flyertown.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:cc:9d:d8:d7:63:79:5f:f3:6b:e6:d4:f9:03:c4:63:77 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flyertown.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:cc:9d:d8:d7:63:79:5f:f3:6b:e6:d4:f9:03:c4:63:77
Serial Number (int): 317074865703205937368851095952849595818871
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:d8:01:95:8e:2d:7d:08:2a:bc:41:d0:d5:99:da:61:6b:4c:c4:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:2e:20:a2:ea:e9:cb:79:3e:0d:58:b6:6c:c4:fd:f7:3d:be:e3:1b
Fingerprint (sha256): d1:f1:3a:c6:6d:5e:6d:de:ad:f1:f5:f9:b8:e5:a6:78:f5:63:62:c4:8b:3e:b8:00:65:b7:c5:13:b9:af:d7:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flyertown.ca

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flyertown.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buyersguide.guitarcenter.com
circulaire.crites-riddell.com
circulaire.librairiesboyer.qc.ca
circular.atwoods.com
circular.fredsinc.com
circular.justsavefoods.com
circular.marcs.com
circular.mrsgreens.com
circulars.939themix.com
circulars.al.com
circulars.alamogordonews.com
circulars.alaskanequipmenttrader.com
circulars.alaskastar.com
circulars.alliednews.com
circulars.andovertownsman.com
circulars.ansonrecord.com
circulars.apartmenttherapy.com
circulars.atchisonglobenow.com
circulars.auburnjournal.com
circulars.beavercreeknewscurrent.com
circulars.benningtonbanner.com
circulars.berksmontnews.com
circulars.bladenjournal.com
circulars.buchheits.com
circulars.burgtelegram.com
circulars.burlesoncrowley.com
circulars.canoncitydailyrecord.com
circulars.capitalgazette.com
circulars.carriagetownenews.com
circulars.carrollcountytimes.com
circulars.claiborneprogress.net
circulars.cleburnetimesreview.com
circulars.cleveland.com
circulars.clintonnc.com
circulars.colfaxrecord.com
circulars.coloradodaily.com
circulars.commercejournal.com
circulars.contracostatimes.com
circulars.coopercrier.com
circulars.currentargus.com
circulars.daily-journal.com
circulars.daily-times.com
circulars.dailyastorian.com
circulars.dailycall.com
circulars.dailycamera.com
circulars.dailyfreeman.com
circulars.dailylocal.com
circulars.dailytribune.com
circulars.dasselcokato.com
circulars.delanoheraldjournal.com
circulars.delconewsnetwork.com
circulars.delcotimes.com
circulars.demingheadlight.com
circulars.denverncweekly.com
circulars.derrynews.com
circulars.deseretnews.com
circulars.durantdemocrat.com
circulars.edhtelegraph.com
circulars.elkintribune.com
circulars.englewoodindependent.com
circulars.farmtalknewspaper.com
circulars.fayettetribune.com
circulars.folsomtelegraph.com
circulars.fortmorgantimes.com
circulars.fox17online.com
circulars.fox40.com
circulars.fox59.com
circulars.fox6now.com
circulars.fox8.com
circulars.foxradio.com
circulars.galioninquirer.com
circulars.gazette.com
circulars.gcnewsgazette.com
circulars.gosanangelo.com
circulars.goskagit.com
circulars.greenacressells.com
circulars.guff.com
circulars.gulflive.com
circulars.harlandaily.com
circulars.heraldjournal.com
circulars.hgazette.com
circulars.hhcourier.com
circulars.homemagonline.com
circulars.hot931.com
circulars.hpj.com
circulars.humboldtbeacon.com
circulars.huntersvilleherald.com
circulars.independentmail.com
circulars.insidebayarea.com
circulars.inyork.com
circulars.journal-advocate.com
circulars.katradio.com
circulars.kbjr6.com
circulars.kfor.com
circulars.kimt.com
circulars.kyma.com
flyertown.ca

Other certificates including the domain name flyertown.ca

(limited to 100 certificates)
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
feeds.flyertown.ca
flyertown.ca
api.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca
flyertown.ca
editorials.circularhub.com
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
flyertown.ca
api.flyertown.ca
www.flyertown.ca
flyertown.ca
flyertown.ca
www.flyertown.ca

Certificate

The complete raw certificate details for flyertown.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPwjCCDqqgAwIBAgISA6PMndjXY3lf82vm1PkDxGN3MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDMyMTM1MjdaFw0y
MDA2MDEyMTM1MjdaMBcxFTATBgNVBAMTDGZseWVydG93bi5jYTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAOSEjmEHVIX/Z/16+7sogqHhDxNJs2ueIpqo
9F1fBC1JRjs+9bZkQvZBMNDw4EJE/Erret/GlpQ1K1AZyiBR2TKVs5s1FMKirjau
MgMs3NASLWWM7M6TSq5qgzAjntbgCpl5dhLxEehi3N8U4MFEip8Luqxv4n/8rRaY
C6oaRGzJZdyGWZqA8JOKXJXH//KynlHtuHMxFl1MKCRCjz18QRrbBBl4BV1uLG78
rcrPugItVQSh7n5t3mK/Ad7Jr6iawMMrP0Y3/ZdXCdrWqJsw9c0IqPeOjgvxWdxg
mRUEf39Cb4GOMeXqPnLhCp6dwCauMneg7Tw2M9PUymXuhUuvjOECAwEAAaOCDNMw
ggzPMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUE9gBlY4tfQgqvEHQ1ZnaYWtMxDMw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzCCCoUGA1UdEQSCCnwwggp4ghxidXllcnNndWlkZS5ndWl0YXJjZW50ZXIuY29t
gh1jaXJjdWxhaXJlLmNyaXRlcy1yaWRkZWxsLmNvbYIgY2lyY3VsYWlyZS5saWJy
YWlyaWVzYm95ZXIucWMuY2GCFGNpcmN1bGFyLmF0d29vZHMuY29tghVjaXJjdWxh
ci5mcmVkc2luYy5jb22CGmNpcmN1bGFyLmp1c3RzYXZlZm9vZHMuY29tghJjaXJj
dWxhci5tYXJjcy5jb22CFmNpcmN1bGFyLm1yc2dyZWVucy5jb22CF2NpcmN1bGFy
cy45Mzl0aGVtaXguY29tghBjaXJjdWxhcnMuYWwuY29tghxjaXJjdWxhcnMuYWxh
bW9nb3Jkb25ld3MuY29tgiRjaXJjdWxhcnMuYWxhc2thbmVxdWlwbWVudHRyYWRl
ci5jb22CGGNpcmN1bGFycy5hbGFza2FzdGFyLmNvbYIYY2lyY3VsYXJzLmFsbGll
ZG5ld3MuY29tgh1jaXJjdWxhcnMuYW5kb3ZlcnRvd25zbWFuLmNvbYIZY2lyY3Vs
YXJzLmFuc29ucmVjb3JkLmNvbYIeY2lyY3VsYXJzLmFwYXJ0bWVudHRoZXJhcHku
Y29tgh5jaXJjdWxhcnMuYXRjaGlzb25nbG9iZW5vdy5jb22CG2NpcmN1bGFycy5h
dWJ1cm5qb3VybmFsLmNvbYIkY2lyY3VsYXJzLmJlYXZlcmNyZWVrbmV3c2N1cnJl
bnQuY29tgh5jaXJjdWxhcnMuYmVubmluZ3RvbmJhbm5lci5jb22CG2NpcmN1bGFy
cy5iZXJrc21vbnRuZXdzLmNvbYIbY2lyY3VsYXJzLmJsYWRlbmpvdXJuYWwuY29t
ghdjaXJjdWxhcnMuYnVjaGhlaXRzLmNvbYIaY2lyY3VsYXJzLmJ1cmd0ZWxlZ3Jh
bS5jb22CHWNpcmN1bGFycy5idXJsZXNvbmNyb3dsZXkuY29tgiJjaXJjdWxhcnMu
Y2Fub25jaXR5ZGFpbHlyZWNvcmQuY29tghxjaXJjdWxhcnMuY2FwaXRhbGdhemV0
dGUuY29tgh9jaXJjdWxhcnMuY2FycmlhZ2V0b3duZW5ld3MuY29tgiBjaXJjdWxh
cnMuY2Fycm9sbGNvdW50eXRpbWVzLmNvbYIfY2lyY3VsYXJzLmNsYWlib3JuZXBy
b2dyZXNzLm5ldIIhY2lyY3VsYXJzLmNsZWJ1cm5ldGltZXNyZXZpZXcuY29tghdj
aXJjdWxhcnMuY2xldmVsYW5kLmNvbYIXY2lyY3VsYXJzLmNsaW50b25uYy5jb22C
GmNpcmN1bGFycy5jb2xmYXhyZWNvcmQuY29tghtjaXJjdWxhcnMuY29sb3JhZG9k
YWlseS5jb22CHWNpcmN1bGFycy5jb21tZXJjZWpvdXJuYWwuY29tgh5jaXJjdWxh
cnMuY29udHJhY29zdGF0aW1lcy5jb22CGWNpcmN1bGFycy5jb29wZXJjcmllci5j
b22CGmNpcmN1bGFycy5jdXJyZW50YXJndXMuY29tghtjaXJjdWxhcnMuZGFpbHkt
am91cm5hbC5jb22CGWNpcmN1bGFycy5kYWlseS10aW1lcy5jb22CG2NpcmN1bGFy
cy5kYWlseWFzdG9yaWFuLmNvbYIXY2lyY3VsYXJzLmRhaWx5Y2FsbC5jb22CGWNp
cmN1bGFycy5kYWlseWNhbWVyYS5jb22CGmNpcmN1bGFycy5kYWlseWZyZWVtYW4u
Y29tghhjaXJjdWxhcnMuZGFpbHlsb2NhbC5jb22CGmNpcmN1bGFycy5kYWlseXRy
aWJ1bmUuY29tghpjaXJjdWxhcnMuZGFzc2VsY29rYXRvLmNvbYIhY2lyY3VsYXJz
LmRlbGFub2hlcmFsZGpvdXJuYWwuY29tgh5jaXJjdWxhcnMuZGVsY29uZXdzbmV0
d29yay5jb22CGGNpcmN1bGFycy5kZWxjb3RpbWVzLmNvbYIdY2lyY3VsYXJzLmRl
bWluZ2hlYWRsaWdodC5jb22CHGNpcmN1bGFycy5kZW52ZXJuY3dlZWtseS5jb22C
F2NpcmN1bGFycy5kZXJyeW5ld3MuY29tghljaXJjdWxhcnMuZGVzZXJldG5ld3Mu
Y29tghxjaXJjdWxhcnMuZHVyYW50ZGVtb2NyYXQuY29tghpjaXJjdWxhcnMuZWRo
dGVsZWdyYXBoLmNvbYIaY2lyY3VsYXJzLmVsa2ludHJpYnVuZS5jb22CImNpcmN1
bGFycy5lbmdsZXdvb2RpbmRlcGVuZGVudC5jb22CH2NpcmN1bGFycy5mYXJtdGFs
a25ld3NwYXBlci5jb22CHGNpcmN1bGFycy5mYXlldHRldHJpYnVuZS5jb22CHWNp
cmN1bGFycy5mb2xzb210ZWxlZ3JhcGguY29tgh1jaXJjdWxhcnMuZm9ydG1vcmdh
bnRpbWVzLmNvbYIZY2lyY3VsYXJzLmZveDE3b25saW5lLmNvbYITY2lyY3VsYXJz
LmZveDQwLmNvbYITY2lyY3VsYXJzLmZveDU5LmNvbYIVY2lyY3VsYXJzLmZveDZu
b3cuY29tghJjaXJjdWxhcnMuZm94OC5jb22CFmNpcmN1bGFycy5mb3hyYWRpby5j
b22CHGNpcmN1bGFycy5nYWxpb25pbnF1aXJlci5jb22CFWNpcmN1bGFycy5nYXpl
dHRlLmNvbYIbY2lyY3VsYXJzLmdjbmV3c2dhemV0dGUuY29tghljaXJjdWxhcnMu
Z29zYW5hbmdlbG8uY29tghZjaXJjdWxhcnMuZ29za2FnaXQuY29tgh1jaXJjdWxh
cnMuZ3JlZW5hY3Jlc3NlbGxzLmNvbYISY2lyY3VsYXJzLmd1ZmYuY29tghZjaXJj
dWxhcnMuZ3VsZmxpdmUuY29tghljaXJjdWxhcnMuaGFybGFuZGFpbHkuY29tghtj
aXJjdWxhcnMuaGVyYWxkam91cm5hbC5jb22CFmNpcmN1bGFycy5oZ2F6ZXR0ZS5j
b22CF2NpcmN1bGFycy5oaGNvdXJpZXIuY29tghtjaXJjdWxhcnMuaG9tZW1hZ29u
bGluZS5jb22CFGNpcmN1bGFycy5ob3Q5MzEuY29tghFjaXJjdWxhcnMuaHBqLmNv
bYIcY2lyY3VsYXJzLmh1bWJvbGR0YmVhY29uLmNvbYIgY2lyY3VsYXJzLmh1bnRl
cnN2aWxsZWhlcmFsZC5jb22CHWNpcmN1bGFycy5pbmRlcGVuZGVudG1haWwuY29t
ghtjaXJjdWxhcnMuaW5zaWRlYmF5YXJlYS5jb22CFGNpcmN1bGFycy5pbnlvcmsu
Y29tgh5jaXJjdWxhcnMuam91cm5hbC1hZHZvY2F0ZS5jb22CFmNpcmN1bGFycy5r
YXRyYWRpby5jb22CE2NpcmN1bGFycy5rYmpyNi5jb22CEmNpcmN1bGFycy5rZm9y
LmNvbYISY2lyY3VsYXJzLmtpbXQuY29tghJjaXJjdWxhcnMua3ltYS5jb22CDGZs
eWVydG93bi5jYTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisG
AQQB1nkCBAIEgfcEgfQA8gB3AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaB
cUVYAAABcKKKJMYAAAQDAEgwRgIhAMjF3ipoTtNjoITQe5ZMYyX172k4/5zsqGGf
JoQ6Kql3AiEAz+J+TwYEQ7d8NH/9GxHDqF01EMeE97IK/ASQVQJY1OgAdwAHt1wb
5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXCiiiTvAAAEAwBIMEYCIQCO
uL2fMpMVQlax33aBRyGNRTALCqPPz0ATxmCcM0vOPgIhAOIgm2KQR1BNhHr+3C8w
Olqbeu4AxrZcReZvnm39Shx6MA0GCSqGSIb3DQEBCwUAA4IBAQBb6whHajshOYOR
L3wDrjy98d6I5pealxzYoixxLXO1dHqLROIKSQByvaiPcni+HdfB2fxgHRzuvXak
U0jKiI07V7Rn4eHOvCEKhke4YM6txMiqQR/4n8eTo5b+sp6cpCpgAOwHmwFVVKlN
JJD62Pu8U3Z9sZo1sShBgRdQFN116069cne9BWqsK58VmV2ae5b4PnhiF+jnw6f2
V9B0caSZhTfaKZ5V4smhezhQcmzzxflCTWmiggjgG0Znqqx82OtE1b5/IyxAOIQq
JeMaDRDhIXeW05kRM+6H4fH/QqTsw4tPpzQifilbHlSSuBROE8ej06o4KngGk1ib
gcpoLcDm
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ISOYQdUhf9n/Xr7uyiC
oeEPE0mza54imqj0XV8ELUlGOz71tmRC9kEw0PDgQkT8Sut638aWlDUrUBnKIFHZ
MpWzmzUUwqKuNq4yAyzc0BItZYzszpNKrmqDMCOe1uAKmXl2EvER6GLc3xTgwUSK
nwu6rG/if/ytFpgLqhpEbMll3IZZmoDwk4pclcf/8rKeUe24czEWXUwoJEKPPXxB
GtsEGXgFXW4sbvytys+6Ai1VBKHufm3eYr8B3smvqJrAwys/Rjf9l1cJ2taomzD1
zQio946OC/FZ3GCZFQR/f0JvgY4x5eo+cuEKnp3AJq4yd6DtPDYz09TKZe6FS6+M
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317074865703205937368851095952849595818871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 21:35:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 21:35:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flyertown.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28847699414941429768585956254270194572612572790585395959858528282266740866854469072789002306718278768777095416024626060585754663343379635410075450736991682266376664556682383697481472402883444908797579616659578123749425574012910885101445659884342844043200459983720366209653502853445815404787341791301303438939461323373710495514641611704676795081362328439420516501213221254035575966125620590136333251750298650637614369882857964824360163881661264511778258639514818558479020177197753211628525213761628584393304661768578508263743377476683969973603895566708926278555663293653461337693601584046910891397649706754736259042529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13d801958e2d7d082abc41d0d599da616b4cc433
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyersguide.guitarcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulaire.crites-riddell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulaire.librairiesboyer.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.atwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.fredsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.justsavefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.marcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circular.mrsgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.939themix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.alamogordonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.alaskanequipmenttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.alaskastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.alliednews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.andovertownsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.ansonrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.apartmenttherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.atchisonglobenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.auburnjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.beavercreeknewscurrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.benningtonbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.berksmontnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.bladenjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.buchheits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.burgtelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.burlesoncrowley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.canoncitydailyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.carriagetownenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.carrollcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.claiborneprogress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.cleburnetimesreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.clintonnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.colfaxrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.coloradodaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.commercejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.contracostatimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.coopercrier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.currentargus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.daily-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.daily-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailyastorian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailycall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailycamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailyfreeman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailylocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.dasselcokato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.delanoheraldjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.delconewsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.delcotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.demingheadlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.denverncweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.derrynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.deseretnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.durantdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.edhtelegraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.elkintribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.englewoodindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.farmtalknewspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fayettetribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.folsomtelegraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fortmorgantimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox17online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox6now.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.fox8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.foxradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.galioninquirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.gcnewsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.gosanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.goskagit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.greenacressells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.guff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.gulflive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.harlandaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.heraldjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.hgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.hhcourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.homemagonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.hot931.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.hpj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.humboldtbeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.huntersvilleherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.insidebayarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.inyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.journal-advocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.katradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kbjr6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kfor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kimt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circulars.kyma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyertown.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a28a24c60000040300483046022100c8c5de2a684ed363a084d07b964c6325f5ef6938ff9ceca8619f26843a2aa977022100cfe27e4f060443b77c347ffd1b11c3a85d3510c784f7b20afc0490550258d4e800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a28a24ef00000403004830460221008eb8bd9f3293154256b1df768147218d45300b0aa3cfcf4013c6609c334bce3e022100e2209b629047504d847afedc2f303a5a9b7aee00c6b65c45e66f9e6dfd4a1c7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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