legacy.denverpost.com

Issued by WR3

About this certificate

This digital certificate with serial number b8:ab:13:7d:df:15:3e:6c:12:83:b3:3c:51:b3:e6:92 was issued on by Google Trust Services.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=legacy.denverpost.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): b8:ab:13:7d:df:15:3e:6c:12:83:b3:3c:51:b3:e6:92
Serial Number (int): 245466229325577599216235730557860046482
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 08:cd:24:5f:21:fb:7b:27:2d:c5:b4:85:07:4b:93:cf:8c:f7:59:cc
AuthorityKeyId: c7:81:f5:fd:8e:88:d9:00:3c:4d:63:a2:50:31:24:a0:ce:23:fe:23

Fingerprint (sha1): 34:8f:58:4b:22:47:59:7c:51:0b:c0:7c:3a:93:e1:b9:13:26:cd:3a
Fingerprint (sha256): c2:17:56:0b:c2:03:eb:54:ff:68:bd:9b:0f:15:74:e5:3c:ef:30:e6:ac:3c:23:e7:e9:ff:d6:cd:67:6c:71:77

Issuing Certificate URL: http://i.pki.goog/wr3.crt

Revocation information

OCSP Server: http://o.pki.goog/s/wr3/uKs
CRL Distribution Point: http://c.pki.goog/wr3/bgFh02uYsys.crl

Check the revocation status for certificate legacy.denverpost.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.denverpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legacy.denverpost.com
mobileobits.advocate-news.com
obituaries.advocate-news.com
mobileobits.gazettes.com
obituaries.gazettes.com
mobileobits.mendocinobeacon.com
obituaries.mendocinobeacon.com
obituaries.nydailynews.com
obits.ocregister.com
obituaries.pilotonline.com
mobileobits.pvnews.com
obituaries.pvnews.com
dailytribune.rememberingmi.us
grandtraverse.rememberingmi.us
macombdaily.rememberingmi.us
morningstarpublishing.rememberingmi.us
sourcenewspapers.rememberingmi.us
theleader.rememberingmi.us
themorningsun.rememberingmi.us
theoaklandpress.rememberingmi.us
voicenews.rememberingmi.us
trentonian.rememberingnj.us
dailyfreeman.rememberingny.us
oneidadispatch.rememberingny.us
saratogian.rememberingny.us
troyrecord.rememberingny.us
morningjournal.rememberingoh.us
news-herald.rememberingoh.us
berksmontnews.rememberingpa.us
buckslocalnews.rememberingpa.us
dailylocal.rememberingpa.us
delconewsnetwork.rememberingpa.us
delcotimes.rememberingpa.us
mainlinemedianews.rememberingpa.us
montgomerynews.rememberingpa.us
phoenixvillenews.rememberingpa.us
pottsmerc.rememberingpa.us
southernchestercountyweeklies.rememberingpa.us
southjerseylocalnews.rememberingpa.us
thereporteronline.rememberingpa.us
timesherald.rememberingpa.us
obituaries.tbrnews.com
membership.mcall.com
chicagomag.com
insidebiz.com
www.insidebiz.com
membership.sun-sentinel.com
membership.orlandosentinel.com
membership.pilotonline.com
membership.dailypress.com
membership.courant.com
membership.nydailynews.com
classified.orlandosentinel.com
membership.baltimoresun.com
membership.capitalgazette.com
membership.chicagotribune.com
openhomes.delmartimes.net
openhomes.lajollalight.com
openhomes.encinitasadvocate.com
openhomes.pomeradonews.com
openhomes.ramonasentinel.com
openhomes.ranchosantafereview.com
myappstest.tribpub.com
statsdigital.com
myapps.tribpub.com
marketplace.baltimoresun.com
askingeric.com
www.askingeric.com
cportal.medianewsgroup.com
cportal-remote.medianewsgroup.com
placeanad.sandiegouniontribune.com
www.statsdigital.com
sdfestivalofbooks.com
www.sdfestivalofbooks.com
placeanad.utcommunitypress.com
utsandiego.com
www.utsandiego.com
ranchosantafereview.com
www.ranchosantafereview.com
pointloma-obmonthly.com
www.pointloma-obmonthly.com
encinitasadvocate.com
www.encinitasadvocate.com
lajollalight.com
www.lajollalight.com
delmartimes.net
www.delmartimes.net

Other certificates including the domain name denverpost.com

(limited to 100 certificates)
cdn-le4.arkadiumhosted.com
myaccount.mercurynews.com
dns-vetting1-jeffg-noah.map.fastly.net
denverpost.com
dns-vetting1m.map.fastly.net
jobs.bayareanewsgroup.com
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
dns-vetting1h.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1j.map.fastly.net
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
jobs.bayareanewsgroup.com
cdn-le4.arkadiumhosted.com
dfm.map.fastly.net
jobs.bayareanewsgroup.com
ads.denverpost.com
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1i.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
legacy.denverpost.com
twp.denverpost.com
dns-vetting1m.map.fastly.net
mylocal.denverpost.com
vpn.medianewsgroup.com
jobs.bayareanewsgroup.com
dfm.map.fastly.net
twp.denverpost.com
test.checkout.mercurynews.com
hiring.wandtv.com
test.myaccount.mercurynews.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
dfm.map.fastly.net
dev.myaccount.mercurynews.com
dns-vetting1m.map.fastly.net
promote.denverpost.com
businessdirectory.denverpost.com
blogs.denverpost.com
twp.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
ads.denverpost.com
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
jobs.bayareanewsgroup.com
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
denverpost.com
dptv.denverpost.com
dns-vetting1a.map.fastly.net
twp.denverpost.com
twp.denverpost.com
dfm.map.fastly.net
dfm.map.fastly.net
dfm.map.fastly.net
hiring.wandtv.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
games.denverpost.com
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
mg2access.mercurynews.com
hiring.wandtv.com
businessdirectory.denverpost.com
ssl.smugmug.com
dns-vetting1a.map.fastly.net
secure.www.denverpost.com
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
uploads.denverpost.com
ssl.smugmug.com

Certificate

The complete raw certificate details for legacy.denverpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNZGFSelhu/kglqsfrWm
fFqFGNKtL2vMzYVqlEH3MEB4DKcufUYQJmKQLxqphKCjSH3850+YjIsPASAFC+Aw
MkQ9pZFrnXjcsxcMbcX6FJVeBe8TA5lvhUeKtXla2pwN+DvTmd05Ijm+MlYt+B3r
NtSIZt4UhJ/ceu3P0QGaGwYkNLpZB8EZSeOZDwaOppus8oXFWV9uLc6ypb+ECiMV
2uhkRPcRz46axGFBEmsBuq+kVyf3oZ9j9QAcDDjQyf5xnkAoCyv3Pfn6x5JdwCeC
nc945xAHEVA4298jR/3aokTaVsoeLl9kGrJwK9FN8PTX8QFHDIcI/QMmOwRG28gx
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 245466229325577599216235730557860046482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 20:50:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-11 21:25:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.denverpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20808744343725348781910970405835384736364516567541215954401422677760743763556963230395598780758481770150051659240022830268902235892890683784779967045398343283486719605108456183629218265399097105556926975525065054133350416551905170919460857250158758260616233155205078361496592866208372229938318509883461745138255318749271430730160102367380189820801846758226550974904431422898631979305969515338900263204222925577343862801096360169460833117545866827510935658293522908930991401138851347362410688922892519802281350085623270064418741046212185263392671308057609333779621988080538235594590742871958438047340668719670351114639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08cd245f21fb7b272dc5b485074b93cf8cf759cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c781f5fd8e88d9003c4d63a2503124a0ce23fe23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr3/uKs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2447 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.advocate-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.advocate-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.gazettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.gazettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.mendocinobeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.mendocinobeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obits.ocregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.pvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytribune.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandtraverse.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macombdaily.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstarpublishing.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcenewspapers.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theleader.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themorningsun.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoaklandpress.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicenews.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trentonian.rememberingnj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyfreeman.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneidadispatch.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogian.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troyrecord.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningjournal.rememberingoh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-herald.rememberingoh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berksmontnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckslocalnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailylocal.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delconewsnetwork.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delcotimes.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlinemedianews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montgomerynews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixvillenews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottsmerc.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernchestercountyweeklies.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southjerseylocalnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereporteronline.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesherald.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.tbrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagomag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.delmartimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.lajollalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.encinitasadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.pomeradonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ramonasentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ranchosantafereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myappstest.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myapps.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askingeric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askingeric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal.medianewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal-remote.medianewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeanad.sandiegouniontribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdfestivalofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdfestivalofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeanad.utcommunitypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utsandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utsandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchosantafereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchosantafereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointloma-obmonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointloma-obmonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encinitasadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encinitasadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajollalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lajollalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delmartimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delmartimes.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr3/bgFh02uYsys.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000019013950af800000403004830460221009f57ad0b7d6560db77a2381340fa8363f241e9fd7e5c6d0c0675e5fec3dfb8a10221008759e0a7757105fe27d3766df156d4499d67a19203cb779a15c46b40820a833e0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000019013950ae20000040300473045022100d45592e53c05ec77d4b1e9f0e9f53d9c16e766ff70ef8c5604a81c192aa761f602207a7b374e7a0c1a14d0f4e414431dc2d34fa7ea6681f62ecfb279411f3163cc3a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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