matamata-chronicle.origami.neighbourly.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:a1:b1:06:f8:ef:ae:7b:1f:2c:9d:e5:ed:9d:a8:94:1c:3a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=matamata-chronicle.origami.neighbourly.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:b1:06:f8:ef:ae:7b:1f:2c:9d:e5:ed:9d:a8:94:1c:3a
Serial Number (int): 316357628427614025659269319271379425827898
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:15:6a:0d:88:aa:2c:35:24:5b:95:b0:05:8b:35:a1:c1:f3:ff:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:d8:0f:1b:5b:6c:8e:5f:fc:a3:66:ac:e9:2a:bb:86:53:0e:2f:22
Fingerprint (sha256): ce:28:15:3f:7b:94:4e:3d:0a:54:db:20:7e:8c:35:d5:8b:6d:7e:4c:2b:fc:a6:58:dd:58:52:9b:a5:9c:60:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate matamata-chronicle.origami.neighbourly.co.nz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matamata-chronicle.origami.neighbourly.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alliston.simcoe.com
bracebridge.muskokaregion.com
eastern-courier.origami.neighbourly.co.nz
eastgwillimbury.yorkregion.com
forestlake.presspubs.com
innisfil.simcoe.com
km.local.kentonline.co.uk
local.abingtonnews.org
local.adirondackexpress.com
local.agweek.com
local.bakersfield.com
local.berksandbucks.greatbritishlife.co.uk
local.bridemagazine.co.uk
local.burnettcountysentinel.com
local.cambstimes.co.uk
local.canton-times.com
local.centraloregon.pamplinmedia.com
local.citizensvoice.com
local.clintonnc.com
local.coastalscene24.co.uk
local.cotswoldlife.co.uk
local.dglobe.com
local.dorsetmagazine.co.uk
local.eastbayri.com
local.easterntimesregister.com
local.elkintribune.com
local.eufaulaindianjournal.com
local.eveningnews24.co.uk
local.fergusfallsjournal.com
local.fwbusinessweekly.com
local.gazette.com
local.grandforksherald.com
local.guymondailyherald.com
local.hertsad.co.uk
local.huntspost.co.uk
local.idahostatejournal.com
local.infortwayne.com
local.ipswichstar.co.uk
local.islingtongazette.co.uk
local.kcchronicle.com
local.lodinews.com
local.loganbanner.com
local.maconcountytimes.com
local.madisoncourier.com
local.maidenhead-advertiser.co.uk
local.mammothtimes.com
local.midiario.com
local.millelacsmessenger.com
local.monvalleyindependent.com
local.moorefieldexaminer.com
local.muswellbrookchronicle.com.au
local.mycaldwellcounty.com
local.myheraldreview.com
local.myrecordjournal.com
local.newcastlestar.com.au
local.newmarketjournal.co.uk
local.northdevongazette.co.uk
local.nwherald.com
local.observernewsonline.com
local.okeenerecord.com
local.pilotonline.com
local.portstephensexaminer.com.au
local.princewilliamtimes.com
local.republicanherald.com
local.sentinelsource.com
local.somerset-life.co.uk
local.southeastiowaunion.com
local.tabertimes.com
local.theameryfreepress.com
local.thedailyiberian.com
local.theherald-news.com
local.theshaunavonstandard.com
local.thewesternnews.com
local.unioneagle.com
local.vaildaily.com
local.wabashplaindealer.com
local.wadenapj.com
local.wapakdailynews.com
local.willcoxrangenews.com
local.windomnews.com
local.woonsocketcall.com
local.wymondhamandattleboroughmercury.co.uk
local.yourchickens.co.uk
marketplace-wb.tj.news
markham.yorkregion.com
matamata-chronicle.origami.neighbourly.co.nz
mylocal.capitalgazette.com
mylocal.muleshoejournal.com
north-taranaki-midweek.origami.neighbourly.co.nz
northbay.northbaynipissing.com
northoaks.presspubs.com
origamiwahpeton.wahpetondailynews.com
peterborough.mykawartha.com
price.apg-wi.com
quad.presspubs.com
ricelake.apg-wi.com
richmondhill.yorkregion.com
the-hutt-news.origami.neighbourly.co.nz
upper-hutt-leader.origami.neighbourly.co.nz
whangarei-leader.origami.neighbourly.co.nz

Other certificates including the domain name neighbourly.co.nz

(limited to 100 certificates)
cdn.nikolay.dev.neighbourly.co.nz
cdn.thai.dev.neighbourly.co.nz
kalamazooshopping.mlive.com
local.flamboroughreview.com
lb.preprod.dev.neighbourly.co.nz
local.theameryfreepress.com
local.panolawatchman.com
local.thefirsthundredmiles.com
*.neighbourly.co.nz
local.crestonnews.com
c3.shared.global.fastly.net
cdn.stuff-coupon.thai.dev.neighbourly.co.nz
c3.shared.global.fastly.net
lb.jimmy.dev.neighbourly.co.nz
cdn.inyoung.dev.neighbourly.co.nz
somni.neighbourly.co.nz
lb.oliver.dev.neighbourly.co.nz
local.thegazette.com
*.devint.neighbourly.co.nz
cdn.oliver.dev.neighbourly.co.nz
shop.neighbourly.co.nz
eastern-courier.origami.neighbourly.co.nz
local.dissexpress.co.uk
local.bensonnews-sun.com
cdn.stuff-coupon.thai.dev.neighbourly.co.nz
*.neighbourly.co.nz
cognito.dev.neighbourly.co.nz
lb.stuff-coupon.oliver.dev.neighbourly.co.nz
c3.shared.global.fastly.net
local.summitdaily.com
local.alexcityoutlook.com
local.wahpetondailynews.com
local.pilotweb.aero
local.daily-chronicle.com
conroe.communityimpact.com
nor-west-news.origami.neighbourly.co.nz
lb.stuff-coupon.thai.dev.neighbourly.co.nz
peterborough.mykawartha.com
neighbourly.co.nz
c3.shared.global.fastly.net
lb.staging5.dev.neighbourly.co.nz
lb.anil.dev.neighbourly.co.nz
somni.neighbourly.co.nz
local.airgunshooting.co.uk
lb.karan.dev.neighbourly.co.nz
c3.shared.global.fastly.net
lb.property-admin.dev.neighbourly.co.nz
auth.dev.neighbourly.co.nz
*.devint.neighbourly.co.nz
lb.stuff-coupon.staging.dev.neighbourly.co.nz
local.centraloregon.pamplinmedia.com
the-nelson-leader.origami.neighbourly.co.nz
cdn.oliver.dev.neighbourly.co.nz
local.news-banner.com
flintshopping.mlive.com
local.ftimes.com
*.neighbourly.co.nz
local.dglobe.com
lb.duong.dev.neighbourly.co.nz
c3.shared.global.fastly.net
c3.shared.global.fastly.net
*.neighbourly.co.nz
western-leader.origami.neighbourly.co.nz
lb.neighbourly-user-data.oliver.dev.neighbourly.co.nz
cdn.preprod.dev.neighbourly.co.nz
portperry.durhamregion.com
shop.neighbourly.co.nz
c3.shared.global.fastly.net
local.willcoxrangenews.com
tomball.communityimpact.com
*.neighbourly.co.nz
api.user-data.neighbourly.co.nz
cdn.stuff-coupon.staging.dev.neighbourly.co.nz
lb.oliver2.dev.neighbourly.co.nz
georgina.yorkregion.com
cdn.duong.dev.neighbourly.co.nz
c3.shared.global.fastly.net
local.ottawasun.com
shop.neighbourly.co.nz
newhomes.yorkregion.com
lb.jeremy.dev.neighbourly.co.nz
c3.shared.global.fastly.net
*.dev.neighbourly.co.nz
local.hertsad.co.uk
lb.shershad-property.dev.neighbourly.co.nz
c3.shared.global.fastly.net
*.neighbourly.co.nz
cdn.rafik.dev.neighbourly.co.nz
lb.oliver2.dev.neighbourly.co.nz
*.neighbourly.co.nz
lb.jennie.dev.neighbourly.co.nz
km.local.kentonline.co.uk
local.bemidjipioneer.com
local.cambstimes.co.uk
c3.shared.global.fastly.net
whangarei-leader.origami.neighbourly.co.nz
local.wisbechstandard.co.uk
somni.neighbourly.co.nz
cdn.staging4.dev.neighbourly.co.nz
local.moodycountyenterprise.com

Certificate

The complete raw certificate details for matamata-chronicle.origami.neighbourly.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLCHdG5/rBMVF0LGQbqM
quzGxn+63+6quCFjE0O7cg07nlBM34C72EZF/0eU+RFIFct6WdTJRabbcF4zF0Dx
PjRXvk6G5Cy7/FaqQB438vQ6q5+fVfnLzq+8ZSMEzNnguvr/rcFYc8ojqXy61cQb
MI7DWo4dsw48CgaZEu1mkgx8fFQ8lUhGUjl7R2ofKSJbuxhQX/maoYvD8uDrXm1V
ypdAyDd1kiPnwLMiOtdvpShN8qjSVnLZ2wWZCZ2Sdz8WWs9eYrOF9BN/vIW2/Jhv
3JFsNoUdk40Qd8g0WuEE33iYHbntlYZmwiUQkR1FLrhQzJmVucl9KmqZAMjNYeJw
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316357628427614025659269319271379425827898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-19 09:50:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-17 09:50:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matamata-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19780225328341322921281538969211375913281680644388838380628745042737197072027231178972083074026793538900449622577269630406278855715284181971305140558256073160105767200799669724227562182618013856192870820074661368642523196579737191699985085877618589640115686004755983158160912329303749960424365476950556603078412344949549709049365724825724401276105067193632000578056746060147368029692219582335660501901816573780469938623849137652117435540402214064772119744913205807751725016431023215299870582268463235138496156462999191643932920419811200198459128373300017977262453516952169539899731846908529246904488011713445401620633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3156a0d88aa2c35245b95b0058b35a1c1f3ffc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2797 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliston.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastern-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastgwillimbury.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestlake.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innisfil.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'km.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.abingtonnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adirondackexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bakersfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.berksandbucks.greatbritishlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bridemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.burnettcountysentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cambstimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.canton-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.centraloregon.pamplinmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.citizensvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clintonnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coastalscene24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cotswoldlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dorsetmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastbayri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.easterntimesregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elkintribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eufaulaindianjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fergusfallsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fwbusinessweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guymondailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntspost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.idahostatejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.infortwayne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ipswichstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.islingtongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kcchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lodinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.loganbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maconcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.madisoncourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maidenhead-advertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mammothtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midiario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.millelacsmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.monvalleyindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moorefieldexaminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muswellbrookchronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mycaldwellcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myheraldreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.myrecordjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newcastlestar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newmarketjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observernewsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.okeenerecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.portstephensexaminer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.princewilliamtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.republicanherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sentinelsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.somerset-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.southeastiowaunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tabertimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theameryfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedailyiberian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theherald-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theshaunavonstandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewesternnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.unioneagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vaildaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wabashplaindealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wapakdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willcoxrangenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windomnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.woonsocketcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wymondhamandattleboroughmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourchickens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-wb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markham.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamata-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.muleshoejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-taranaki-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northbay.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northoaks.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origamiwahpeton.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterborough.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'price.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quad.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricelake.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondhill.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-hutt-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upper-hutt-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangarei-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018833a193e7000004030046304402204ffd9eea09cd23c194eaacfd4e2dd3757ae9e23ce710be8be7ca152a05afd07502201c6263f7b8b259bf1384f5383dcb684f44b8ebe6f1d7f91bb574d3ae75c93579007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018833a195c6000004030048304602210098be609d0e6a25b1d6c10148e199574347179eadea244bc270853c5acc684b9e022100c28d556a93f2e22d7b57cf6c28bb1e2c9d2cb3f6a6aee7aefd75f539edf63ca2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048879584cbb47854267485d4a5fee7614a15a6216f08eb7728848f7126ed63da57ee33fb7cedf10bb955c8f42aa9612bab7c3315eafcfc6c3e71f08ad0c3e50f36206fd4c778264e862e5656c0567ef479e9a476709b0264de66b1b6a61087fac526d680205a32efd1f4391a339ebea790a3e8ad2080350d24ab22ccef907d1726e31b583d0664244b7ca5df1d1708c6e114da10bd8ad0ca0c12fb9c72e95bf63e235467a6d1a2a3087958411d5b0cf73ed4a4abb86802a9c457c9b8382862460dc55098e2b55645b52ef7526ea733880f513db466441d9d4f5165a955c916b8676a970386329f020cf03b590471edbfd5ad5931ab143c131ca177a13cd55b8d