local.cambstimes.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:75:38:f9:1a:76:0c:b2:35:4f:04:52:73:83:a5:83:cd:f3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.cambstimes.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:75:38:f9:1a:76:0c:b2:35:4f:04:52:73:83:a5:83:cd:f3
Serial Number (int): 388337910843168019404955942584341466697203
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 54:53:c7:80:99:2f:d0:a3:ca:80:7f:bf:dc:38:7d:9e:75:81:d2:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:ae:bb:af:08:5b:94:08:91:ba:13:f2:f4:03:9e:63:7c:00:da:fd
Fingerprint (sha256): ad:99:c7:14:13:fc:53:d8:c6:3f:86:8c:bb:ad:0e:60:bb:b3:05:18:26:ef:b1:1c:09:71:13:03:30:f6:bb:ac

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.cambstimes.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.cambstimes.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajax.durhamregion.com
bloorwestyork.toronto.com
bracebridge.muskokaregion.com
brighton.northumberlandnews.com
brock.mykawartha.com
eastern-courier.origami.neighbourly.co.nz
grandrapidsshopping.mlive.com
local.101corpuschristi.com
local.agweek.com
local.angliaafloat.co.uk
local.ansonrecord.com
local.argusobserver.com
local.baldwin-bulletin.com
local.bournelocal.co.uk
local.brainerddispatch.com
local.cambstimes.co.uk
local.cityweekly.net
local.coastalscene24.co.uk
local.cornwalllife.co.uk
local.countystar.com
local.daily-chronicle.com
local.diariolasamericas.com
local.duluthnewstribune.com
local.dungogchronicle.com.au
local.eadt.co.uk
local.eufaulaindianjournal.com
local.eveningnews24.co.uk
local.fauquier.com
local.fergusfallsjournal.com
local.grandforksherald.com
local.gravesendreporter.co.uk
local.hertfordshirelife.co.uk
local.idahostatejournal.com
local.inyoregister.com
local.jamestownsun.com
local.janesvillemarketplace.com
local.lakesmail.com.au
local.leaderadvertiser.com
local.lebanondemocrat.com
local.madisoncourier.com
local.medicinehatnews.com
local.millelacsmessenger.com
local.minstercommunitypost.com
local.montrosepress.com
local.moraminn.com
local.myheraldreview.com
local.myrecordjournal.com
local.news-banner.com
local.northsomersettimes.co.uk
local.nwherald.com
local.osceolasun.com
local.perutribune.com
local.psdispatch.com
local.punxsutawneyspirit.com
local.ricentral.com
local.royston-crow.co.uk
local.ssnewstelegram.com
local.stamfordmercury.co.uk
local.steamboatpilot.com
local.sudburymercury.co.uk
local.superiortelegram.com
local.svindependent.com
local.theabingtonjournal.com
local.thedickinsonpress.com
local.theparisnews.com
local.theresident.co.uk
local.theshaunavonstandard.com
local.times-journal.com
local.unioneagle.com
local.vanguardia.com.mx
local.vp-mi.com
local.wadenapj.com
local.wapakdailynews.com
local.westhawaiitoday.com
local.whtimes.co.uk
local.willistonherald.com
local.wnypapers.com
local.yadkinripple.com
marketplace-tb.tj.news
marketplace-wb.tj.news
marlborough-midweek.origami.neighbourly.co.nz
midland.simcoe.com
mylocal.baltimoresun.com
mylocal.chicagotribune.com
mylocal.indulge.mcall.com
newhomes.yorkregion.com
north-shore-times.origami.neighbourly.co.nz
origamiwahpeton.wahpetondailynews.com
orillia.simcoe.com
papakura-courier.origami.neighbourly.co.nz
parrysoundbeacon.parrysound.com
richmondhill.yorkregion.com
shopping.masslive.com
shopping.silive.com
smithsfalls.insideottawavalley.com
south-waikato-news.origami.neighbourly.co.nz
stouffville.yorkregion.com
thornhill.yorkregion.com
upper-hutt-leader.origami.neighbourly.co.nz
whangarei-leader.origami.neighbourly.co.nz

Other certificates including the domain name cambstimes.co.uk

(limited to 100 certificates)
*.barkinganddagenhampost.co.uk
*.airgunshooting.co.uk
local.theameryfreepress.com
local.thefirsthundredmiles.com
local.crestonnews.com
cambstimes.co.uk
local.mexicoledger.com
*.barkinganddagenhampost.co.uk
*.advertiser24.co.uk
local.ripongazette.co.uk
*.airgunshooting.co.uk
a02342.alloaadvertiser.com
the-nelson-leader.origami.neighbourly.co.nz
cambstimes.co.uk
*.barkinganddagenhampost.co.uk
local.willcoxrangenews.com
local.ottawasun.com
*.barkinganddagenhampost.co.uk
local.sachem.ca
*.barkinganddagenhampost.co.uk
local.brookingsregister.com
local.cambstimes.co.uk
whangarei-leader.origami.neighbourly.co.nz
local.moodycountyenterprise.com
local.thefirsthundredmiles.com
local.guymondailyherald.com
*.airgunshooting.co.uk
whangarei-leader.origami.neighbourly.co.nz
cambstimes.co.uk
*.barkinganddagenhampost.co.uk
*.airgunshooting.co.uk
a02342.alloaadvertiser.com
directory.cambstimes.co.uk
local.gettysburgtimes.com
muskegonshopping.mlive.com
mm.local.kentonline.co.uk
*.airgunshooting.co.uk
local.thegazette.com
muskokan.muskokaregion.com
*.advertiser24.co.uk
*.advertiser24.co.uk
local.topsailadvertiser.com
mylocal.journal-news.com
hugo.presspubs.com
local.ijn.com
local.eastlondonadvertiser.co.uk
*.airgunshooting.co.uk
local.toronto.cjnews.com
local.theameryfreepress.com
*.advertiser24.co.uk
*.barkinganddagenhampost.co.uk
the-nelson-leader.origami.neighbourly.co.nz
local.eastlondonadvertiser.co.uk
*.barkinganddagenhampost.co.uk
*.barkinganddagenhampost.co.uk
consent.agriculturaltrader.co.uk
consent.cambstimes.co.uk
local.observer-reporter.com
hugo.presspubs.com
cambstimes.co.uk
*.completefrance.com
consent.cambstimes.co.uk
a02342.alloaadvertiser.com
local.cambstimes.co.uk
*.airgunshooting.co.uk
local.madisoncourier.com
cambstimes.co.uk
cambstimes.co.uk
*.airgunshooting.co.uk
marketplace-ml.tj.news
*.airgunshooting.co.uk
consent.cambstimes.co.uk
*.airgunshooting.co.uk
*.airgunshooting.co.uk
*.barkinganddagenhampost.co.uk
*.advertiser24.co.uk
local.fauquier.com
matamata-chronicle.origami.neighbourly.co.nz
*.airgunshooting.co.uk
consent.cambstimes.co.uk
*.barkinganddagenhampost.co.uk
consent.cambstimes.co.uk
consent.cambstimes.co.uk
*.barkinganddagenhampost.co.uk
consent.cambstimes.co.uk
local.fenlandcitizen.co.uk
local.mywebtimes.com
marketplace-ml.tj.news
local.columbiatribune.com
*.barkinganddagenhampost.co.uk
local.yakimaherald.com
local.news-banner.com
*.airgunshooting.co.uk
*.airgunshooting.co.uk
flintshopping.mlive.com
flintshopping.mlive.com
flintshopping.mlive.com
a02342.alloaadvertiser.com
a02342.alloaadvertiser.com
*.barkinganddagenhampost.co.uk

Certificate

The complete raw certificate details for local.cambstimes.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkO55IcP9txHFAXQKZP4
7PHBXD8eOHlPX23AYdhLAL3iNWE1lukFrpDCoUE6W6XuT5q0TFjWfpeRCzDNK0Xy
B9eLvB9P76HL6joAtdqqqjPHgxKkr+KEo9Oy+2tCKIqZgzv+eYisOTPuxp2PGgDP
IpCuLgrYjUz0ZnDa7OzDRMIVIiw+yyc7BgYPSucsdGyYinqdTvo5eR5sLryeZ0lj
7iA+e5QJEpDOEdTJ7VVWqLERSeZffK8stlCAXvkaamo9a8JMNaRVDnox6oaH4Y9I
haoKs1tZXqVl/qkmZvZe50uQ2KS7IDtX51ikfCz53Jr0x1Z+bAXWNjrdpBkW8L1E
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388337910843168019404955942584341466697203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-09 09:54:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-07 09:54:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.cambstimes.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23008768509809454155579362441263516594283428009105453721607593800380227397076825838086523558518845679212401820341855650666664348058717201879828398093058979526670188923323009157977673867472435087994854139021856937881179918630610325935194318981944573782813597285600443363894620831829182822246465912723143476909996972165161086135371092152186776234401868850148521042814374364417590299856951586657425150245901254410738726175629006896331208799969503742735976015541081525925419829607693005704053975192703253540310979139408917008789955657262650959349794205605602032782310299472428258817880468425742551722433473917552244376741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5453c780992fd0a3ca807fbfdc387d9e7581d234
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2747 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloorwestyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighton.northumberlandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brock.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastern-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandrapidsshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.101corpuschristi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.angliaafloat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ansonrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.argusobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baldwin-bulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bournelocal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cambstimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cityweekly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coastalscene24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cornwalllife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.daily-chronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.diariolasamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dungogchronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eadt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eufaulaindianjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fauquier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fergusfallsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gravesendreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.idahostatejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inyoregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.janesvillemarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lakesmail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lebanondemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.madisoncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.medicinehatnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.millelacsmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.minstercommunitypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrosepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moraminn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myheraldreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myrecordjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-banner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northsomersettimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.perutribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.psdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.punxsutawneyspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ricentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.royston-crow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ssnewstelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stamfordmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.steamboatpilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sudburymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.svindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theabingtonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theparisnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theresident.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theshaunavonstandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.unioneagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vanguardia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vp-mi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wapakdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westhawaiitoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willistonherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wnypapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yadkinripple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-tb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-wb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midland.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.indulge.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhomes.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-shore-times.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origamiwahpeton.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orillia.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakura-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundbeacon.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.masslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.silive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithsfalls.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south-waikato-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stouffville.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thornhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upper-hutt-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangarei-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181e29858a2000004030047304502200d41a9218a98a61a40e27190042bde3aef4a53d96d9bcb7127c474f4c2dfb8f7022100f2e867ac91f8c210a5c187b7a59be0dc88c97eea156f99af35ba9ba770382f9f00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181e29858ed000004030047304502200b6b12ac55182a3d83ced208e66e2b9655bc845d1821541943efe6e7d3d91f830221008982a2641eccb7e46d973723d3920c06eacc2545926401b0a050a57fdf4b37c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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