local.pinecitymn.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b5:7a:4a:f7:ea:6d:54:9e:a4:23:31:84:99:04:c1:5d:00 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.pinecitymn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:7a:4a:f7:ea:6d:54:9e:a4:23:31:84:99:04:c1:5d:00
Serial Number (int): 410202807213512538082406707901915528781056
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:dd:07:21:25:ab:fe:65:05:3e:8a:25:04:c8:cb:93:18:0a:93:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:52:a1:b3:01:80:bd:de:b9:6b:10:66:26:8a:ad:d0:ae:1f:f9:65
Fingerprint (sha256): cf:c0:53:e1:94:21:3f:02:b4:e2:b4:0b:2d:56:bd:6c:39:4f:84:0d:2e:1c:93:8c:c1:db:fa:37:0c:9d:7e:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.pinecitymn.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.pinecitymn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alliston.simcoe.com
ashland.apg-wi.com
brighton.northumberlandnews.com
businessdirectory.triblive.com
central-leader.origami.neighbourly.co.nz
handelaars.kw.be
hauraki-herald.origami.neighbourly.co.nz
kapiti-observer.origami.neighbourly.co.nz
local.advertiser.vernonpublishing.com
local.agrinews-pubs.com
local.aitkinage.com
local.bcrnews.com
local.bowislandcommentator.com
local.brainerddispatch.com
local.burymercury.co.uk
local.calaverasenterprise.com
local.chronicle-tribune.com
local.cityweekly.net
local.coloradocommunitymedia.com
local.countrymessenger.com
local.countystar.com
local.dailyherald.com
local.dailyinterlake.com
local.dl-online.com
local.eacourier.com
local.elystandard.co.uk
local.eveningnews24.co.uk
local.fakenhamtimes.co.uk
local.gcnewsgazette.com
local.grandforksherald.com
local.greatyarmouthmercury.co.uk
local.greenun24.co.uk
local.h-ponline.com
local.hackneygazette.co.uk
local.haverhillecho.co.uk
local.henryettafree-lance.com
local.huntervalleynews.net.au
local.infortwayne.com
local.inforum.com
local.kentnews.co.uk
local.kilburntimes.co.uk
local.leaderadvertiser.com
local.lodinews.com
local.loganbanner.com
local.lowestoftjournal.co.uk
local.maidenhead-advertiser.co.uk
local.montrosepress.com
local.mydallaspost.com
local.newcastlestar.com.au
local.news-sun.com
local.nogalesinternational.com
local.northsomersettimes.co.uk
local.nwherald.com
local.observernewsonline.com
local.osceolaiowa.com
local.paducahsun.com
local.pinecitymn.com
local.prairieadvocate.com
local.princewilliamtimes.com
local.saffronwaldenreporter.co.uk
local.saltwire.com
local.sandmountainreporter.com
local.surreylife.co.uk
local.tahoedailytribune.com
local.theameryfreepress.com
local.thedailyiberian.com
local.theday.com
local.thedickinsonpress.com
local.thefloridavillager.com
local.thelocalvoice.net
local.thepostandmail.com
local.thesunchronicle.com
local.thewesterlysun.com
local.thewesternnews.com
local.vaildaily.com
local.wapakdailynews.com
local.wattonandswaffhamtimes.co.uk
local.wctrib.com
local.yourokmulgee.com
manukau-courier.origami.neighbourly.co.nz
marketplace-tb.tj.news
markham.yorkregion.com
mylocal.indulge.mcall.com
mylocal.myplainview.com
nor-west-news.origami.neighbourly.co.nz
northern-outlook.origami.neighbourly.co.nz
northyork.toronto.com
origaminewsmonitor.wahpetondailynews.com
ownlocal.neighbourly.co.nz
perth.insideottawavalley.com
piako-post.origami.neighbourly.co.nz
shophuntsville.al.com
shopping.oregonlive.com
shopping.silive.com
smithsfalls.insideottawavalley.com
stcroixvalley.presspubs.com
the-nelson-leader.origami.neighbourly.co.nz
whangarei-leader.origami.neighbourly.co.nz
whitebear.presspubs.com
wo.local.kentonline.co.uk

Other certificates including the domain name pinecitymn.com

(limited to 100 certificates)
local.panolawatchman.com
pinecitymn.com
conroe.communityimpact.com
pinecitymn.com
nor-west-news.origami.neighbourly.co.nz
pinecitymn.com
the-nelson-leader.origami.neighbourly.co.nz
pinecitymn.com
flintshopping.mlive.com
portperry.durhamregion.com
pinecitymn.com
pinecitymn.com
pinecitymn.com
pinecitymn.com
pinecitymn.com
pinecountynews.com
pinecitymn.com
pinecitymn.com
local.thetfordandbrandontimes.co.uk
local.saltwire.com
pinecitymn.com
local.thetfordandbrandontimes.co.uk
local.torringtontelegram.com
local.theledger.com
pinecitymn.com
pinecitymn.com
local.eastlondonadvertiser.co.uk
local.calgaryherald.com
local.yourokmulgee.com
pinecitymn.com
pinecitymn.com
pinecountynews.com
pinecountynews.com
pinecitymn.com
the-nelson-leader.origami.neighbourly.co.nz
local.eastlondonadvertiser.co.uk
pinecitymn.com
pinecitymn.com
local.insidebiz.com
pinecitymn.com
flintshopping.mlive.com
pinecitymn.com
pinecountynews.com
local.cornwalllife.co.uk
local.janesvillemarketplace.com
local.pinecitymn.com
pinecitymn.com
pinecountynews.com
local.pinecitymn.com
pinecountynews.com
pinecitymn.com
manukau-courier.origami.neighbourly.co.nz
pinecitymn.com
pinecitymn.com
local.kent-life.co.uk
local.fenlandcitizen.co.uk
pinecitymn.com
local.news-banner.com
pinecitymn.com
flintshopping.mlive.com
flintshopping.mlive.com
local.saltwire.com

Certificate

The complete raw certificate details for local.pinecitymn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+3lPnts8dcHlgJzhy8q
guIyAsapTT8i3rMRr3q9n07DF7mxz8xeZ03SlbNJ2ZCPoD/nojave9CFpF/v/oLk
QdpeB9WAexWqRff2xfOlTlZgBO+B6FxY7fKHHo90Jo4LimkfjFd1zK1YbKIfO/G1
4oEJpALRVxaygbp3o2KcxVrltCiyrrxjHSkL6WusX6W709cUhjlSdlk+o5aV3iBp
1tc2H45aRJPicm6xlWdUBwnKiQW+9rCiXzV9/Sj5kBhHmsACIX7kCxi1X/aL6WWb
1ZKVzL9iZoHquP3OHBq7a3BcqC9RqjqE1gYb76ZmXjmrr/9+8cArFLEmCu6F1KxY
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410202807213512538082406707901915528781056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-13 10:26:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-11 10:26:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.pinecitymn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21199107565040791588379898387944121543042486689428413618012001747780555244353146063474380493409843749512208348370850798308208353370370237788038576648137168333058806627439693747171619404153051396780870745072758707008127189285314733193144407121973620070547071833172791337182483750838630604402394612485340489090366145392255141496424870012568560382865524736363202880879320234758252856259180011513671119333900906611352132087405239906420803213432074465329206356315158138195070846543225797526093214559116817255897954570352905809281128101910723670381997996252268415102630667028954811049817964241103704821211515203822283413569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9dd072125abfe65053e8a2504c8cb93180a932d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2781 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliston.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashland.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighton.northumberlandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessdirectory.triblive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hauraki-herald.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapiti-observer.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.advertiser.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agrinews-pubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.aitkinage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bcrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bowislandcommentator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.burymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.calaverasenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.chronicle-tribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cityweekly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coloradocommunitymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrymessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailyinterlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eacourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elystandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fakenhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gcnewsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greatyarmouthmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greenun24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.h-ponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.haverhillecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.henryettafree-lance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.infortwayne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kentnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kilburntimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lodinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.loganbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lowestoftjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maidenhead-advertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrosepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mydallaspost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newcastlestar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nogalesinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northsomersettimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observernewsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolaiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.paducahsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinecitymn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.prairieadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.princewilliamtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saffronwaldenreporter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saltwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sandmountainreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.surreylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tahoedailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theameryfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedailyiberian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thefloridavillager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thelocalvoice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thepostandmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thesunchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewesterlysun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewesternnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vaildaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wapakdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wattonandswaffhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourokmulgee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukau-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-tb.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markham.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.indulge.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.myplainview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nor-west-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northern-outlook.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origaminewsmonitor.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownlocal.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perth.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piako-post.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shophuntsville.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.silive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithsfalls.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixvalley.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-nelson-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangarei-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitebear.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wo.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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