local.ftimes.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1c:0d:b7:2a:94:6d:81:22:84:47:6b:48:d8:57:3a:56:69 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.ftimes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1c:0d:b7:2a:94:6d:81:22:84:47:6b:48:d8:57:3a:56:69
Serial Number (int): 357995281018718440729256971182506459682409
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:8a:f4:5c:f1:c3:48:5c:7d:7c:a1:bd:fb:fa:42:b6:bc:07:ed:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:63:c1:a8:0a:9f:d5:d2:73:85:46:7d:53:08:9a:12:d9:b9:b1:78
Fingerprint (sha256): ac:1b:93:26:c5:bf:a5:12:1f:9e:ea:fa:68:77:75:bb:a5:9f:63:f1:08:e1:ff:07:e1:21:57:54:90:14:fa:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.ftimes.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.ftimes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

almaguin.northbaynipissing.com
barrie.simcoe.com
connect.laclabichepost.com
eastgwillimbury.yorkregion.com
gravenhurst.muskokaregion.com
huntsville.muskokaregion.com
kawarthalakes.mykawartha.com
kg.local.kentonline.co.uk
king.yorkregion.com
km.local.kentonline.co.uk
local.abqjournal.com
local.alicetx.com
local.americanpress.com
local.anchoragepress.com
local.angliaafloat.co.uk
local.becclesandbungayjournal.co.uk
local.bentoncourier.com
local.berwickshirenews.co.uk
local.bgdailynews.com
local.cambridgetimes.ca
local.cantondailyledger.com
local.capjournal.com
local.carlukegazette.co.uk
local.carrickfergustimes.co.uk
local.chieftain.com
local.chroniclejournal.com
local.devonlife.co.uk
local.doncasterfreepress.co.uk
local.duluthnewstribune.com
local.farmingtonindependent.com
local.fifetoday.co.uk
local.fleetwoodtoday.co.uk
local.ftimes.com
local.gainsboroughstandard.co.uk
local.gastongazette.com
local.gjsentinel.com
local.greeleytribune.com
local.greenun24.co.uk
local.hawick-news.co.uk
local.heraldtribune.com
local.horncastlenews.co.uk
local.idahocountyfreepress.com
local.inyoregister.com
local.journaldemocrat.com
local.kinston.com
local.lep.co.uk
local.littlehamptongazette.co.uk
local.lubbockonline.com
local.luskherald.com
local.lynnnews.co.uk
local.maidenhead-advertiser.co.uk
local.malvern-online.com
local.meltontimes.co.uk
local.mendotareporter.com
local.milngavieherald.co.uk
local.mississauga.com
local.montrosepress.com
local.morleyobserver.co.uk
local.muskokaregion.com
local.mykawartha.com
local.newsherald.com
local.newspressnow.com
local.northbaynipissing.com
local.northumberlandnews.com
local.parrysound.com
local.perutribune.com
local.poconorecord.com
local.redfieldpress.com
local.sheffieldtelegraph.co.uk
local.sleepyeyenews.com
local.sooeveningnews.com
local.southasianfocus.com
local.southcoasttoday.com
local.stjamesnews.com
local.surreylife.co.uk
local.tahoedailytribune.com
local.the-dispatch.com
local.the-review.com
local.thechronicleherald.ca
local.theeveningleader.com
local.thenewsenterprise.com
local.therecord.com
local.times-online.com
local.tmnews.com
local.toronto.cjnews.com
local.tuscaloosanews.com
local.uticaod.com
local.vancouversun.com
local.wahpetondailynews.com
local.wattonandswaffhamtimes.co.uk
local.wellingtondailynews.com
local.worksopguardian.co.uk
local.yorkregion.com
local.yorkshirelife.co.uk
marketplace-tb.tj.news
mylocal.palmbeachpost.com
portperry.durhamregion.com
renfrew.insideottawavalley.com
saginawshopping.mlive.com
waynesvilledaily.wanderful.ownlocal.com

Other certificates including the domain name ftimes.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for local.ftimes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKw3PfMeYZdgCL8ACAc5
DDSIU0PoZgr5owImVYVly5CxSNtfQLkZIUwdaE1qp2LkFbQ1IxQ6MOe8DvEbvWtG
pi93oBg43zxmZclNkO9HRru+PbeCN/oOFQ6jH9aXARMr8zqGdNT/RjZLP173d7Gr
XCaFrOdL948U+ENttbPh96DuHb7Tn+/bEQYSoZ8pP3nGwD9H7k0Io54ElJYjb1Zd
ED/LJwzfjMAXcGkuAXRetUmhHLWVox6ULcYX4F/0Id82MDIfhnCWONTM6sWHqeVr
qpUW6onHe3AsfEqpo7YCL6PiyO2uWPooTyEB5LCHtkhavvd18ujtVCGvtV/wT1s8
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357995281018718440729256971182506459682409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 15:42:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 15:42:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.ftimes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23817724104303309665553258419489423225395702311965201482466547515794232522008986633088021664941767393104823673611528826324584446053789816307507486971349622639365933566359641346365821193675200974593142424143556870459982917900604791782917932603141238773289191390025099787288892172316994305999963172355242106450681102116511188840349824718076852343133163088317209997012007464505334525692859454291042122524242617517938850381252923388783675248828249689126088890097878330330737024182694406874946218202449299944509132825212528892494291403046707098067181000382146171872343675950496003071741700477741921434309444023266091678747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							058af45cf1c3485c7d7ca1bdfbfa42b6bc07ed1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2635 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almaguin.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrie.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.laclabichepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastgwillimbury.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravenhurst.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntsville.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawarthalakes.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kg.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'king.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'km.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.abqjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.alicetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.americanpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.anchoragepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.angliaafloat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.becclesandbungayjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bentoncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.berwickshirenews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bgdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cambridgetimes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cantondailyledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.capjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carlukegazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carrickfergustimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chieftain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chroniclejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.devonlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.doncasterfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.farmingtonindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fifetoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fleetwoodtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ftimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gainsboroughstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gastongazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gjsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greeleytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greenun24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hawick-news.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldtribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.horncastlenews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.idahocountyfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inyoregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.journaldemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kinston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.littlehamptongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lubbockonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.luskherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lynnnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maidenhead-advertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.malvern-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.meltontimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mendotareporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.milngavieherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mississauga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrosepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.morleyobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newspressnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northumberlandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.perutribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.poconorecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.redfieldpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sheffieldtelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sleepyeyenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sooeveningnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southasianfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southcoasttoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stjamesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.surreylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tahoedailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the-dispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thechronicleherald.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeveningleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thenewsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.therecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tmnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.toronto.cjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tuscaloosanews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.uticaod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vancouversun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wattonandswaffhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wellingtondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.worksopguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-tb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.palmbeachpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portperry.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renfrew.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saginawshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waynesvilledaily.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016abc5fb61600000403004630440220774475d2696e2a1645ce518e8ca7f10782cbb67bde381a9768356fb9e1105ca402203ba0b4efc87b0e0eab926496cd24d0fc849320ed59281c7481fc35c46723b35f007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016abc5fb6020000040300483046022100df8e191fb1e46903c8bb23399e780b144d70d3b6ab9277d6151abfd8d1a05c49022100b9f33bb2462cbc0e1097dfc04dfa84ffb03969b84c97a1736502352f8d261529
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ab40834026be08825c6cc2c6b04c77730c84191936d294ef48ef8922ee8b8eb3832bbb05261e24c66e49239e174011950386670ad82681904d67b78dcc866f242ec48e88bbb67036705e20740ceff0c5550608537b248317c24c756b506f83a5d95543d0593e1664f762a9e937777a2b15448a6791cca1146cb20cd71ba5e79b391e32401516234772fb3f166e925f84fcc1165f21a0bf6f2529639a1e56bf39d2099f1c51259b18859c506c0a85acacfd91a0a0cef4acfcb64164ddc241e8a115184815e7fb12a0903ff64a10d87be04e908a1e6bf789aa0d908def484a54daa2ef04f07411bcd31e5db3bc34ae6f9d912189a01bf485b7a5b02621f9171e8