local.sentinelsource.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:44:97:a1:df:c5:32:36:4e:70:f6:90:b8:28:1e:c6:7f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.sentinelsource.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:44:97:a1:df:c5:32:36:4e:70:f6:90:b8:28:1e:c6:7f
Serial Number (int): 326081682333994916714522688118751324194431
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:4d:88:9c:d7:50:04:28:0d:e4:72:18:50:ca:a5:51:35:03:c4:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:0b:4c:dd:34:3a:f0:46:e4:76:f5:b7:c6:db:31:84:83:f7:87:35
Fingerprint (sha256): a4:83:ea:c1:ea:5c:46:14:b3:06:e3:ca:84:86:bd:e2:a6:be:ed:00:af:12:47:32:c3:ce:f0:c2:28:8c:f1:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.sentinelsource.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.sentinelsource.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajax.durhamregion.com
annarborshopping.mlive.com
gm.local.kentonline.co.uk
king.yorkregion.com
leader.local.heraldsun.com.au
listowel.southwesternontario.ca
local.anchoragepress.com
local.athabascaadvocate.com
local.barkinganddagenhampost.co.uk
local.bexleytimes.co.uk
local.biggleswadetoday.co.uk
local.blackpoolgazette.co.uk
local.brighouseecho.co.uk
local.buckinghamtoday.co.uk
local.calgaryherald.com
local.capjournal.com
local.chorley-guardian.co.uk
local.chroniclejournal.com
local.citizensvoice.com
local.clevelandcountyherald.com
local.completefrance.com
local.crestviewbulletin.com
local.deesidepiper.co.uk
local.devon24.co.uk
local.dispatch.com
local.duluthnewstribune.com
local.eastbayri.com
local.echopress.com
local.ellontimes.co.uk
local.exmouthjournal.co.uk
local.flamboroughreview.com
local.galesburg.com
local.gallowaygazette.co.uk
local.gazette.com
local.indeonline.com
local.innisfailprovince.ca
local.insidebiz.com
local.inwhitleycounty.com
local.kelownadailycourier.ca
local.lancashirelife.co.uk
local.linlithgowgazette.co.uk
local.livingedge.co.uk
local.lynnnews.co.uk
local.lythamstannesexpress.co.uk
local.marketrasenmail.co.uk
local.mexicoledger.com
local.milngavieherald.co.uk
local.miltonkeynes.co.uk
local.minstercommunitypost.com
local.monroenews.com
local.montrealgazette.com
local.moodycountyenterprise.com
local.northamptonchron.co.uk
local.northbaynipissing.com
local.northnorfolknews24.co.uk
local.ocala.com
local.oldsalbertan.ca
local.pendletoday.co.uk
local.recordonline.com
local.reporter-times.com
local.ridgecrestca.com
local.rochellenews-leader.com
local.sandmountainreporter.com
local.saukvalley.com
local.sentinelsource.com
local.silverbelt.com
local.siskiyoudaily.com
local.skegnessstandard.co.uk
local.sooeveningnews.com
local.sudburymercury.co.uk
local.surreylife.co.uk
local.sussexexpress.co.uk
local.svherald.com
local.tctimes.com
local.thegardenisland.com
local.theintell.com
local.thepilotnews.com
local.thespec.com
local.thesuburbanite.com
local.timesreporter.com
local.todmordennews.co.uk
local.tonicanews.com
local.travelnewmex.com
local.tyronetimes.co.uk
local.uticaod.com
local.vaildaily.com
local.vp-mi.com
local.wakefieldexpress.co.uk
local.waterloochronicle.ca
local.whitbygazette.co.uk
local.yorkshirelife.co.uk
marketplace-nl.tj.news
marketplace-sj.tj.news
metrowestbostondirectory.wickedlocal.com
midland.simcoe.com
minto.southwesternontario.ca
pekintimes.wanderful.ownlocal.com
shophuntsville.al.com
shopping.westsidenewsny.com
smithsfalls.insideottawavalley.com

Other certificates including the domain name sentinelsource.com

(limited to 100 certificates)
sentinelsource.com
sentinelsource.com
local.theameryfreepress.com
local.bensonnews-sun.com
sentinelsource.com
sentinelsource.com
peterborough.mykawartha.com
local.southwesternontario.ca
sentinelsource.com
sentinelsource.com
sentinelsource.com
georgina.yorkregion.com
admin.adforge.com
local.banbridgeleader.co.uk
sentinelsource.com
sentinelsource.com
sentinelsource.com
local.militarynews.com
sentinelsource.com
sentinelsource.com
sentinelsource.com
local.guymondailyherald.com
local.dglobe.com
sentinelsource.com
peterborough.mykawartha.com
sentinelsource.com
sentinelsource.com
kawarthalakes.mykawartha.com
sentinelsource.com
local.suffolkfreepress.co.uk
sentinelsource.com
local.topsailadvertiser.com
shopping.cleveland.com
local.ijn.com
sentinelsource.com
local.stcatharinesstandard.ca
sentinelsource.com
local.yourokmulgee.com
eastyorkbeach.toronto.com
sentinelsource.com
local.theameryfreepress.com
sentinelsource.com
sentinelsource.com
sentinelsource.com
sentinelsource.com
sentinelsource.com
sentinelsource.com
local.hertsad.co.uk
kg.local.kentonline.co.uk
local.insidebiz.com
mylocal.jacksonville.com
local.sentinelsource.com
sentinelsource.com
sentinelsource.com
local.newsdemocratleader.com
local.janesvillemarketplace.com
local.stcatharinesstandard.ca
sentinelsource.com
sentinelsource.com
local.fauquier.com
matamata-chronicle.origami.neighbourly.co.nz
local.osceolaiowa.com
local.siskiyoudaily.com
sentinelsource.com
shopping.nj.com
sentinelsource.com
local.brainerddispatch.com
sentinelsource.com
local.duluthbudgeteer.com
sentinelsource.com
sentinelsource.com
eastyorkbeach.toronto.com
sentinelsource.com
sentinelsource.com
flintshopping.mlive.com
flintshopping.mlive.com

Certificate

The complete raw certificate details for local.sentinelsource.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VzKFJsznTxq95C9Eju1
v6EpjFjBU6ST+T7kCDgkaj61pCIucKfA0QxY+rAydZVt9pCSTyJBRygBckcniHhX
GzGDzB+f+k0GXwOf1hbwsjhvNRmosbWC4DG7JRB9ZNPtTUzkwKlD7HzlhXodASEE
v9xUqwryWZOQOogfxL+kU4j/E4oD9kyohfoemDSU7ETwfRWpGQwGleVo+5SxIdml
6OvejSfJHBlNfJOlhGIM2vqXXRggaBrACNPsmDSGUTZv5Cb9f+r9SsFyoBC5WuPw
9ZK/F9WOqi66ICoICCk6JTfR5Q+AcSWyGkgEHRCVwH1+vl1brjKXapYop1h+aIZ2
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326081682333994916714522688118751324194431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 03:30:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 03:30:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.sentinelsource.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26934515104887910031698504148124592905638734740845666658517228225020421037144332400164120504221612758657894506670263939762445631986901840882520237423105068718409267527508678511781207066189170296499380039935459609459888412341652775561741211459674118717653409389419360148654388034557513959427719166079898102610520710876162421290884614442027745141860252366798740815389611372158923505520736801716544015264685165635772252699492652847609138196671671493858782883379517504242719535376721508742891999292660747348783641359608314958119768397411624548688751573866335630023305740448439738501243878786760921602204572102400007370323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c4d889cd75004280de4721850caa5513503c45d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2628 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annarborshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'king.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leader.local.heraldsun.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listowel.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.anchoragepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.athabascaadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.barkinganddagenhampost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bexleytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.biggleswadetoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.blackpoolgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brighouseecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buckinghamtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.calgaryherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.capjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chorley-guardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chroniclejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.citizensvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clevelandcountyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.completefrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crestviewbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.deesidepiper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.devon24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastbayri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ellontimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.flamboroughreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.galesburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gallowaygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.indeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.innisfailprovince.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inwhitleycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kelownadailycourier.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lancashirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.linlithgowgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lynnnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lythamstannesexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.marketrasenmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mexicoledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.milngavieherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.miltonkeynes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.minstercommunitypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.monroenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrealgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moodycountyenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northamptonchron.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northnorfolknews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ocala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.oldsalbertan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pendletoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.recordonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.reporter-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ridgecrestca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rochellenews-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sandmountainreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saukvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sentinelsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.silverbelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.siskiyoudaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.skegnessstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sooeveningnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sudburymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.surreylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sussexexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.svherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tctimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thegardenisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theintell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thepilotnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thespec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesuburbanite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.timesreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.todmordennews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tonicanews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.travelnewmex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tyronetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uticaod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vaildaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vp-mi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wakefieldexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.waterloochronicle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whitbygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-nl.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-sj.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrowestbostondirectory.wickedlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midland.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minto.southwesternontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pekintimes.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shophuntsville.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.westsidenewsny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithsfalls.insideottawavalley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016daec839e200000403004830460221009610c96cf9d634f92f29121fc73242a27dd0517c6d12df0f0798042b6e34d443022100f1fe48752a4bc24a58a4ae7161bc5d66e64db4951493cd2ddabed73c47f54a0b007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016daec839ea0000040300483046022100e1e9667530d8e1adb78fcd771609f616371a53a404a6c9d1366e94626330898e022100b54b68ff9c48fb687c5a3efae99fc187ac37eb224893f39f6f2a9cb9bd2e0266
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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