redirect1.franklymedia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b0:6d:75:f8:00:a9:45:8b:c8:05:be:71:1e:b2:0e:3c:dd was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redirect1.franklymedia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b0:6d:75:f8:00:a9:45:8b:c8:05:be:71:1e:b2:0e:3c:dd
Serial Number (int): 408484338685489129309282911646923801640157
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:df:ad:07:62:f0:dc:e3:e1:31:6c:45:e4:da:38:fa:c0:33:7a:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:4a:42:8a:17:ea:7f:f7:97:d7:32:19:cd:a8:b2:b6:b5:ec:f3:bd
Fingerprint (sha256): c6:85:46:49:00:25:45:04:60:36:0d:45:8b:f1:c1:87:ce:b3:8c:bd:c9:b4:21:39:e0:ec:5f:36:67:8a:a7:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate redirect1.franklymedia.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redirect1.franklymedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

94rock.fm
9online.com
bbbmarketplacetrust.org
bigappleradio.com
cbs19contest.com
cbs19news.com
columbusnewsteam.com
doublet1043.com
engine.media
enginemediainc.com
erienewsnow.com
erietvnews.com
frankly.media
franklychat.com
franklyinc.com
healthlink.tv
htv10.tv
jerseymatters.com
jerseynewsnet.com
jerseynewsnetwork.com
jerseytvnews.com
kake.com
kfmb8.tv
kfmbstations.com
kqcw.com
ksidradio.com
kten.com
kuam.com
kwbe.com
kwtv.org
kwtv9.com
lillybroadcasting.com
m.erienewsnow.com
m.erietvnews.com
ncn21.com
ncncalendar.com
ncnsportsnow.com
nebraskanewschannel.com
newjerseynewsnet.com
news9.net
newschannelnebraska.com
newsweathertalk.com
njnewsnetwork.com
njnn.tv
olred995.com
redirect1.franklymedia.com
telemundonebraskaeste.com
www.94rock.fm
www.9online.com
www.cbs19contest.com
www.columbusnewsteam.com
www.engine.media
www.enginemediainc.com
www.erietvnews.com
www.frankly.media
www.franklychat.com
www.franklyinc.com
www.healthlink.tv
www.jerseymatters.com
www.jerseynewsnet.com
www.jerseynewsnetwork.com
www.jerseytvnews.com
www.kfmb8.tv
www.kqcw.com
www.ksidradio.com
www.kwbe.com
www.kwtv.org
www.kwtv9.com
www.ncn21.com
www.ncncalendar.com
www.ncnsportsnow.com
www.nebraskanewschannel.com
www.newjerseynewsnet.com
www.news9.net
www.newsweathertalk.com
www.njnewsnetwork.com
www.njnn.tv
www.olred995.com
www.telemundonebraskaeste.com

Other certificates including the domain name franklymedia.com

(limited to 100 certificates)
support.franklymedia.com
*.franklymedia.com
redirect1.franklymedia.com
ssl-site7.franklymedia.com
*.franklymedia.com
*.franklymedia.com
ssl-site6.franklymedia.com
*.franklymedia.com
ssl-site1.franklymedia.com
franklymedia.com
franklymedia.com
redirect1.franklymedia.com
franklymedia.com
redirect2.franklymedia.com
redirect1.franklymedia.com
*.franklymedia.com
ssl-site4.franklymedia.com
redirect2.franklymedia.com
franklymedia.com
express-weather.franklymedia.com
franklymedia.com.franklyadvertising.com
ssl-site2.franklymedia.com
ssl-site4.franklymedia.com
franklymedia.com
redirect1.franklymedia.com
*.franklymedia.com
ssl-site3.franklymedia.com
engage-see.franklymedia.com
*.franklymedia.com
ssl-site6.franklymedia.com
franklymedia.com
ssl-site5.franklymedia.com
ssl-site1.franklymedia.com
*.franklymedia.com
ssl-site4.franklymedia.com
images-stg.tritondigitalcms.com
ssl-site4.franklymedia.com
ssl-site3.franklymedia.com
ssl-site6.franklymedia.com
*.franklymedia.com
redirect2.franklymedia.com
ssl-site4.franklymedia.com
ssl-site2.franklymedia.com
redirect3.franklymedia.com
ssl-site6.franklymedia.com
franklymedia.com
ssl-site1.franklymedia.com
ssl-site6.franklymedia.com
ssl-site3.franklymedia.com
ssl-site3.franklymedia.com
express-images.franklymedia.com
www.franklymedia.com
franklymedia.com
ssl-site5.franklymedia.com
redirect1.franklymedia.com
ssl-site2.franklymedia.com
ssl-site3.franklymedia.com
redirect3.franklymedia.com
ssl-site5.franklymedia.com
franklymedia.com
express-cms-assets.franklymedia.com
franklymedia.com
redirect3.franklymedia.com
redirect1.franklymedia.com
express-cms-assets.franklymedia.com
redirect3.franklymedia.com
ssl-site6.franklymedia.com
franklymedia.com
*.franklymedia.com
ssl-site5.franklymedia.com
sni.cloudflaressl.com
express-images.franklymedia.com
support.franklymedia.com
ssl-site7.franklymedia.com
ssl-site3.franklymedia.com
ssl-site7.franklymedia.com
redirect1.franklymedia.com
redirect3.franklymedia.com
franklymedia.com
images-stg.tritondigitalcms.com
redirect3.franklymedia.com
support.franklymedia.com
sni.cloudflaressl.com
ssl-site3.franklymedia.com
express-pro.franklymedia.com
www.franklymedia.com
support.franklymedia.com
ssl-site6.franklymedia.com
express-images.franklymedia.com
ssl-site1.franklymedia.com
ssl-site5.franklymedia.com
ssl-site3.franklymedia.com
*.franklymedia.com
redirect2.franklymedia.com
redirect3.franklymedia.com
redirect1.franklymedia.com
redirect1.franklymedia.com
support.franklymedia.com
sni.cloudflaressl.com
ssl-site5.franklymedia.com

Certificate

The complete raw certificate details for redirect1.franklymedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnBRXEf4TAWuRVuqkWs0
wvVesgHM9GCB7foUSkXticC0/6NKCkQnZ/v54/w0iSZIg3vpwKJhmXH75cnTxFtt
VInu4izyBU/T8dq/RSlDeIeKoriFtTgbrGLCQ5WuQJj+A/zgavIm98jEbJkIWhue
+eAfR19XpmGBnhtxXEmF6WBLuIg3TPn/fwhS/a7d5OACIsk/u0SwKu+1P8MNb/bY
uhWv0c6l4jVeBS2LH2Lg4XWT4KpIEVmB6aY7cuxoIsagtxoZP66tg1uEtid28sZh
uMU/0dbt+o5BmL6O4atyrdbTSDsTHhmDlBsPHG8rykcErvcbWFompYkmnoND1Y6W
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408484338685489129309282911646923801640157
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-17 15:07:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-15 15:07:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redirect1.franklymedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24040663922069990680251688913753934998536210361312801236168420802038985367137222093164071159300518940905675911445411495483700060635991065080640430266905707452553576922196633106076815454258146026437027493215862160344289248244923127855928702579183885626050824460617848829642885220431650297048920096079842154556747570965555836109199189560979524895249118791803668314552998362465863784878066051280150589552434072565131833750977537490123356047868239578850559082121905121186595484723105356829849921886923583607799972006770637469465396645710442315616823731449806702511261657199251495086993345026858927135234860856875301115627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39dfad0762f0dce3e1316c45e4da38fac0337a96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1428 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '94rock.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbbmarketplacetrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigappleradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs19contest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs19news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbusnewsteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doublet1043.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engine.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enginemediainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erienewsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erietvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankly.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklychat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthlink.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htv10.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseymatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseynewsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseynewsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseytvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfmb8.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfmbstations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kqcw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksidradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwtv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwtv9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lillybroadcasting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.erienewsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.erietvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncn21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncncalendar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnsportsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskanewschannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjerseynewsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news9.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newschannelnebraska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsweathertalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njnewsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njnn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olred995.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect1.franklymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemundonebraskaeste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.94rock.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs19contest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.columbusnewsteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.engine.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enginemediainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erietvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frankly.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklychat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franklyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthlink.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseymatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseynewsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseynewsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseytvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kfmb8.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kqcw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ksidradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwtv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwtv9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncn21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncncalendar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnsportsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskanewschannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newjerseynewsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.news9.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsweathertalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.njnewsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.njnn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olred995.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telemundonebraskaeste.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186f053e9f100000403004630440220091472437c8bf68afecef3e820aacaf11f7ae5d076d96c8a16d2a642474135790220293d278bd3ca44aa7d532270770f5b1b05a536834ca82334e6b2294c57998ca4007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186f053ebda0000040300473045022057d34edaa217cd49029ea0e74549a2d9ff7df01fb61b13797bde14c1c70f880c02210099034832a314d97f2362f7bf831b552aa7d73d1720a20673233d62cce7862041
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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