legacy.denverpost.com

Issued by WR3

About this certificate

This digital certificate with serial number 3f:aa:9e:bd:1e:0b:9d:2b:12:03:58:b0:e5:ac:7e:17 was issued on by Google Trust Services.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=legacy.denverpost.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3f:aa:9e:bd:1e:0b:9d:2b:12:03:58:b0:e5:ac:7e:17
Serial Number (int): 84627273804539303534378715340017008151
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5a:31:19:bf:10:76:62:e8:2c:a8:38:53:50:43:eb:19:37:d5:93:9e
AuthorityKeyId: c7:81:f5:fd:8e:88:d9:00:3c:4d:63:a2:50:31:24:a0:ce:23:fe:23

Fingerprint (sha1): 58:4d:25:d5:23:45:4d:af:db:42:43:f2:17:ab:2b:67:c5:cc:59:1d
Fingerprint (sha256): 9b:61:86:6d:eb:ce:6f:f4:69:41:14:cc:70:9c:95:66:2e:8f:e2:ec:47:16:c2:53:dd:03:8c:98:9b:49:12:5a

Issuing Certificate URL: http://i.pki.goog/wr3.crt

Revocation information

OCSP Server: http://o.pki.goog/s/wr3/P6o
CRL Distribution Point: http://c.pki.goog/wr3/GjFmsPEDK4s.crl

Check the revocation status for certificate legacy.denverpost.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.denverpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legacy.denverpost.com
mobileobits.advocate-news.com
obituaries.advocate-news.com
mobileobits.gazettes.com
obituaries.gazettes.com
mobileobits.mendocinobeacon.com
obituaries.mendocinobeacon.com
obituaries.nydailynews.com
obits.ocregister.com
obituaries.pilotonline.com
mobileobits.pvnews.com
obituaries.pvnews.com
dailytribune.rememberingmi.us
grandtraverse.rememberingmi.us
macombdaily.rememberingmi.us
morningstarpublishing.rememberingmi.us
sourcenewspapers.rememberingmi.us
theleader.rememberingmi.us
themorningsun.rememberingmi.us
theoaklandpress.rememberingmi.us
voicenews.rememberingmi.us
trentonian.rememberingnj.us
dailyfreeman.rememberingny.us
oneidadispatch.rememberingny.us
saratogian.rememberingny.us
troyrecord.rememberingny.us
morningjournal.rememberingoh.us
news-herald.rememberingoh.us
berksmontnews.rememberingpa.us
buckslocalnews.rememberingpa.us
dailylocal.rememberingpa.us
delconewsnetwork.rememberingpa.us
delcotimes.rememberingpa.us
mainlinemedianews.rememberingpa.us
montgomerynews.rememberingpa.us
phoenixvillenews.rememberingpa.us
pottsmerc.rememberingpa.us
southernchestercountyweeklies.rememberingpa.us
southjerseylocalnews.rememberingpa.us
thereporteronline.rememberingpa.us
timesherald.rememberingpa.us
obituaries.tbrnews.com
membership.mcall.com
chicagomag.com
insidebiz.com
www.insidebiz.com
membership.sun-sentinel.com
membership.orlandosentinel.com
membership.pilotonline.com
membership.dailypress.com
membership.courant.com
membership.nydailynews.com
classified.orlandosentinel.com
membership.baltimoresun.com
membership.capitalgazette.com
membership.chicagotribune.com
openhomes.delmartimes.net
openhomes.lajollalight.com
openhomes.encinitasadvocate.com
openhomes.pomeradonews.com
openhomes.ramonasentinel.com
openhomes.ranchosantafereview.com
myappstest.tribpub.com
statsdigital.com
myapps.tribpub.com
marketplace.baltimoresun.com
askingeric.com
www.askingeric.com
cportal.medianewsgroup.com
cportal-remote.medianewsgroup.com
placeanad.sandiegouniontribune.com
www.statsdigital.com
sdfestivalofbooks.com
www.sdfestivalofbooks.com
placeanad.utcommunitypress.com
utsandiego.com
www.utsandiego.com
ranchosantafereview.com
www.ranchosantafereview.com
pointloma-obmonthly.com
www.pointloma-obmonthly.com
encinitasadvocate.com
www.encinitasadvocate.com
lajollalight.com
www.lajollalight.com
delmartimes.net
www.delmartimes.net
pacificsandiego.com
www.pacificsandiego.com
membership.sandiegouniontribune.com
pbmonthly.net
www.pbmonthly.net

Other certificates including the domain name denverpost.com

(limited to 100 certificates)
cdn-le4.arkadiumhosted.com
myaccount.mercurynews.com
dns-vetting1-jeffg-noah.map.fastly.net
denverpost.com
dns-vetting1m.map.fastly.net
jobs.bayareanewsgroup.com
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
dns-vetting1h.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1j.map.fastly.net
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
jobs.bayareanewsgroup.com
cdn-le4.arkadiumhosted.com
dfm.map.fastly.net
jobs.bayareanewsgroup.com
ads.denverpost.com
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1i.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
legacy.denverpost.com
twp.denverpost.com
dns-vetting1m.map.fastly.net
mylocal.denverpost.com
vpn.medianewsgroup.com
jobs.bayareanewsgroup.com
dfm.map.fastly.net
twp.denverpost.com
test.checkout.mercurynews.com
hiring.wandtv.com
test.myaccount.mercurynews.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
dfm.map.fastly.net
dev.myaccount.mercurynews.com
dns-vetting1m.map.fastly.net
promote.denverpost.com
businessdirectory.denverpost.com
blogs.denverpost.com
twp.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
ads.denverpost.com
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
jobs.bayareanewsgroup.com
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
denverpost.com
dptv.denverpost.com
dns-vetting1a.map.fastly.net
twp.denverpost.com
twp.denverpost.com
dfm.map.fastly.net
dfm.map.fastly.net
dfm.map.fastly.net
hiring.wandtv.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
games.denverpost.com
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
mg2access.mercurynews.com
hiring.wandtv.com
businessdirectory.denverpost.com
ssl.smugmug.com
dns-vetting1a.map.fastly.net
secure.www.denverpost.com
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
uploads.denverpost.com
ssl.smugmug.com

Certificate

The complete raw certificate details for legacy.denverpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ76ZoMH2CNzYancQoLI
HiWe3JxEmX6tGcvQM+KaO2Pz9JwaVbuG241mA/lTlUYm7fpK9lMNYTmNfkze06+g
mV5qsG3UsD4MlBAhO8HNSZuWmYmYt6wiwI8zWaJQL3QuQe8tEsR0lxRj7Ors2a0s
3R65mN5G78s3Nrb4CW4KVd5Sfq/iu9TPGhn/UAeii9F7o5GiUiC8LJtQ5SEkFdjT
liGBhpZ+vuKGQqFo/OH6p+Vyd040yjzw8gYRqlAk/I+zXxJSb+maSxmrwzF6YoY1
vjG75YHSqhPEN8AhMWhX2kPxCABX0Vaj2Cb/ik+Z1FeEmniND6e7gEmpicum5BUR
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84627273804539303534378715340017008151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 23:22:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 00:04:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.denverpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22296336710128310814683962226167634222140426913220219256532541064031607176387535064947586046581098856707523699254128748792337691217626085120113736122503352032143949891175326114884731115654556329984161151905662197504962754734175304907274220442023182859886838131682942825482246188355583475757217447899536297426172091891907858201479338263137553824940544076320394497446199041412943359339027146064195693179555132969272062487088473965562022991673422336609204724824085451897357216935811459544321895707905463015447366904319041731166894122782483016074608213045949258687168022319880725171293936646545197460409491508155164987687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a3119bf107662e82ca838535043eb1937d5939e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c781f5fd8e88d9003c4d63a2503124a0ce23fe23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr3/P6o'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2564 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.advocate-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.advocate-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.gazettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.gazettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.mendocinobeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.mendocinobeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obits.ocregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.pvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytribune.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandtraverse.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macombdaily.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstarpublishing.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcenewspapers.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theleader.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themorningsun.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoaklandpress.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicenews.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trentonian.rememberingnj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyfreeman.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneidadispatch.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogian.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troyrecord.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningjournal.rememberingoh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-herald.rememberingoh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berksmontnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckslocalnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailylocal.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delconewsnetwork.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delcotimes.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlinemedianews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montgomerynews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixvillenews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottsmerc.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernchestercountyweeklies.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southjerseylocalnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereporteronline.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesherald.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.tbrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagomag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.delmartimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.lajollalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.encinitasadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.pomeradonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ramonasentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ranchosantafereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myappstest.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myapps.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askingeric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askingeric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal.medianewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal-remote.medianewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeanad.sandiegouniontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdfestivalofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdfestivalofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeanad.utcommunitypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utsandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utsandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchosantafereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchosantafereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointloma-obmonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointloma-obmonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encinitasadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encinitasadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajollalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lajollalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delmartimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delmartimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificsandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificsandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.sandiegouniontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbmonthly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pbmonthly.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr3/GjFmsPEDK4s.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000190194604e0000004030047304502204f90ea068fb3cf717a9e0da1bd5cce0135458f216a5c374b7fe04cf023cb8c1b0221008cad3b45dd48c091aab596f355e982efd3ceb91d7e6ae048ad7fc2a1130010d30076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca00000190194605030000040300473045022100c998e7e260d0b3e93ca73168af96b19a576b794dd099c93dccd1224a3f87c32f022068f99301295664d988931239e07e597c713df2d730029d785890f3e7be2cfb52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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