local.janesvillemarketplace.com

Issued by R3

About this certificate

This digital certificate with serial number 03:98:5e:5e:24:6b:c2:73:a6:03:27:c7:f2:1a:71:9e:f9:92 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.janesvillemarketplace.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:5e:5e:24:6b:c2:73:a6:03:27:c7:f2:1a:71:9e:f9:92
Serial Number (int): 313185213813476209774986737492311469390226
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:4d:89:fd:67:20:3a:2e:b8:9d:a6:4c:08:82:d6:7e:b8:c0:e3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0b:48:21:29:cd:77:08:00:f1:d7:40:d1:64:db:9f:bd:8d:c2:6f:b7
Fingerprint (sha256): c5:61:b5:20:37:1b:a1:ad:51:a6:e9:04:d8:d3:73:49:8c:aa:1b:70:6e:7d:2b:75:d3:bf:ca:d8:cd:47:d5:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.janesvillemarketplace.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.janesvillemarketplace.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajax.durhamregion.com
annarborshopping.mlive.com
ashland.apg-wi.com
aurora.yorkregion.com
barrie.simcoe.com
brock.mykawartha.com
burlington.insidehalton.com
fk.local.kentonline.co.uk
georgina.yorkregion.com
handelaars.kw.be
hayward.apg-wi.com
horowhenua-mail.origami.neighbourly.co.nz
kalamazooshopping.mlive.com
kg.local.kentonline.co.uk
local.adirondackexpress.com
local.agrinews-pubs.com
local.argusobserver.com
local.baystatebanner.com
local.beloitdailynews.com
local.bridemagazine.co.uk
local.caledonianrecord.com
local.citizensvoice.com
local.clintonnc.com
local.coalvalleynews.com
local.coloradocommunitymedia.com
local.countystar.com
local.derehamtimes.co.uk
local.devon24.co.uk
local.douglasdispatch.com
local.eadt.co.uk
local.falmouthoutlook.com
local.fergusfallsjournal.com
local.gazette.com
local.grandforksherald.com
local.granthamjournal.co.uk
local.gravesendreporter.co.uk
local.h-ponline.com
local.hamhigh.co.uk
local.hawaiitribune-herald.com
local.huntervalleynews.net.au
local.huntspost.co.uk
local.janesvillemarketplace.com
local.kelownadailycourier.ca
local.letstalk24.co.uk
local.loganbanner.com
local.mcintoshdemocrat.com
local.midiario.com
local.midweeknews.com
local.newmarketjournal.co.uk
local.newtondailynews.com
local.northdevongazette.co.uk
local.norwichextra.com
local.paducahsun.com
local.pineandlakes.com
local.pinecitymn.com
local.punxsutawneyspirit.com
local.sconeadvocate.com.au
local.sentinelsource.com
local.sequoyahcountytimes.com
local.stamfordmercury.co.uk
local.suffolkfreepress.co.uk
local.superiortelegram.com
local.sussexlife.co.uk
local.svindependent.com
local.tctimes.com
local.tehachapinews.com
local.theabingtonjournal.com
local.theievoice.com
local.theirregular.com
local.thewesterlysun.com
local.wadenapj.com
local.wapakdailynews.com
local.woonsocketcall.com
local.yourchickens.co.uk
local.zip06.com
marketplace-kr.tj.news
markham.yorkregion.com
muskegonshopping.mlive.com
mylocal.capitalgazette.com
mylocal.carrollcountytimes.com
mylocal.courant.com
mylocal.muleshoejournal.com
mylocal.orlandosentinel.com
oakville.insidehalton.com
orangeville.orangeville.com
parrysoundbeacon.parrysound.com
parrysoundnorth.parrysound.com
perth.insideottawavalley.com
portperry.durhamregion.com
price.apg-wi.com
rodney-times.origami.neighbourly.co.nz
shopping.nj.com
shopping.westsidenewsny.com
smithsfalls.insideottawavalley.com
south-waikato-news.origami.neighbourly.co.nz
stouffville.yorkregion.com
te.local.kentonline.co.uk
the-nelson-leader.origami.neighbourly.co.nz
vaughan.yorkregion.com
whangarei-leader.origami.neighbourly.co.nz

Other certificates including the domain name janesvillemarketplace.com

(limited to 100 certificates)
local.flamboroughreview.com
local.panolawatchman.com
local.crestonnews.com
local.alexcityoutlook.com
local.wahpetondailynews.com
local.centraloregon.pamplinmedia.com
flintshopping.mlive.com
local.dglobe.com
local.cambstimes.co.uk
local.thetfordandbrandontimes.co.uk
local.guymondailyherald.com
local.thetfordandbrandontimes.co.uk
kawarthalakes.mykawartha.com
local.argusobserver.com
local.torringtontelegram.com
local.thegazette.com
muskokan.muskokaregion.com
mylocal.journal-news.com
local.todmordennews.co.uk
local.toronto.cjnews.com
local.punxsutawneyspirit.com
local.insidebiz.com
local.montenews.com
local.swcbulletin.com
mylocal.jacksonville.com
local.devonlife.co.uk
local.waterloochronicle.ca
flintshopping.mlive.com
local.cambstimes.co.uk
local.mycaldwellcounty.com
local.janesvillemarketplace.com
western-leader.origami.neighbourly.co.nz
local.stcatharinesstandard.ca
local.siskiyoudaily.com
horowhenua-mail.origami.neighbourly.co.nz
local.mycaldwellcounty.com
flintshopping.mlive.com
flintshopping.mlive.com

Certificate

The complete raw certificate details for local.janesvillemarketplace.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmc/Gy1zDA7uVDCvRw0M
y3rfIb/rrIURrB8m4SztELuliFBhLq5r9ADv+jE/qFZ5NWj7YkSVlz3EcaZet2mD
Z6vK3m552F7KLtY5oq0+eMTDbw3Yd35qdUjtQW/qx0rXe06mWUcRcE8Re6J4dj6J
c5gtGonptRHYlmbEPLKTlQGmByw0SwkPyGu5AclYEBVXXQgRL8vAfz5K3ACi3QYu
ScqHGD5K3E3Kr+oeBG1wD2UvoDWrY+H3cPuEp05skB/QKWiPt6mLGOgk/rsIB+QU
JEC4rEsTAnmZ3jfh49h3qAYc0qa11aGi6w3AtOqt92fvrnWpvr9TiJO5rev+h4ZR
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313185213813476209774986737492311469390226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-13 09:12:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-11 09:12:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.janesvillemarketplace.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19491611715632109044932666446819519933801737577365548874075414122339045415525512394201611771862789502677527855517665128759983967769245543993543458740744990773907604445993780665382588251597344530134678187820256189932773476057531985316974359657718500088756754368856314608442717086305629653323078019959954028374151748950335395437732331336678513527899077015134613442171358310444374414342807790363550029195549657732995840188605496211228678350771121863776828631062104423602127154917650601559796941557388432123682828000167777209279005215294341862433519883103239787268071213551300505832016632222126077340142032546939586105671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							374d89fd67203a2eb89da64c0882d67eb8c0e3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2677 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annarborshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashland.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrie.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brock.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burlington.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fk.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgina.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayward.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horowhenua-mail.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalamazooshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kg.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adirondackexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agrinews-pubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.argusobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baystatebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.beloitdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bridemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonianrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.citizensvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clintonnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coalvalleynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coloradocommunitymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.derehamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.devon24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.douglasdispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eadt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.falmouthoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fergusfallsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.granthamjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gravesendreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.h-ponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hamhigh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hawaiitribune-herald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntspost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.janesvillemarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kelownadailycourier.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.letstalk24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.loganbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mcintoshdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midiario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midweeknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newmarketjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newtondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norwichextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.paducahsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinecitymn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.punxsutawneyspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sconeadvocate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sentinelsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sequoyahcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stamfordmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.suffolkfreepress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sussexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.svindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tctimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tehachapinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theabingtonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theievoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theirregular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewesterlysun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wapakdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.woonsocketcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourchickens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.zip06.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-kr.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markham.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskegonshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.carrollcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.muleshoejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakville.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangeville.orangeville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundbeacon.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundnorth.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perth.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portperry.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'price.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodney-times.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.westsidenewsny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithsfalls.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south-waikato-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stouffville.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-nelson-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaughan.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangarei-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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