local.durhamtimes.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:50:5e:af:90:67:86:c7:d5:ec:71:0e:b2:b8:c8:04:e3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.durhamtimes.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:50:5e:af:90:67:86:c7:d5:ec:71:0e:b2:b8:c8:04:e3
Serial Number (int): 293770512529199965449386612345506326119651
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:10:e9:d7:64:f4:07:62:3d:c1:6f:9b:dc:90:35:6f:92:b1:76:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:4a:98:fe:e5:e8:83:41:33:58:86:fd:e0:75:c8:10:e0:08:ef:2c
Fingerprint (sha256): 9c:e1:ab:a4:10:ec:15:77:0c:6f:78:12:db:12:62:89:04:2f:13:16:62:8e:7c:80:0c:71:69:e1:89:95:c7:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.durhamtimes.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.durhamtimes.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

almaguin.northbaynipissing.com
cantonrep.wanderful.ownlocal.com
georgina.yorkregion.com
ghwaynesbororecord.wanderful.ownlocal.com
grandrapidsshopping.mlive.com
handelaars.kw.be
local.alloaadvertiser.com
local.am-news.com
local.banbridgeleader.co.uk
local.bemidjipioneer.com
local.bgdailynews.com
local.bicesteradvertiser.net
local.brainerddispatch.com
local.bridlingtonfreepress.co.uk
local.centralfifetimes.com
local.chronline.com
local.citizen-times.com
local.clydebankpost.co.uk
local.coppercountrynews.com
local.cravenherald.co.uk
local.cumnockchronicle.com
local.dailytelegraph.com.au
local.dailyworld.com
local.daventryexpress.co.uk
local.dissexpress.co.uk
local.dodgeglobe.com
local.dunfermlinepress.com
local.dungogchronicle.com.au
local.dunmowbroadcast.co.uk
local.durhamtimes.co.uk
local.eadt.co.uk
local.edp24.co.uk
local.freep.com
local.fultoncountyexpress.com
local.gainesville.com
local.gazetteseries.co.uk
local.greenocktelegraph.co.uk
local.guymondailyherald.com
local.hannibal.net
local.harboroughmail.co.uk
local.heraldscotland.com
local.hertfordshirelife.co.uk
local.hucknalldispatch.co.uk
local.huntervalleynews.net.au
local.jacksonsun.com
local.lajuntatribunedemocrat.com
local.leaderadvertiser.com
local.lep.co.uk
local.lisburntoday.co.uk
local.malvern-online.com
local.md-times.com
local.mountainstatesman.com
local.muskokaregion.com
local.mycentraljersey.com
local.napavalleyregister.com
local.neshobademocrat.com
local.northwalespioneer.co.uk
local.norwichextra.com
local.nwherald.com
local.ocala.com
local.omakchronicle.com
local.ottawacitizen.com
local.oxfordmail.co.uk
local.portsmouth.co.uk
local.punxsutawneyspirit.com
local.reporternews.com
local.republicanherald.com
local.richmondandtwickenhamtimes.co.uk
local.sitraders.com
local.somersetcountygazette.co.uk
local.starcourier.com
local.starnewsonline.com
local.steubencourier.com
local.stroudnewsandjournal.co.uk
local.sturgisjournal.com
local.svherald.com
local.svindependent.com
local.tennessean.com
local.thebraziltimes.com
local.thedailyjournal.com
local.theherald-news.com
local.theherald.com.au
local.thekansan.com
local.thenewsenterprise.com
local.theresident.co.uk
local.thetimesherald.com
local.vancouversun.com
local.whitchurchherald.co.uk
local.wigantoday.net
local.wimbledonguardian.co.uk
local.windsorstar.com
local.wnypapers.com
local.yorkregion.com
messenger.local.adelaidenow.com.au
mylocal.dailypress.com
mylocal.statesman.com
norwichbulletin.wanderful.ownlocal.com
peterborough.mykawartha.com
quest.local.couriermail.com.au
shopping.oregonlive.com

Other certificates including the domain name durhamtimes.co.uk

(limited to 100 certificates)
durhamtimes.co.uk
adbooker2.newsquest.co.uk
durhamtimes.co.uk
adbooker2.newsquest.co.uk
adbooker2.newsquest.co.uk
adbooker2.newsquest.co.uk
adbooker2.newsquest.co.uk
adbooker2.newsquest.co.uk
durhamtimes.co.uk
durhamtimes.co.uk
adbooker2.newsquest.co.uk
adbooker2.newsquest.co.uk
adbooker2.newsquest.co.uk
durhamtimes.co.uk
adbooker2.newsquest.co.uk
local.durhamtimes.co.uk
adbooker2.newsquest.co.uk
adbooker2.newsquest.co.uk
durhamtimes.co.uk
adbooker2.newsquest.co.uk
durhamtimes.co.uk
durhamtimes.co.uk
durhamtimes.co.uk
durhamtimes.co.uk
adbooker2.newsquest.co.uk
durhamtimes.co.uk
adbooker2.newsquest.co.uk

Certificate

The complete raw certificate details for local.durhamtimes.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL56QvEnK/dNh5BV75Q7
pK50c1nBDybrWiaDBtcRpo9cbH/wQNNRF3ZKby5zk2DFCbsmuM+uF0w7aoJM/pqD
rXi4M69xvExPaC/MAWCBJ6g7Cl2x5EvNbfJJiyhxHMP4IdATIDRu3y2gp/yYqMGL
LlXza2JXGAljRpDlud3GOj0Ntl0hMKJKsEvShMkdWWpws7xfNagCO/4gx2PRivbO
AxUbMzXCNzRuTOf2Hl2qEHC1AuqY3+tToehLQzY37R5dQNZa99paUNVq631Im8V3
flE5IjXXfGw0FzKp+jOYAnbwowJGa/cA5dMM5bB/mYzZQc6GUBcFFxNMphK/ohln
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293770512529199965449386612345506326119651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 19:41:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 19:41:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.durhamtimes.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20292056791961460507892540257924669345847574424276884920904270641700471450706632191358896397931298225344081330830836070003232561625397020802096765633276543079506737909375646790057942017499463537732334786040827140126020723107546891091255128268748156172011623402853522016065422512050577482986188461918972865734062290360884586261327722892513379355744940978818657142929878356077281224634808633807127852640589311265828381481912397695427019328920852722473318400435126538460276819887092340041980407356880484458400642938808510635065821518857700337425483603230136393410703620104082212227923178907631640055267161086794839713721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6210e9d764f407623dc16f9bdc90356f92b1768a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2654 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almaguin.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantonrep.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgina.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghwaynesbororecord.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandrapidsshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.alloaadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.am-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.banbridgeleader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bgdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bicesteradvertiser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bridlingtonfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.centralfifetimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.citizen-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clydebankpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coppercountrynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cravenherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cumnockchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailytelegraph.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.daventryexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dissexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dodgeglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dunfermlinepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dungogchronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dunmowbroadcast.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.durhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eadt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edp24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.freep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fultoncountyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gainesville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gazetteseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greenocktelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guymondailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hannibal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.harboroughmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldscotland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hucknalldispatch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jacksonsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lajuntatribunedemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lisburntoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.malvern-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.md-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mountainstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mycentraljersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.napavalleyregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.neshobademocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northwalespioneer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norwichextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ocala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.omakchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ottawacitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oxfordmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portsmouth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.punxsutawneyspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.reporternews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.republicanherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.richmondandtwickenhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sitraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.somersetcountygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.starcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.starnewsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.steubencourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stroudnewsandjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sturgisjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.svherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.svindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tennessean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thebraziltimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedailyjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theherald-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theherald.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thekansan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thenewsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theresident.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thetimesherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vancouversun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whitchurchherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wigantoday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wimbledonguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windsorstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wnypapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger.local.adelaidenow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.statesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwichbulletin.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterborough.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quest.local.couriermail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.oregonlive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165b5c45cbe000004030047304502210090b9526ac1fee760b5081c1f8b5eb34fab389e6a1f7a9236b2d78c0dedfd95d102205be4b8ed8e0ab95b4bbf720d2016c616c842c2d9b2de3194005de70ad6ed918d007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165b5c45cc00000040300473045022013dfc3736493ac043f0259748e500b80988c9b49de15887f2649f42f24178317022100c6e78f4249be85eb78e8b40466c7c82f0df644a27a32fc3888a52e15082656ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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