local.stcatharinesstandard.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:58:fb:8c:e0:c3:d4:fa:93:c1:cd:81:77:8e:08:b9:e6:47 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.stcatharinesstandard.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:fb:8c:e0:c3:d4:fa:93:c1:cd:81:77:8e:08:b9:e6:47
Serial Number (int): 378728359723360936790795065749096873190983
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:51:9b:81:74:57:ab:c2:d4:e3:bc:3b:da:d0:9e:8f:9c:77:38:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:9e:b1:6d:59:9d:09:ba:0b:9f:f1:8b:e8:02:03:d0:87:d1:07:82
Fingerprint (sha256): ca:60:89:71:9d:bb:3a:07:1b:f5:2d:89:03:06:b4:89:0c:48:57:a2:c1:7e:c6:c4:ac:bd:99:cf:ff:e4:2a:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate local.stcatharinesstandard.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.stcatharinesstandard.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alliston.simcoe.com
cantonrep.wanderful.ownlocal.com
coxohio.wanderful.ownlocal.com
eastgwillimbury.yorkregion.com
fk.local.kentonline.co.uk
jacksonshopping.mlive.com
king.yorkregion.com
leader.local.heraldsun.com.au
local.101highlandlakes.com
local.adelaidenow.com.au
local.advertiser.vernonpublishing.com
local.agrinews-pubs.com
local.americanpress.com
local.becclesandbungayjournal.co.uk
local.brownwoodtx.com
local.butlercountytimesgazette.com
local.buxtonadvertiser.co.uk
local.canton-times.com
local.cgsentinel.com
local.chronicle-express.com
local.columbiadailyherald.com
local.couriermail.com.au
local.delrionewsherald.com
local.fakenhamtimes.co.uk
local.frontiersman.com
local.gazetbergenopzoom.nl
local.gcnewsgazette.com
local.hamburgreporter.com
local.hamiltonnews.com
local.hartlepoolmail.co.uk
local.heraldsun.com.au
local.heraldtimesonline.com
local.hermistonherald.com
local.inverurieherald.co.uk
local.inwhitleycounty.com
local.islingtongazette.co.uk
local.janesvillemarketplace.com
local.kcchronicle.com
local.kentweddingday.co.uk
local.leesvilledailyleader.com
local.lethbridgeherald.com
local.longridgenews.co.uk
local.louthleader.co.uk
local.maidenhead-advertiser.co.uk
local.maplecreeknews.com
local.mitchellrepublic.com
local.montreal.cjnews.com
local.monvalleyindependent.com
local.mydallaspost.com
local.newportnewstimes.com
local.newportri.com
local.newspostleader.co.uk
local.newtondailynews.com
local.newtownabbeytoday.co.uk
local.northdevongazette.co.uk
local.northnorfolknews24.co.uk
local.northsomersettimes.co.uk
local.northyorkshirenews.com
local.ntnews.com.au
local.pendletoday.co.uk
local.pinejournal.com
local.pocklingtonpost.co.uk
local.ricentral.com
local.sachem.ca
local.sentinelsource.com
local.sidmouthherald.co.uk
local.southcoasttoday.com
local.southyorkshiretimes.co.uk
local.stcatharinesstandard.ca
local.sunnysidesun.com
local.sussexexpress.co.uk
local.sweetwaterreporter.com
local.thametoday.co.uk
local.thedailyreporter.com
local.theifp.ca
local.themercury.com.au
local.thewestonmercury.co.uk
local.wayneindependent.com
local.willcoxrangenews.com
local.williamsondailynews.com
local.wnypapers.com
local.woonsocketcall.com
local.wymondhamandattleboroughmercury.co.uk
local.yorkshirepost.co.uk
local.yourvalleyvoice.com
marketplace-ml.tj.news
miaminewsrecord.wanderful.ownlocal.com
muskokaregion.muskokaregion.com
mylocal.courant.com
mylocal.indulge.mcall.com
mylocal.palmbeachdailynews.com
mylocal.todayspulse.com
northoaks.presspubs.com
origaminewsmonitor.wahpetondailynews.com
parrysoundbeacon.parrysound.com
providencejournal.wanderful.ownlocal.com
runnelscounty.wanderful.ownlocal.com
shopping.cleveland.com
shopping.westsidenewsny.com
wasagastayner.simcoe.com

Other certificates including the domain name stcatharinesstandard.ca

(limited to 100 certificates)
local.flamboroughreview.com
*.stcatharinesstandard.ca
communityvotes.com
*.thestar.com
communityvotes.com
*.thestar.com
*.stcatharinesstandard.ca
local.pilotweb.aero
stcatharinesstandard.ca
secure-9.adperfect.com
stcatharinesstandard.ca
local.newportnewstimes.com
secure-8.adperfect.com
secure-9.adperfect.com
*.stcatharinesstandard.ca
local.delrionewsherald.com
stcatharinesstandard.ca
stcatharinesstandard-ca.us-midwest-1.townnews-staging.com
*.thestar.com
stcatharinesstandard.ca
*.stcatharinesstandard.ca
local.northamptonchron.co.uk
communityvotes.com
secure-metroland.adperfect.com
local.saltwire.com
kawarthalakes.mykawartha.com
secure-metroland.adperfect.com
communityvotes.com
communityvotes.com
local.fdlreporter.com
cdn-le5.arkadiumhosted.com
*.thestar.com
local.cairnspost.com.au
communityvotes.com
stcatharinesstandard.ca
local.stcatharinesstandard.ca
*.stcatharinesstandard.ca
z737.thestar.com
secure-9.adperfect.com
stcatharinesstandard.ca
secure-8.adperfect.com
cdn-le5.arkadiumhosted.com
communityvotes.com
secure-metroland.adperfect.com
local.montenews.com
*.stcatharinesstandard.ca
communityvotes.com
secure-metroland.adperfect.com
communityvotes.com
thestar.com
local.thepeterboroughexaminer.com
local.northumberlandnews.com
communityvotes.com
*.thestar.com
secure-8.adperfect.com
thestar.com
*.thestar.com
bloorwestyork.toronto.com
secure-7.adperfect.com
local.stcatharinesstandard.ca
communityvotes.com
d275.niagarafallsreview.ca
*.stcatharinesstandard.ca
alliston.simcoe.com
secure-9.adperfect.com
*.thestar.com
secure-9.adperfect.com
secure-9.adperfect.com
communityvotes.com
local.wahpetondailynews.com
z737.thestar.com
stcatharinesstandard.ca
communityvotes.com
*.thestar.com
secure-8.adperfect.com
local.saltwire.com

Certificate

The complete raw certificate details for local.stcatharinesstandard.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQVDCCDzygAwIBAgISBFj7jODD1PqTwc2Bd44IueZHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTIxODU2MTlaFw0y
MDAzMTExODU2MTlaMCgxJjAkBgNVBAMTHWxvY2FsLnN0Y2F0aGFyaW5lc3N0YW5k
YXJkLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6qvVWU7J4s3
r+2AW8dhrYUd+ZSkelor3yotRHmUGmBcCJ8Zc0ygbEsJn5AuWpl7eyw2Lg5zp97G
aFa+ID8LMGdpIQJ8ZytEG0rjB8rUgTxQDUXMckDA5OHGyHd3rnGsG2m/RlMZeDWP
Z9QyePvrW6FkxvmBrBOoDlslWs7FxYGTsjCo/BVDqVOZqOSAOCwjcTjGSD/48wHd
PeYCf8qWAbnmWGqDFS1H7L7763uYZm0ZtsfUfDwKROdra7tZCMCVpV9aVFyzWImi
J80CAr1YTn8+cUG28XF+HVGIY2saeSNCkiWMQbrasDMmdtD2uwq7zIvsaFFzuUfr
k2XVjyJC9wIDAQABo4INVDCCDVAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSDUZuB
dFerwtTjvDva0J6PnHc45jAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMIILCAYDVR0RBIIK/zCCCvuCE2FsbGlzdG9uLnNp
bWNvZS5jb22CIGNhbnRvbnJlcC53YW5kZXJmdWwub3dubG9jYWwuY29tgh5jb3hv
aGlvLndhbmRlcmZ1bC5vd25sb2NhbC5jb22CHmVhc3Rnd2lsbGltYnVyeS55b3Jr
cmVnaW9uLmNvbYIZZmsubG9jYWwua2VudG9ubGluZS5jby51a4IZamFja3NvbnNo
b3BwaW5nLm1saXZlLmNvbYITa2luZy55b3JrcmVnaW9uLmNvbYIdbGVhZGVyLmxv
Y2FsLmhlcmFsZHN1bi5jb20uYXWCGmxvY2FsLjEwMWhpZ2hsYW5kbGFrZXMuY29t
ghhsb2NhbC5hZGVsYWlkZW5vdy5jb20uYXWCJWxvY2FsLmFkdmVydGlzZXIudmVy
bm9ucHVibGlzaGluZy5jb22CF2xvY2FsLmFncmluZXdzLXB1YnMuY29tghdsb2Nh
bC5hbWVyaWNhbnByZXNzLmNvbYIjbG9jYWwuYmVjY2xlc2FuZGJ1bmdheWpvdXJu
YWwuY28udWuCFWxvY2FsLmJyb3dud29vZHR4LmNvbYIibG9jYWwuYnV0bGVyY291
bnR5dGltZXNnYXpldHRlLmNvbYIcbG9jYWwuYnV4dG9uYWR2ZXJ0aXNlci5jby51
a4IWbG9jYWwuY2FudG9uLXRpbWVzLmNvbYIUbG9jYWwuY2dzZW50aW5lbC5jb22C
G2xvY2FsLmNocm9uaWNsZS1leHByZXNzLmNvbYIdbG9jYWwuY29sdW1iaWFkYWls
eWhlcmFsZC5jb22CGGxvY2FsLmNvdXJpZXJtYWlsLmNvbS5hdYIabG9jYWwuZGVs
cmlvbmV3c2hlcmFsZC5jb22CGWxvY2FsLmZha2VuaGFtdGltZXMuY28udWuCFmxv
Y2FsLmZyb250aWVyc21hbi5jb22CGmxvY2FsLmdhemV0YmVyZ2Vub3B6b29tLm5s
ghdsb2NhbC5nY25ld3NnYXpldHRlLmNvbYIZbG9jYWwuaGFtYnVyZ3JlcG9ydGVy
LmNvbYIWbG9jYWwuaGFtaWx0b25uZXdzLmNvbYIabG9jYWwuaGFydGxlcG9vbG1h
aWwuY28udWuCFmxvY2FsLmhlcmFsZHN1bi5jb20uYXWCG2xvY2FsLmhlcmFsZHRp
bWVzb25saW5lLmNvbYIZbG9jYWwuaGVybWlzdG9uaGVyYWxkLmNvbYIbbG9jYWwu
aW52ZXJ1cmllaGVyYWxkLmNvLnVrghlsb2NhbC5pbndoaXRsZXljb3VudHkuY29t
ghxsb2NhbC5pc2xpbmd0b25nYXpldHRlLmNvLnVrgh9sb2NhbC5qYW5lc3ZpbGxl
bWFya2V0cGxhY2UuY29tghVsb2NhbC5rY2Nocm9uaWNsZS5jb22CGmxvY2FsLmtl
bnR3ZWRkaW5nZGF5LmNvLnVrgh5sb2NhbC5sZWVzdmlsbGVkYWlseWxlYWRlci5j
b22CGmxvY2FsLmxldGhicmlkZ2VoZXJhbGQuY29tghlsb2NhbC5sb25ncmlkZ2Vu
ZXdzLmNvLnVrghdsb2NhbC5sb3V0aGxlYWRlci5jby51a4IhbG9jYWwubWFpZGVu
aGVhZC1hZHZlcnRpc2VyLmNvLnVrghhsb2NhbC5tYXBsZWNyZWVrbmV3cy5jb22C
GmxvY2FsLm1pdGNoZWxscmVwdWJsaWMuY29tghlsb2NhbC5tb250cmVhbC5jam5l
d3MuY29tgh5sb2NhbC5tb252YWxsZXlpbmRlcGVuZGVudC5jb22CFmxvY2FsLm15
ZGFsbGFzcG9zdC5jb22CGmxvY2FsLm5ld3BvcnRuZXdzdGltZXMuY29tghNsb2Nh
bC5uZXdwb3J0cmkuY29tghpsb2NhbC5uZXdzcG9zdGxlYWRlci5jby51a4IZbG9j
YWwubmV3dG9uZGFpbHluZXdzLmNvbYIdbG9jYWwubmV3dG93bmFiYmV5dG9kYXku
Y28udWuCHWxvY2FsLm5vcnRoZGV2b25nYXpldHRlLmNvLnVrgh5sb2NhbC5ub3J0
aG5vcmZvbGtuZXdzMjQuY28udWuCHmxvY2FsLm5vcnRoc29tZXJzZXR0aW1lcy5j
by51a4IcbG9jYWwubm9ydGh5b3Jrc2hpcmVuZXdzLmNvbYITbG9jYWwubnRuZXdz
LmNvbS5hdYIXbG9jYWwucGVuZGxldG9kYXkuY28udWuCFWxvY2FsLnBpbmVqb3Vy
bmFsLmNvbYIbbG9jYWwucG9ja2xpbmd0b25wb3N0LmNvLnVrghNsb2NhbC5yaWNl
bnRyYWwuY29tgg9sb2NhbC5zYWNoZW0uY2GCGGxvY2FsLnNlbnRpbmVsc291cmNl
LmNvbYIabG9jYWwuc2lkbW91dGhoZXJhbGQuY28udWuCGWxvY2FsLnNvdXRoY29h
c3R0b2RheS5jb22CH2xvY2FsLnNvdXRoeW9ya3NoaXJldGltZXMuY28udWuCHWxv
Y2FsLnN0Y2F0aGFyaW5lc3N0YW5kYXJkLmNhghZsb2NhbC5zdW5ueXNpZGVzdW4u
Y29tghlsb2NhbC5zdXNzZXhleHByZXNzLmNvLnVrghxsb2NhbC5zd2VldHdhdGVy
cmVwb3J0ZXIuY29tghZsb2NhbC50aGFtZXRvZGF5LmNvLnVrghpsb2NhbC50aGVk
YWlseXJlcG9ydGVyLmNvbYIPbG9jYWwudGhlaWZwLmNhghdsb2NhbC50aGVtZXJj
dXJ5LmNvbS5hdYIcbG9jYWwudGhld2VzdG9ubWVyY3VyeS5jby51a4IabG9jYWwu
d2F5bmVpbmRlcGVuZGVudC5jb22CGmxvY2FsLndpbGxjb3hyYW5nZW5ld3MuY29t
gh1sb2NhbC53aWxsaWFtc29uZGFpbHluZXdzLmNvbYITbG9jYWwud255cGFwZXJz
LmNvbYIYbG9jYWwud29vbnNvY2tldGNhbGwuY29tgitsb2NhbC53eW1vbmRoYW1h
bmRhdHRsZWJvcm91Z2htZXJjdXJ5LmNvLnVrghlsb2NhbC55b3Jrc2hpcmVwb3N0
LmNvLnVrghlsb2NhbC55b3VydmFsbGV5dm9pY2UuY29tghZtYXJrZXRwbGFjZS1t
bC50ai5uZXdzgiZtaWFtaW5ld3NyZWNvcmQud2FuZGVyZnVsLm93bmxvY2FsLmNv
bYIfbXVza29rYXJlZ2lvbi5tdXNrb2thcmVnaW9uLmNvbYITbXlsb2NhbC5jb3Vy
YW50LmNvbYIZbXlsb2NhbC5pbmR1bGdlLm1jYWxsLmNvbYIebXlsb2NhbC5wYWxt
YmVhY2hkYWlseW5ld3MuY29tghdteWxvY2FsLnRvZGF5c3B1bHNlLmNvbYIXbm9y
dGhvYWtzLnByZXNzcHVicy5jb22CKG9yaWdhbWluZXdzbW9uaXRvci53YWhwZXRv
bmRhaWx5bmV3cy5jb22CH3BhcnJ5c291bmRiZWFjb24ucGFycnlzb3VuZC5jb22C
KHByb3ZpZGVuY2Vqb3VybmFsLndhbmRlcmZ1bC5vd25sb2NhbC5jb22CJHJ1bm5l
bHNjb3VudHkud2FuZGVyZnVsLm93bmxvY2FsLmNvbYIWc2hvcHBpbmcuY2xldmVs
YW5kLmNvbYIbc2hvcHBpbmcud2VzdHNpZGVuZXdzbnkuY29tghh3YXNhZ2FzdGF5
bmVyLnNpbWNvZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBep3P531bA57U2SH3QSeAyepGaDIShEhKE
GHWWgXFFWAAAAW77rv21AAAEAwBGMEQCIHUVpZQYisGc+CKiSixQ+au84MLHrkyV
J8CL7tVuoV9TAiAYMVfAKfHVJA/BLvp77CSVvcilzxTNBsQbA73grZTjwQB3ALIe
BcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbvuu/aIAAAQDAEgwRgIh
APvVPkldLiUnjuPnxw02mj1meu/zFZ/SFldHkQpLvGgXAiEAtvIAY3nXyccko//e
3znzJ3VdiT2tV+vkhLZSKY25p6swDQYJKoZIhvcNAQELBQADggEBAJvPs6+eE6IT
hIawUWjFx81v9LFwLpPPUyASzFhOdk4q3jUZzzjfdhSNm9WutxF/kqORXB1FD6IO
yyFpcS06tGP1A7SuEjdUA6uWOfapBIKqDOoMOyWqeUjjj8STzlrXhVVb2sf3rTo3
V87mtFQDlyQYzkbfMxEY1aO198ZqGyQXa0cm7+YMjwFpj9VaWRKA/GJk23EoXEb1
HazeqviMsqkD9cJNOZK/m1Ru0wXwNXHjUNhaYX8B9bIf5YRDgNRiwdyiH5W1WMOo
XIcqCv0vDwE5tFJ48Wpc84ixfz04tKeKVyRLBHRtud6DHAG/XkmJdiMNfdxZt/xT
h8q+G/3AGDU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6qvVWU7J4s3r+2AW8dh
rYUd+ZSkelor3yotRHmUGmBcCJ8Zc0ygbEsJn5AuWpl7eyw2Lg5zp97GaFa+ID8L
MGdpIQJ8ZytEG0rjB8rUgTxQDUXMckDA5OHGyHd3rnGsG2m/RlMZeDWPZ9QyePvr
W6FkxvmBrBOoDlslWs7FxYGTsjCo/BVDqVOZqOSAOCwjcTjGSD/48wHdPeYCf8qW
AbnmWGqDFS1H7L7763uYZm0ZtsfUfDwKROdra7tZCMCVpV9aVFyzWImiJ80CAr1Y
Tn8+cUG28XF+HVGIY2saeSNCkiWMQbrasDMmdtD2uwq7zIvsaFFzuUfrk2XVjyJC
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378728359723360936790795065749096873190983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 18:56:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 18:56:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.stcatharinesstandard.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20661011569049309563129809997798709494344801567401432040644001175200955460863777202772666214157513121125808922281611050721971550000153051037551364643487706354878594798297617847783239719760496111106678094652698546864767416125113366157492212640858031758427075892600412343616516479929399003811777081544795529098964429075419852983266238869700697565580270646405760674017847355394761147685318037345814111214618549442259593381224027488033323875476443288155467475374351744048441453140135274101821444920769047083871069359352189543168876152562846111009192542885438686045301599892742931024126282821355128311013545530301089989367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83519b817457abc2d4e3bc3bdad09e8f9c7738e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2815 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliston.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantonrep.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coxohio.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastgwillimbury.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fk.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'king.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leader.local.heraldsun.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.101highlandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adelaidenow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.advertiser.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agrinews-pubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.americanpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.becclesandbungayjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brownwoodtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.butlercountytimesgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buxtonadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.canton-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cgsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chronicle-express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.columbiadailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.couriermail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.delrionewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fakenhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.frontiersman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gazetbergenopzoom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gcnewsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hamburgreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hamiltonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hartlepoolmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldsun.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldtimesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hermistonherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inverurieherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inwhitleycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.islingtongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.janesvillemarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kcchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kentweddingday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leesvilledailyleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lethbridgeherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.longridgenews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.louthleader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maidenhead-advertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maplecreeknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montreal.cjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.monvalleyindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mydallaspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newportnewstimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newportri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newspostleader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newtondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newtownabbeytoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northnorfolknews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northsomersettimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northyorkshirenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ntnews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pendletoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pocklingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ricentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sachem.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sentinelsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sidmouthherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southcoasttoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southyorkshiretimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stcatharinesstandard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunnysidesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sussexexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sweetwaterreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thametoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedailyreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theifp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.themercury.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewestonmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wayneindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willcoxrangenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.williamsondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wnypapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.woonsocketcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wymondhamandattleboroughmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkshirepost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourvalleyvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-ml.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miaminewsrecord.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokaregion.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.indulge.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.palmbeachdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.todayspulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northoaks.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origaminewsmonitor.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundbeacon.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providencejournal.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnelscounty.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.westsidenewsny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasagastayner.simcoe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016efbaefdb5000004030046304402207515a594188ac19cf822a24a2c50f9abbce0c2c7ae4c9527c08beed56ea15f530220183157c029f1d5240fc12efa7bec2495bdc8a5cf14cd06c41b03bde0ad94e3c1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016efbaefda20000040300483046022100fbd53e495d2e25278ee3e7c70d369a3d667aeff3159fd2165747910a4bbc6817022100b6f2006379d7c9c724a3ffdedf39f327755d893dad57ebe484b652298db9a7ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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