legacy.denverpost.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 31:eb:db:0a:4d:82:db:90:10:a7:f6:c5:ca:a8:b5:95 was issued on by Google Trust Services LLC.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=legacy.denverpost.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 31:eb:db:0a:4d:82:db:90:10:a7:f6:c5:ca:a8:b5:95
Serial Number (int): 66356804219189930092041999280658494869
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9b:a4:10:87:73:e4:1b:d1:34:5e:7a:26:12:39:4a:6d:26:6c:52:c3
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 09:84:9d:b0:69:b0:3a:8c:e4:94:77:8d:85:d9:88:59:78:d9:f6:66
Fingerprint (sha256): d2:56:fd:70:d3:f4:c8:6a:fe:14:01:61:f9:e6:1b:c0:5f:e7:54:85:c5:07:60:7c:39:e0:3b:bc:7a:d1:4c:36

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/Wgm2thLm0yE
CRL Distribution Point: http://crls.pki.goog/gts1d4/G0WQDFzdgTE.crl

Check the revocation status for certificate legacy.denverpost.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.denverpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legacy.denverpost.com
mobileobits.advocate-news.com
obituaries.advocate-news.com
mobileobits.gazettes.com
obituaries.gazettes.com
mobileobits.mendocinobeacon.com
obituaries.mendocinobeacon.com
obituaries.nydailynews.com
obits.ocregister.com
obituaries.pilotonline.com
mobileobits.pvnews.com
obituaries.pvnews.com
dailytribune.rememberingmi.us
grandtraverse.rememberingmi.us
macombdaily.rememberingmi.us
morningstarpublishing.rememberingmi.us
sourcenewspapers.rememberingmi.us
theleader.rememberingmi.us
themorningsun.rememberingmi.us
theoaklandpress.rememberingmi.us
voicenews.rememberingmi.us
trentonian.rememberingnj.us
dailyfreeman.rememberingny.us
oneidadispatch.rememberingny.us
saratogian.rememberingny.us
troyrecord.rememberingny.us
morningjournal.rememberingoh.us
news-herald.rememberingoh.us
berksmontnews.rememberingpa.us
buckslocalnews.rememberingpa.us
dailylocal.rememberingpa.us
delconewsnetwork.rememberingpa.us
delcotimes.rememberingpa.us
mainlinemedianews.rememberingpa.us
montgomerynews.rememberingpa.us
phoenixvillenews.rememberingpa.us
pottsmerc.rememberingpa.us
southernchestercountyweeklies.rememberingpa.us
southjerseylocalnews.rememberingpa.us
thereporteronline.rememberingpa.us
timesherald.rememberingpa.us
obituaries.tbrnews.com
membership.mcall.com
chicagomag.com
insidebiz.com
www.insidebiz.com
membership.sun-sentinel.com
membership.orlandosentinel.com
membership.pilotonline.com
membership.dailypress.com
membership.courant.com
membership.nydailynews.com
classified.orlandosentinel.com
membership.baltimoresun.com
membership.capitalgazette.com
membership.chicagotribune.com
openhomes.delmartimes.net
openhomes.lajollalight.com
openhomes.encinitasadvocate.com
openhomes.pomeradonews.com
openhomes.ramonasentinel.com
openhomes.ranchosantafereview.com
myappstest.tribpub.com
statsdigital.com
myapps.tribpub.com
marketplace.baltimoresun.com
askingeric.com
www.askingeric.com
cportal.medianewsgroup.com
cportal-remote.medianewsgroup.com
placeanad.sandiegouniontribune.com

Other certificates including the domain name denverpost.com

(limited to 100 certificates)
cdn-le4.arkadiumhosted.com
myaccount.mercurynews.com
dns-vetting1-jeffg-noah.map.fastly.net
denverpost.com
dns-vetting1m.map.fastly.net
jobs.bayareanewsgroup.com
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
dns-vetting1h.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1j.map.fastly.net
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
jobs.bayareanewsgroup.com
cdn-le4.arkadiumhosted.com
dfm.map.fastly.net
jobs.bayareanewsgroup.com
ads.denverpost.com
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1i.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
legacy.denverpost.com
twp.denverpost.com
dns-vetting1m.map.fastly.net
mylocal.denverpost.com
vpn.medianewsgroup.com
jobs.bayareanewsgroup.com
dfm.map.fastly.net
twp.denverpost.com
test.checkout.mercurynews.com
hiring.wandtv.com
test.myaccount.mercurynews.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
dfm.map.fastly.net
dev.myaccount.mercurynews.com
dns-vetting1m.map.fastly.net
promote.denverpost.com
businessdirectory.denverpost.com
blogs.denverpost.com
twp.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
ads.denverpost.com
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
jobs.bayareanewsgroup.com
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
denverpost.com
dptv.denverpost.com
dns-vetting1a.map.fastly.net
twp.denverpost.com
twp.denverpost.com
dfm.map.fastly.net
dfm.map.fastly.net
dfm.map.fastly.net
hiring.wandtv.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
games.denverpost.com
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
mg2access.mercurynews.com
hiring.wandtv.com
businessdirectory.denverpost.com
ssl.smugmug.com
dns-vetting1a.map.fastly.net
secure.www.denverpost.com
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
uploads.denverpost.com
ssl.smugmug.com

Certificate

The complete raw certificate details for legacy.denverpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj+O9BSNgGRg9NWu+Ekg
U54MbELkIdnuV3npp+8D9CMVxqsw1wwOk7dG0pb03U/iiHqA4Pp2/c8mugIV/rwF
T74NuPL1w5YzoxYL+6S5/vzXUEaDgngblJcxIIJml5MNV0dPhUSFVsAoGgiNesrx
pWhTBiGqjVskr+PDTMwEnOnwjj+542mRIf9fQ9RN59Q3ES2vRfy6ffrPiUsWWaew
SWU18LcRAhv6SRKlSxOwT/pi2gyPnzRLkFtvFIG08a5+DrHfzHi0ILLcJ9BiwOBd
uLfDlsPYnJ1PbE5NgVnPfAmuZuzZcptEhR0WU4gDSA2I4NHahKBZQg6E2732vYKP
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 66356804219189930092041999280658494869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 03:40:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-03 04:13:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.denverpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18967087565927344678684844622356078917041117752020071142092256749015877985254545628853677885877603803298170212123841674336082681095502119801127160159902812230960677211039545979628651487585326040841401611947608090455302538268010896766697527194495402888591315792377350640768686645388325085532871526580838121028289455130524294779099185543391952101818317289858369581913683215999556636187612974547636492614321078404239563304055883303143031148218008468234735742607845181705667854870873853178884858211180873496474865944311284215745071123417631413133292644770682468738068111614148571019808867899768831014483496319125188415253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ba4108773e41bd1345e7a2612394a6d266c52c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/Wgm2thLm0yE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2071 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.denverpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.advocate-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.advocate-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.gazettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.gazettes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.mendocinobeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.mendocinobeacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obits.ocregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.pvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytribune.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandtraverse.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macombdaily.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstarpublishing.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcenewspapers.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theleader.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themorningsun.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoaklandpress.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicenews.rememberingmi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trentonian.rememberingnj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyfreeman.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneidadispatch.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogian.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troyrecord.rememberingny.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningjournal.rememberingoh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-herald.rememberingoh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berksmontnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckslocalnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailylocal.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delconewsnetwork.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delcotimes.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlinemedianews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montgomerynews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixvillenews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottsmerc.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernchestercountyweeklies.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southjerseylocalnews.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereporteronline.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesherald.rememberingpa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.tbrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.mcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagomag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.courant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.nydailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.capitalgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.delmartimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.lajollalight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.encinitasadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.pomeradonews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ramonasentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ranchosantafereview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myappstest.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statsdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myapps.tribpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askingeric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askingeric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal.medianewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal-remote.medianewsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeanad.sandiegouniontribune.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/G0WQDFzdgTE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fe6b2e9ce0000040300483046022100d1798d2cc95c7004433b790ac7a7514a4cefb7894917bdeb25dafd2e642c8477022100faee0055973bf79d9932cc51464386fda57c8b4f0b362c6f447aabf987bd4a4b00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fe6b2e9f5000004030047304502204339a12f1b851ab66e84cdebdc08985328fd648e73f5ded88cf769fe6ca76680022100f5df7756ffe79441b88ec4e2b0febaac07d4bc591afd185ac7f4ed26765b5878
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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