29ubGluZS5jb22CHWxvY2FsLmhlcnRmb3Jkc2hpcmVsaWZlLmNvLnVrghNs
b2NhbC5oZXJ0c2FkLmNvLnVrghNsb2NhbC5oaWxsc2RhbGUubmV0ghVsb2NhbC5o
dW50c3Bvc3QuY28udWuCF2xvY2FsLmlmYWxsc2pvdXJuYWwuY29tghVsb2NhbC5p
bmZvcnR3YXluZS5jb22CFmxvY2FsLmluc2lkZWhhbHRvbi5jb22CG2xvY2FsLmlu
dmVydXJpZWhlcmFsZC5jby51a4IUbG9jYWwuamNzZW50aW5lbC5jb22CHWxvY2Fs
LmxhbmNhc3Rlcmd1YXJkaWFuLmNvLnVrghRsb2NhbC5sZWFkZXJwb3N0LmNvbYIY
bG9jYWwubGluY29sbmNvdXJpZXIuY29tghJsb2NhbC5tZC10aW1lcy5jb22CIGxv
Y2FsLm1pZGxvdGhpYW5hZHZlcnRpc2VyLmNvLnVrghVsb2NhbC5taXNzaXNzYXVn
YS5jb22CFGxvY2FsLm1vcm5pbmdzdW4ubmV0ghtsb2NhbC5tb3JyaXNoZXJhbGQt
bmV3cy5jb22CFmxvY2FsLm5ld3Mtam91cm5hbC5jb22CHGxvY2FsLm5ld3Mtam91
cm5hbG9ubGluZS5jb22CEmxvY2FsLm5ld3Mtc3VuLmNvbYIbbG9jYWwubm9ydGhi
YXluaXBpc3NpbmcuY29tgiFsb2NhbC5ub3J0aHVtYmVybGFuZGdhemV0dGUuY28u
dWuCGWxvY2FsLm5vcndpY2hidWxsZXRpbi5jb22CFmxvY2FsLm5vcndpY2hleHRy
YS5jb22CEmxvY2FsLm53aGVyYWxkLmNvbYIPbG9jYWwub2NhbGEuY29tghhsb2Nh
bC5vZ2xlY291bnR5bGlmZS5jb22CDmxvY2FsLm9oaW8uY29tghVsb2NhbC5vc2Nl
b2xhaW93YS5jb22CF2xvY2FsLm90dGF3YWNpdGl6ZW4uY29tghVsb2NhbC5waWxv
dG9ubGluZS5jb22CFWxvY2FsLnByYWlyaWVwb3N0LmNvbYIcbG9jYWwucHJpbmNl
d2lsbGlhbXRpbWVzLmNvbYIXbG9jYWwucmVkZmllbGRwcmVzcy5jb22CGmxvY2Fs
LnJlcHVibGljYW4tZWFnbGUuY29tghpsb2NhbC5yZXB1YmxpY2FuaGVyYWxkLmNv
bYIebG9jYWwuc2hlZmZpZWxkdGVsZWdyYXBoLmNvLnVrgg5sb2NhbC5zai1yLmNv
bYIYbG9jYWwuc3JwcmVzc2dhemV0dGUuY29tghlsb2NhbC5zdGFuZGFyZHNwZWFr
ZXIuY29tghZsb2NhbC5zdGF0ZWdhemV0dGUuY29tghhsb2NhbC5zdGV1YmVuY291
cmllci5jb22CHGxvY2FsLnN0b3Jub3dheWdhemV0dGUuY28udWuCHWxvY2FsLnN0
b3dtYXJrZXRtZXJjdXJ5LmNvLnVrghVsb2NhbC5zdW1taXRkYWlseS5jb22CFmxv
Y2FsLnN1cnJleWxpZmUuY28udWuCF2xvY2FsLnRlaGFjaGFwaW5ld3MuY29tghds
b2NhbC50aGVmb3JlY2FzdGVyLm5ldIIYbG9jYWwudGhlc3VidXJiYW5pdGUuY29t
ghBsb2NhbC50bW5ld3MuY29tghtsb2NhbC50b3BzYWlsYWR2ZXJ0aXNlci5jb22C
G2xvY2FsLnVpbnRhY291bnR5aGVyYWxkLmNvbYIabG9jYWwudmljdG9yaWFhZHZv
Y2F0ZS5jb22CFmxvY2FsLnZ2ZGFpbHlwcmVzcy5jb22CEmxvY2FsLndhZGVuYXBq
LmNvbYIWbG9jYWwud2F4YWhhY2hpZXR4LmNvbYIZbG9jYWwud2VzdGhhd2FpaXRv
ZGF5LmNvbYIbbG9jYWwud29ya3NvcGd1YXJkaWFuLmNvLnVrghlsb2NhbC55b3Jr
c2hpcmVwb3N0LmNvLnVrghZtYXJrZXRwbGFjZS1kZy50ai5uZXdzgiVtY2Rvbm91
Z2h2b2ljZS53YW5kZXJmdWwub3dubG9jYWwuY29tghhteWxvY2FsLmphY2tzb252
aWxsZS5jb22CE215bG9jYWwubGF0aW1lcy5jb22CGG5ld21hcmtldC55b3JrcmVn
aW9uLmNvbYIXb3NoYXdhLmR1cmhhbXJlZ2lvbi5jb22CGm93bmxvY2FsLm5laWdo
Ym91cmx5LmNvLm56gh9wYXJyeXNvdW5kYmVhY29uLnBhcnJ5c291bmQuY29tgh5x
dWVzdC5sb2NhbC5jb3VyaWVybWFpbC5jb20uYXWCF3NjYXJib3JvdWdoLnRvcm9u
dG8uY29tghVzaG9waHVudHN2aWxsZS5hbC5jb22CFnNob3BwaW5nLmNsZXZlbGFu
ZC5jb22CGXRlLmxvY2FsLmtlbnRvbmxpbmUuY28udWswTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwBvU3asMfAx
GdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWvy9LCvAAAEAwBIMEYCIQCRAL6y
DUH3HDE90bNpvD0BJGeYFSfBkDW0Sztby8MlSgIhAIedLFbUMnuAMm1j0lCNhbfO
4IB7EMy0nueht3SeI4CQAHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH
9HgAAAFr8vSwfAAABAMASDBGAiEA4V20vPJ1tg8RVFrJuE0kwycCmxG/3rFes+k+
OqKoi7ICIQDCcQJBVWD26zX641f32LLovhYvZmprMR+zMrWlrMtqIzANBgkqhkiG
9w0BAQsFAAOCAQEAeV+dfZ9mJWGr+XnmMYYdtmDbOwbS/DX6CX47LwX7Xwa7gxzW
GEElI5BeznFJ5tb/c98AIAGmiDnq9worrclVWFQmRJ0DCO4CrainMh2XqZQznnQN
VNyY5fKHuVrwwDndi7s8ZrGjOHe/XnsfLNYTf8TD0cK0VHjYNZ4+KhrPNcDtqtH7
KOxc9J07YR8GpLKSKzzqQTKj0ZcBiaXq5jNvRFmw//n6DczhdDK0zlTSrYH4RSjg
GtNY9x++8XHwwwE+UFbbh8G2JKQ5qCGoGfX5dKmra4EALeFaLYhOgQWODCnQ0oRD
hQvXEBDbLCW/fTOcVLBfyjF6lhlYeiCb1gLWqQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQtr9/m2NPXbZptECHk3
Ua+yDIfhwUaijoa0RAF180PZuh0Gcx7fgpIZrVX0cGV9Hzuhyd1DoV+tXqKeiXd8
513yRH/c5h2L+BDK7n7dWkHlXQSAPAPYxUg8pP6f0pM2crQwKuVxqKl4PkBZk4Y7
BDILw4tmHwiTb9Pj8DEeWAUjyjovkgUERJt0h8pUXx+rj3aFOgT+p7dvshaMLMj5
x9ynYG+nyMPnoMPX7+39ZlfHkXyiC7uA3MTHlTHX6UHHXUzwiep5q2jjVdfaBMFq
oBR8TAwOMZqv+ztF5BvjyWrbQyUtNwbmcBv76nch4xTTEfepBIAcvW9QRHvK1vVd
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373024767876373135965326796843465861248603
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 23:07:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 23:07:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.lincolncourier.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20329999375638053770982408712176660509196658329500846476539144645236424989894096926184988759586840348399309841062357662174189833926013177311910789374373721074594065444752137890381658749019509639211848253059302293926771584089040275778287204470963316570071592115943241312647742923619327827815888862898569613278517890837528549166703923032335298734471615603121673971341132775650054445235549308138458152948850412695332691288029750111203400753630127601261287405694111160939523536576397153842339287238953306034606722634909991490786115435325330180772685739828368331137995390565930823573522803109845214218746243886916968996157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c06aa88250f5920cfd000b5d0d23139881b4a95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradford.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.stalbertgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flintshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghwayneindependent.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listowel.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adirondackexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bcrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.beauregarddailynews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.berksandbucks.greatbritishlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bridemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buxtonadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cheyenneminuteman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.columbiadailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.courier-tribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cranbrookherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyrecordnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.doncasterfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.doverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edinburghnews.scotsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edmontonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.falkirkherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fraserburghherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.goupstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.h-ponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldtimesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hillsdale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntspost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ifallsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.infortwayne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inverurieherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jcsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lancasterguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lincolncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.md-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midlothianadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mississauga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.morningsun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.morrisherald-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-journalonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northumberlandgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norwichbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norwichextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ocala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oglecountylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolaiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ottawacitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.prairiepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.princewilliamtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.redfieldpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.republican-eagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.republicanherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sheffieldtelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sj-r.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.srpressgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.standardspeaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stategazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.steubencourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stornowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stowmarketmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.summitdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.surreylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tehachapinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theforecaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesuburbanite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tmnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.topsailadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uintacountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.victoriaadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vvdailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.waxahachietx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westhawaiitoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.worksopguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkshirepost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-dg.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonoughvoice.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.jacksonville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.latimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmarket.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshawa.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownlocal.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundbeacon.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quest.local.couriermail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarborough.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shophuntsville.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bf2f4b0af00000403004830460221009100beb20d41f71c313dd1b369bc3d012467981527c19035b44b3b5bcbc3254a022100879d2c56d4327b80326d63d2508d85b7cee0807b10ccb49ee7a1b7749e238090007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016bf2f4b07c0000040300483046022100e15db4bcf275b60f11545ac9b84d24c327029b11bfdeb15eb3e93e3aa2a88bb2022100c27102415560f6eb35fae357f7d8b2e8be162f666a6b311fb332b5a5accb6a23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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