*.forum.cue.cloud

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:32:e1:76:e5:51:91:e3:0a:a9:34:b7:7a:79:35:b6:5d was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.forum.cue.cloud

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:32:e1:76:e5:51:91:e3:0a:a9:34:b7:7a:79:35:b6:5d
Serial Number (int): 326058139588334291226651351664790699619933
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:6a:fc:38:05:e3:4e:8a:9a:96:f4:8a:4f:d0:78:87:74:0b:10:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:54:ee:00:6f:25:c7:18:3f:85:55:af:91:eb:cc:a5:cb:15:9f:fd
Fingerprint (sha256): 9b:8a:d6:0b:7a:a7:0d:19:3f:4c:2a:b6:02:ba:56:c8:48:f1:da:42:da:aa:50:02:3b:9b:8c:7d:3a:38:3b:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.forum.cue.cloud

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.forum.cue.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.forum.cue.cloud
agweek.com
bemidjipioneer.com
brainerddispatch.com
dglobe.com
dl-online.com
duluthnewstribune.com
echopress.com
fccnn.com
grandforksherald.com
inforum.com
jamestownsun.com
lcnewschronicle.com
mitchellrepublic.com
parkrapidsenterprise.com
perhamfocus.com
pineandlakes.com
pinejournal.com
postbulletin.com
rivertowns.net
superiortelegram.com
thedickinsonpress.com
theosakisreview.com
therinklive.com
wadenapj.com
wctrib.com
westfargopioneer.com
www.agweek.com
www.agweek.forum.cue.cloud
www.bemidjipioneer.com
www.bisonmediazone.forum.cue.cloud
www.brainerddispatch.com
www.dglobe.com
www.dl-online.com
www.duluthnewstribune.com
www.echopress.com
www.farmingtonindependent.forum.cue.cloud
www.fccnn.com
www.grandforksherald.com
www.hastingsstargazette.forum.cue.cloud
www.hudsonstarobserver.forum.cue.cloud
www.inforum.com
www.jamestownsun.com
www.lcnewschronicle.com
www.mitchellrepublic.com
www.newrichmond-news.forum.cue.cloud
www.parkrapidsenterprise.com
www.perhamfocus.com
www.piercecountyherald.forum.cue.cloud
www.pineandlakes.com
www.pinejournal.com
www.postbulletin.com
www.postbulletin.forum.cue.cloud
www.prairiebusinessmagazine.forum.cue.cloud
www.republican-eagle.forum.cue.cloud
www.riverfallsjournal.forum.cue.cloud
www.rivertowns.net
www.rosemounttownpages.forum.cue.cloud
www.superiortelegram.com
www.swcbulletin.forum.cue.cloud
www.thedickinsonpress.com
www.theosakisreview.com
www.therinklive.com
www.training.forum.cue.cloud
www.wadenapj.com
www.wctrib.com
www.wday.forum.cue.cloud
www.wdaz.forum.cue.cloud
www.westfargopioneer.com
www.woodburybulletin.forum.cue.cloud

Other certificates including the domain name cue.cloud

(limited to 100 certificates)
nexo.cue.cloud
prod.globalblue.cue.cloud
ece-qatest15.cci.cue.cloud
elsoldemexico.test1.oem.cue.cloud
*.forum.cue.cloud
*.rwp.devtest.vrm.cue.cloud
elsoldemexico.com.mx
elsoldemexico.staging.oem.cue.cloud
*.test.madsack.cue.cloud
*.cue.cloud
escenic.cue.cloud
*.bnn.cue.cloud
*.cue.cloud
ece.banjo-vanadium.poc.cue.cloud
*.staging.forum.cue.cloud
elsoldemexico.oem.cue.cloud
*.cue.cloud
ece-stingray.cci.cue.cloud
*.oem.cue.cloud
ece-redspot.cci.cue.cloud
*.oem.cue.cloud
prod-site.vrm.cue.cloud
escenic.cue.cloud
*.staging.forum.cue.cloud
*.forum.cue.cloud
forum.cue.cloud
bnn.de
*.staging.mcc.cue.cloud
*.forum.cue.cloud
*.mcc.cue.cloud
*.bnn.cue.cloud
mediahuis.cue.cloud
dev.pd.cue.cloud
sites.vrm.cue.cloud
elsoldemexico.com.mx
*.cue.cloud
elsoldemexico.oem.cue.cloud
*.cue.cloud
www.elsoldemexico.staging.oem.cue.cloud
*.forum.cue.cloud
belo.cue.cloud
*.oem.cue.cloud
*.forum.cue.cloud
*.cci.cue.cloud
*.test.mcc.cue.cloud
*.oem.cue.cloud
ng-cue-unstable-contentstore.cci.cue.cloud
bnn.de
escenic.cue.cloud
ng-cueways.cci.cue.cloud
*.oem.cue.cloud
katura.pola.cue.cloud
elsoldemexico.staging.oem.cue.cloud
ng-stratus.cci.cue.cloud
*.cue.cloud
diariodelsur.com.mx
nexojornal.com.br
*.cue.cloud
dynatrace-activegate.cci.cue.cloud
um-qa.cci.cue.cloud
devnglb.belo.cue.cloud
img.digital.staging.vrm.cue.cloud
elsoldemexico.com.mx
*.oem.cue.cloud
elsoldemexico.com.mx
cook.staging.borsen.cue.cloud
nexojornal.com.br
*.cue.cloud
*.staging.forum.cue.cloud
img.digital.vrm.cue.cloud
nglb.hearst.cue.cloud
*.bnn.cue.cloud
*.forum.cue.cloud
escenic.cue.cloud
*.staging.forum.cue.cloud
*.staging.oem.cue.cloud
ng-fuji.cci.cue.cloud
*.cue.cloud
stagnglb.hearst.cue.cloud
elsoldemexico.test1.oem.cue.cloud
*.oem.cue.cloud
*.dynatrace.cci.cue.cloud
staging.pd.cue.cloud
elsoldemexico.com.mx
secure.test.globalblue.cue.cloud
*.staging.forum.cue.cloud
monitorlb.belo.cue.cloud
www.noticiasvespertinas.staging.oem.cue.cloud
nglb.belo.cue.cloud
sandbox.service.bnn.de
nexo.cue.cloud
test2.bnn.cue.cloud
*.bnn.cue.cloud
cue-um-unstable-nightly.cci.cue.cloud
prod.globalblue.cue.cloud
elsoldetoluca.staging.oem.cue.cloud
dagen.cue.cloud
*.oem.cue.cloud
*.cue.cloud
*.psus.cue.cloud

Certificate

The complete raw certificate details for *.forum.cue.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL2DCCCsCgAwIBAgISA74y4XblUZHjCqk0t3p5NbZdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDIwNDMwMzdaFw0y
MDA1MzEwNDMwMzdaMBwxGjAYBgNVBAMMESouZm9ydW0uY3VlLmNsb3VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf9TeM329My70DptV8sVlMZusskA
07LOHV4DpezyhxpQ3I2EAERhJZyeUWZ0z+2FnMW6SGOb3tR7f0VlXLZZWGVlVFsJ
nUV6XwRJ5HZKRfrdNacOLVvzXEDmUxiavbuGvJhNoSZdrcHwSy5FnkWQpd68Qrl1
yuPEau5uGk4PkhTDxQugwyghUnAqAOZV1bzWaYCSQqbyFz2c9MXQKyW4EpO1ymgV
f63kszPYAdsHo+oDTEjPgy7wbgCfkDyZxcgiW5qHYL7C3SKj0yNBYdfnzLtN0dtR
cBXxYoAKIPYe0CqTJRd9fpRU48zAfNjrlXyDEFgvlvrVTYayLDdtnU6+/wIDAQAB
o4II5DCCCOAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTkavw4BeNOipqW9IpP0HiH
dAsQvzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMIIGmQYDVR0RBIIGkDCCBoyCESouZm9ydW0uY3VlLmNsb3VkggphZ3dl
ZWsuY29tghJiZW1pZGppcGlvbmVlci5jb22CFGJyYWluZXJkZGlzcGF0Y2guY29t
ggpkZ2xvYmUuY29tgg1kbC1vbmxpbmUuY29tghVkdWx1dGhuZXdzdHJpYnVuZS5j
b22CDWVjaG9wcmVzcy5jb22CCWZjY25uLmNvbYIUZ3JhbmRmb3Jrc2hlcmFsZC5j
b22CC2luZm9ydW0uY29tghBqYW1lc3Rvd25zdW4uY29tghNsY25ld3NjaHJvbmlj
bGUuY29tghRtaXRjaGVsbHJlcHVibGljLmNvbYIYcGFya3JhcGlkc2VudGVycHJp
c2UuY29tgg9wZXJoYW1mb2N1cy5jb22CEHBpbmVhbmRsYWtlcy5jb22CD3BpbmVq
b3VybmFsLmNvbYIQcG9zdGJ1bGxldGluLmNvbYIOcml2ZXJ0b3ducy5uZXSCFHN1
cGVyaW9ydGVsZWdyYW0uY29tghV0aGVkaWNraW5zb25wcmVzcy5jb22CE3RoZW9z
YWtpc3Jldmlldy5jb22CD3RoZXJpbmtsaXZlLmNvbYIMd2FkZW5hcGouY29tggp3
Y3RyaWIuY29tghR3ZXN0ZmFyZ29waW9uZWVyLmNvbYIOd3d3LmFnd2Vlay5jb22C
Gnd3dy5hZ3dlZWsuZm9ydW0uY3VlLmNsb3VkghZ3d3cuYmVtaWRqaXBpb25lZXIu
Y29tgiJ3d3cuYmlzb25tZWRpYXpvbmUuZm9ydW0uY3VlLmNsb3Vkghh3d3cuYnJh
aW5lcmRkaXNwYXRjaC5jb22CDnd3dy5kZ2xvYmUuY29tghF3d3cuZGwtb25saW5l
LmNvbYIZd3d3LmR1bHV0aG5ld3N0cmlidW5lLmNvbYIRd3d3LmVjaG9wcmVzcy5j
b22CKXd3dy5mYXJtaW5ndG9uaW5kZXBlbmRlbnQuZm9ydW0uY3VlLmNsb3Vkgg13
d3cuZmNjbm4uY29tghh3d3cuZ3JhbmRmb3Jrc2hlcmFsZC5jb22CJ3d3dy5oYXN0
aW5nc3N0YXJnYXpldHRlLmZvcnVtLmN1ZS5jbG91ZIImd3d3Lmh1ZHNvbnN0YXJv
YnNlcnZlci5mb3J1bS5jdWUuY2xvdWSCD3d3dy5pbmZvcnVtLmNvbYIUd3d3Lmph
bWVzdG93bnN1bi5jb22CF3d3dy5sY25ld3NjaHJvbmljbGUuY29tghh3d3cubWl0
Y2hlbGxyZXB1YmxpYy5jb22CJHd3dy5uZXdyaWNobW9uZC1uZXdzLmZvcnVtLmN1
ZS5jbG91ZIIcd3d3LnBhcmtyYXBpZHNlbnRlcnByaXNlLmNvbYITd3d3LnBlcmhh
bWZvY3VzLmNvbYImd3d3LnBpZXJjZWNvdW50eWhlcmFsZC5mb3J1bS5jdWUuY2xv
dWSCFHd3dy5waW5lYW5kbGFrZXMuY29tghN3d3cucGluZWpvdXJuYWwuY29tghR3
d3cucG9zdGJ1bGxldGluLmNvbYIgd3d3LnBvc3RidWxsZXRpbi5mb3J1bS5jdWUu
Y2xvdWSCK3d3dy5wcmFpcmllYnVzaW5lc3NtYWdhemluZS5mb3J1bS5jdWUuY2xv
dWSCJHd3dy5yZXB1YmxpY2FuLWVhZ2xlLmZvcnVtLmN1ZS5jbG91ZIIld3d3LnJp
dmVyZmFsbHNqb3VybmFsLmZvcnVtLmN1ZS5jbG91ZIISd3d3LnJpdmVydG93bnMu
bmV0giZ3d3cucm9zZW1vdW50dG93bnBhZ2VzLmZvcnVtLmN1ZS5jbG91ZIIYd3d3
LnN1cGVyaW9ydGVsZWdyYW0uY29tgh93d3cuc3djYnVsbGV0aW4uZm9ydW0uY3Vl
LmNsb3Vkghl3d3cudGhlZGlja2luc29ucHJlc3MuY29tghd3d3cudGhlb3Nha2lz
cmV2aWV3LmNvbYITd3d3LnRoZXJpbmtsaXZlLmNvbYIcd3d3LnRyYWluaW5nLmZv
cnVtLmN1ZS5jbG91ZIIQd3d3LndhZGVuYXBqLmNvbYIOd3d3LndjdHJpYi5jb22C
GHd3dy53ZGF5LmZvcnVtLmN1ZS5jbG91ZIIYd3d3LndkYXouZm9ydW0uY3VlLmNs
b3Vkghh3d3cud2VzdGZhcmdvcGlvbmVlci5jb22CJHd3dy53b29kYnVyeWJ1bGxl
dGluLmZvcnVtLmN1ZS5jbG91ZDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ALIeBcyLos2KIE6HZvkruYolIGdr
2vpw57JJUy3vi5BeAAABcJm5hoIAAAQDAEYwRAIgdgZN1m6DsDLAF5prpVx6kueH
LXeqWgr0jxvvllJJdKQCIGJmPlCLhaC0+eC+7iYCBNzzR+Cn8QPWho+oOnFm8yEZ
AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFwmbmGvQAABAMA
RzBFAiBolA0A5AvDN1sMusM7QZTo3rCjoH3ZgfkCu2Bh9jxRxwIhAOubaT8yHoGz
nq1TfecYFKQeYm2dy8oJxQIJfkE7wFQiMA0GCSqGSIb3DQEBCwUAA4IBAQBbINvA
2j2/MZnnWEnwmvNTIttrpELNgauZw8s4JLHi6zcdJ0CTZ34WKXzp2LYhaTIM5Tog
WfNY6qIZRpgxGu0AD5uxHHzseuCxMylWfQ/xIV/lJgFgwAbxJSuT+qpY1YiyehC8
2/0L7mphk58L2MVK8KqMza2yUEIKAAUVzcllh79DiBuPr6NWeSCmS3yJJYgozrIK
cz4hyqzFOd7tB1N4e2cn5mIIj0JshbW+YHQl5weQIfSVobsfW1taCbNfJhObce30
LnIaFWieeqILfNJyvJXod/bb6jG4gGpOv4uJu+JbqmCpB0YYK+/LNQrQ77MX91YY
LsTu47KwHhtzrMcx
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf9TeM329My70DptV8sV
lMZusskA07LOHV4DpezyhxpQ3I2EAERhJZyeUWZ0z+2FnMW6SGOb3tR7f0VlXLZZ
WGVlVFsJnUV6XwRJ5HZKRfrdNacOLVvzXEDmUxiavbuGvJhNoSZdrcHwSy5FnkWQ
pd68Qrl1yuPEau5uGk4PkhTDxQugwyghUnAqAOZV1bzWaYCSQqbyFz2c9MXQKyW4
EpO1ymgVf63kszPYAdsHo+oDTEjPgy7wbgCfkDyZxcgiW5qHYL7C3SKj0yNBYdfn
zLtN0dtRcBXxYoAKIPYe0CqTJRd9fpRU48zAfNjrlXyDEFgvlvrVTYayLDdtnU6+
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326058139588334291226651351664790699619933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 04:30:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 04:30:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.forum.cue.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24994852052105664207043838276528748199947967994367582832717683048490772112072913775789736867641116638348926576694148837443261622445091816777132624971409846760429234545969999684571983634816176149113025994229860587481931625834029005908052409555137414879537166869611114691480431380943356393410222537504469672183949565245317055997178412391912814888750437441667116743785748468351982479001971580778690617644214182048796977214959012287689742107491750476663479003579574285053572379896797597583202400621876660734701949325871297721285463165500123475771509400333268691151187038995591303674624947681348002335426444875331837804287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e46afc3805e34e8a9a96f48a4fd07887740b10bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1680 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcnewschronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertowns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theosakisreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therinklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westfargopioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agweek.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bisonmediazone.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmingtonindependent.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fccnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsstargazette.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsonstarobserver.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcnewschronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newrichmond-news.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piercecountyherald.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postbulletin.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiebusinessmagazine.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.republican-eagle.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverfallsjournal.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertowns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosemounttownpages.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swcbulletin.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theosakisreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therinklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.training.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wday.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdaz.forum.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westfargopioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodburybulletin.forum.cue.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017099b986820000040300463044022076064dd66e83b032c0179a6ba55c7a92e7872d77aa5a0af48f1bef96524974a4022062663e508b85a0b4f9e0beee260204dcf347e0a7f103d6868fa83a7166f321190076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017099b986bd0000040300473045022068940d00e40bc3375b0cbac33b4194e8deb0a3a07dd981f902bb6061f63c51c7022100eb9b693f321e81b39ead537de71814a41e626d9dcbca09c502097e413bc05422
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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