shopping.nj.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:70:00:47:06:2d:dc:52:18:a3:b4:f7:1f:2e:d8:e3:ea was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shopping.nj.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:70:00:47:06:2d:dc:52:18:a3:b4:f7:1f:2e:d8:e3:ea
Serial Number (int): 313889217277173817902161646093286074016746
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:56:e6:18:d6:c6:67:e8:18:28:46:0b:6f:2a:11:3e:bd:1d:c8:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:77:68:ef:1e:e9:53:5b:25:84:07:ce:87:0a:e6:7b:ff:7c:63:79
Fingerprint (sha256): d6:b8:1f:ae:d9:45:dc:4c:cc:c3:e3:22:47:93:8a:84:15:a4:fb:07:38:39:54:32:88:5e:d9:31:48:27:d3:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shopping.nj.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shopping.nj.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adsack.wanderful.ownlocal.com
aliceechonews.wanderful.ownlocal.com
annarborshopping.mlive.com
brownwoodbulletin.wanderful.ownlocal.com
eastgwillimbury.yorkregion.com
em.local.kentonline.co.uk
ghhopestar.wanderful.ownlocal.com
inlandvalley.wanderful.ownlocal.com
local.adirondackexpress.com
local.alexcityoutlook.com
local.amestrib.com
local.baystatebanner.com
local.berwickshirenews.co.uk
local.bladenjournal.com
local.buckscountycouriertimes.com
local.caledonianrecord.com
local.cgsentinel.com
local.coloradocommunitymedia.com
local.columbiatribune.com
local.deesidepiper.co.uk
local.derbyshirelife.co.uk
local.dl-online.com
local.dodgeglobe.com
local.durhamregion.com
local.edp24.co.uk
local.elystandard.co.uk
local.fakenhamtimes.co.uk
local.fayobserver.com
local.forfardispatch.co.uk
local.gcnewsgazette.com
local.goupstate.com
local.granitefallsnews.com
local.greeleytribune.com
local.guelphmercury.com
local.gvnews.com
local.haverhillecho.co.uk
local.hemeltoday.co.uk
local.heraldsun.com.au
local.hsvvoice.com
local.ipswichstar.co.uk
local.islingtongazette.co.uk
local.jcsentinel.com
local.kitchenerpost.ca
local.lajuntatribunedemocrat.com
local.lancashirelife.co.uk
local.lancasterguardian.co.uk
local.lep.co.uk
local.leylandguardian.co.uk
local.linncountyleader.com
local.londonderrysentinel.co.uk
local.miamiok.com
local.montevistajournal.com
local.morleyobserver.co.uk
local.muswellbrookchronicle.com.au
local.mycaldwellcounty.com
local.mysuburbanlife.com
local.ncnewspress.com
local.news-sun.com
local.newstrib.com
local.norfolkmag.co.uk
local.northantstelegraph.co.uk
local.nrcolumbus.com
local.ntnews.com.au
local.okeenerecord.com
local.osceolasun.com
local.ottawasun.com
local.petoskeynews.com
local.princewilliamtimes.com
local.redwoodfallsgazette.com
local.reporter-times.com
local.romfordrecorder.co.uk
local.shorehamherald.co.uk
local.ssnewstelegram.com
local.sudburymercury.co.uk
local.sunpeaksnews.com
local.sussexlife.co.uk
local.tctimes.com
local.themercury.com.au
local.therolladailynews.com
local.thewesterlysun.com
local.times-online.com
local.willcoxrangenews.com
local.willistonherald.com
local.worthingherald.co.uk
local.wvnews.com
local.yakimaherald.com
local.yorkshirepost.co.uk
longbeachpress.wanderful.ownlocal.com
marketplace-ep.tj.news
marketplace-kr.tj.news
muskokaregion.muskokaregion.com
mylocal.carrollcountytimes.com
mylocal.orlandosentinel.com
origaminewsmonitor.wahpetondailynews.com
shopping.masslive.com
shopping.nj.com
shopping.nola.com
stouffville.yorkregion.com
sturgisjournal.wanderful.ownlocal.com
whitebear.presspubs.com

Other certificates including the domain name nj.com

(limited to 100 certificates)
news.nj.com
hiring.wandtv.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
ssl374383.cloudflaressl.com
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
ssl374381.cloudflaressl.com
local.flamboroughreview.com

hunterdonads.nj.com
foreclosures.al.com
br.bikeradar.com
login.pennlive.com
mobileobits.nj.com
businessfinder.al.com
star2.arcpublishing.com
dns-vetting1-marita-ardnek.map.fastly.net
autos.mlive.com
advancelocal.map.fastly.net
ssl374383.cloudflaressl.com
local.panolawatchman.com
li.lisecurelink.com
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
br.bikeradar.com
advancelocal.map.fastly.net
nj-skypeaccess.advancelocal.net
local.crestonnews.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.com
dns-vetting1-marita-ardnek.map.fastly.net
store.nj.com
li.lisecurelink.com
ssl374381.cloudflaressl.com
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.map.fastly.net
flyertown.ca
obits.nj.com
hiring.wandtv.com
ssl374383.cloudflaressl.com
www-stage.nj.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
ssl374383.cloudflaressl.com
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
li.lisecurelink.com
bridgetonads.nj.com
dns-vetting1-marita-ardnek.map.fastly.net
grocerygiveaway.nj.com
advancelocal.map.fastly.net
jobs.thejobnetwork.com
dns-vetting1-marita-ardnek.map.fastly.net
articles-stage.nj.com
li.lisecurelink.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
obits.nj.com
jobs.thejobnetwork.com
obits.nj.com
sanssl2.stats.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
ssl374383.cloudflaressl.com
advancelocal.web.arc-cdn.net
nwajobfinder.com
al-skypeaccess.advancelocal.net
ssl121533.cloudflaressl.com
gloucester-sunbeamads.nj.com
dns-vetting1-marita-ardnek.map.fastly.net
hiring.wandtv.com

local.alexcityoutlook.com
star2.arcpublishing.com
login.al.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
nwajobfinder.com
jobs.thejobnetwork.com
foreclosures.nj.com
sanssl2.stats.com
businessfinder.al.com
dns-vetting1-marita-ardnek.map.fastly.net
oasc18.247realmedia.com
hiring.wandtv.com
conroe.communityimpact.com
dns-vetting1-marita-ardnek.map.fastly.net
mobileobits.nj.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
br.bikeradar.com
nj-skypeaccess.advancelocal.net
ssl374383.cloudflaressl.com
star4.arcpublishing.com
li.lisecurelink.com
nor-west-news.origami.neighbourly.co.nz

Certificate

The complete raw certificate details for shopping.nj.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6bDonOPuDWEBdSJ/xhG
tsDVoLGnoEQsqeDUM9TWZAeKKv6KAJoCkvptrbzsbJZOCOu7x0EVlRWrEsHAITGG
wSh/624QOaOeL5PH7Fde4MyQ1FFU2o+DHnC34ObMVzRElQMa0LZ/5Bm5CWYnon7w
/LhUaTHBW1R8k0yTSEhQWX9h4s2qS69oxaSTEqaaD8cGbHxo+dAQhxmkAWf78Da/
dQHqvq5vVM1zQncu8YMC30K5ePS+KQoaY4EHGcoeutu5HlwjiAP2lqdn9dUvbgyb
ah+TCNAFyTYcGwgnSE78sErvtAPtZjONjRv/sDWWNfdXeJa717fh/knWWmrHEGn+
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313889217277173817902161646093286074016746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 10:08:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 10:08:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shopping.nj.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22678891079663671756171651993664904378776325243540057936339343823848558154083805792902012690707161760619158991773979912887227477644717669207035041347473105323020369500692675321330957386622152696349457542175457116198106025093372249033940242306576145818177150625856095560229446216166947641792114707978787037721233313528002336114470093740129828015758584815629878878655348856056386489283192942303586851101778477593593883747378291162751495455988421704426486176823184934630497318126672044745730812634254870914438320317264723765397818992580566588984134281393593773771025877448945953209144472184609358781772625530689415675583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b456e618d6c667e81828460b6f2a113ebd1dc8ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2673 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsack.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliceechonews.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annarborshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownwoodbulletin.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastgwillimbury.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'em.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghhopestar.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlandvalley.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adirondackexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.alexcityoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.amestrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baystatebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.berwickshirenews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bladenjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.buckscountycouriertimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.caledonianrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cgsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coloradocommunitymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.columbiatribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.deesidepiper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.derbyshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dodgeglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.edp24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.elystandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fakenhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fayobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.forfardispatch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gcnewsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.goupstate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.granitefallsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greeleytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.guelphmercury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.gvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.haverhillecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hemeltoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.heraldsun.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hsvvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ipswichstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.islingtongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jcsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kitchenerpost.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lajuntatribunedemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lancashirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lancasterguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leylandguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.linncountyleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.londonderrysentinel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.miamiok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montevistajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.morleyobserver.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muswellbrookchronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mycaldwellcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mysuburbanlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ncnewspress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.news-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newstrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norfolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.northantstelegraph.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nrcolumbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ntnews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.okeenerecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.osceolasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ottawasun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.petoskeynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.princewilliamtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.redwoodfallsgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.reporter-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.romfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.shorehamherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ssnewstelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sudburymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunpeaksnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sussexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tctimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.themercury.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.therolladailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewesterlysun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willcoxrangenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.willistonherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.worthingherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yakimaherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yorkshirepost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longbeachpress.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-ep.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-kr.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokaregion.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.carrollcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origaminewsmonitor.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.masslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stouffville.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sturgisjournal.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitebear.presspubs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001701509c5e0000004030047304502203910fd161444de06072c91b0397532504e6099c8711923c1fa8019cdb61d1bd30221008222d58f59db9bb1564d892895f30e0bfa92c01a169f8802d711b3e24d7c316400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701509c6160000040300483046022100b87e059512a15fcdf72c4cc383e0178caa72119625e58d017ea22f331f36218c022100e6aeea1288d096c09f2574b655fb0ca2c84f88b299577c9045ba9cf776df6a0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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