local.duluthbudgeteer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:68:d7:23:83:e7:41:50:ac:57:e1:3d:c7:f4:cb:ee:40 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=local.duluthbudgeteer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:68:d7:23:83:e7:41:50:ac:57:e1:3d:c7:f4:cb:ee:40
Serial Number (int): 344164829732789798215786447849907167161920
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:4d:9e:f9:1b:5a:55:d1:e2:ec:22:71:7e:04:5f:9a:eb:c9:88:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:de:e2:c3:44:34:c4:95:69:32:02:34:12:51:a2:94:95:2e:d7:44
Fingerprint (sha256): e9:e3:2b:3a:a0:99:46:f8:8a:6e:e7:a6:be:61:88:54:7a:1e:fc:f7:a6:d3:21:1f:61:f7:c4:be:de:0b:87:a5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.duluthbudgeteer.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.duluthbudgeteer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alliston.simcoe.com
altoonamirror.wanderful.ownlocal.com
ashland.apg-wi.com
bay-chronicle.origami.neighbourly.co.nz
etobicoke.toronto.com
forestlake.presspubs.com
gm.local.kentonline.co.uk
greecenewsny.wanderful.ownlocal.com
hamilton-press.origami.neighbourly.co.nz
horowhenua-mail.origami.neighbourly.co.nz
kapi-mana-news.origami.neighbourly.co.nz
kawarthalakes.mykawartha.com
local.adirondackexpress.com
local.aldianews.com
local.altustimes.com
local.ansonrecord.com
local.argusobserver.com
local.aspentimes.com
local.bexleytimes.co.uk
local.bigspringherald.com
local.bramptonguardian.com
local.burnettcountysentinel.com
local.carrollspaper.com
local.cessnockadvertiser.com.au
local.cheshirelife.co.uk
local.clintonnc.com
local.coastalscene24.co.uk
local.countrysmallholding.com
local.dailytimesleader.com
local.diariolasamericas.com
local.dl-online.com
local.duluth.com
local.duluthbudgeteer.com
local.exmouthherald.co.uk
local.exmouthjournal.co.uk
local.falmouthoutlook.com
local.greatyarmouthmercury.co.uk
local.hamiltonnews.com
local.hertfordshirelife.co.uk
local.hertsad.co.uk
local.ifallsjournal.com
local.kelownadailycourier.ca
local.kendallcountynow.com
local.lancashirelife.co.uk
local.localcommunitynews.com
local.loganbanner.com
local.mammothtimes.com
local.maplecreeknews.com
local.montrosepress.com
local.moodycountyenterprise.com
local.moorefieldexaminer.com
local.mykawartha.com
local.newcastlestar.com.au
local.newjerseyhills.com
local.observer-reporter.com
local.pilotonline.com
local.sandmountainreporter.com
local.sentinelsource.com
local.sequoyahcountytimes.com
local.sidmouthherald.co.uk
local.ss-times.com
local.ssnewstelegram.com
local.styleweekly.com
local.surreylife.co.uk
local.sweetwaterreporter.com
local.tahoedailytribune.com
local.the-messenger.com
local.thealbionnewera.com
local.theeasleyprogress.com
local.theforecaster.net
local.theshaunavonstandard.com
local.travelnewmex.com
local.viannews.com
local.victoriaadvocate.com
local.vp-mi.com
local.whatsuppub.com
local.winterhavensun.com
local.wisbechstandard.co.uk
local.wnypapers.com
marketplace-ml.tj.news
marlborough-midweek.origami.neighbourly.co.nz
matamata-chronicle.origami.neighbourly.co.nz
mauinews.wanderful.ownlocal.com
muskegonshopping.mlive.com
mylocal.carrollcountytimes.com
mylocal.chicagotribune.com
mylocal.dailypress.com
mylocal.muleshoejournal.com
mylocal.sun-sentinel.com
mylocal.vagazette.com
nor-west-news.origami.neighbourly.co.nz
north-harbour-news.origami.neighbourly.co.nz
north-taranaki-midweek.origami.neighbourly.co.nz
northbay.northbaynipissing.com
northyork.toronto.com
origaminewsmonitor.wahpetondailynews.com
santacruz.wanderful.ownlocal.com
smithsfalls.insideottawavalley.com
st.local.kentonline.co.uk
whitebear.presspubs.com

Other certificates including the domain name duluthbudgeteer.com

(limited to 100 certificates)
local.dissexpress.co.uk
www.forumcomm.com
www.forumcomm.com
statejournal.wanderful.ownlocal.com
local.wisbechstandard.co.uk
local.moodycountyenterprise.com
local.eastlondonadvertiser.co.uk
mylocal.journal-news.com
www.forumcomm.com
www.forumcomm.com
www.forumcomm.com
cms.forumcomm.com
www.forumcomm.com
www.forumcomm.com
www.forumcomm.com
bloorwestyork.toronto.com
local.spokane.exchange
cms.forumcomm.com
www.forumcomm.com
www.forumcomm.com
local.duluthbudgeteer.com

Certificate

The complete raw certificate details for local.duluthbudgeteer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RFYduVrtyMCU5yGYR2L
Zvsn2cOfxiRMLFzt5Fxn2y8CIgRdRZSm5GIU4Y02phRbhpg1rkJpYAbaFjceNoH3
S4eIvIh7VmGngzxCPIY+iVeYW1ozsavA7uGswGrTwbS4Gt39+X18qDbmH4PNm8kd
WH5SGxBNWUCN8C0gVjdBjHA3U3xVW690pCV9umTn+wkRjgtqQsVTiw5RT19zSRx4
jQG0dBYmDOEns87BQwMtuVConjQAdxXHikrnuViWL1FyjG+kK8SIdS0RDGAkqzHO
dIhpT8k3hjGibBg+f+PkQ8IqbemFID5AuXaRm49vFwGzoJBW8VDZgv/6XuEGBXHJ
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344164829732789798215786447849907167161920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-28 10:54:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-26 10:54:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.duluthbudgeteer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27907218814001920117539262179347146747736663518869626165798490709534712062672204694310446626839161501399235157859660515918817684080587038188851586497114061744837124268533604991520238030446415183375354180705813141828513747539139736877923940523803823622730812422672561321842048550704314313759338124956146615235508481346627274215990629568162851991815929945046347166812695062791760342436628026977632515272400108321174613798186614673372424089994207040779736158660111454549533696616720298474400313693325388423214596229118871012510564652622974934171475255498485826724241795247804360506726886804527099438538439634198832728383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a14d9ef91b5a55d1e2ec22717e045f9aebc98821
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliston.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altoonamirror.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashland.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bay-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etobicoke.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestlake.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greecenewsny.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamilton-press.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horowhenua-mail.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapi-mana-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawarthalakes.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.adirondackexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.aldianews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.altustimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ansonrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.argusobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.aspentimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bexleytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bigspringherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bramptonguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.burnettcountysentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carrollspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cessnockadvertiser.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.clintonnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.coastalscene24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrysmallholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailytimesleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.diariolasamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluthbudgeteer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.falmouthoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.greatyarmouthmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hamiltonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ifallsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kelownadailycourier.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kendallcountynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lancashirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.localcommunitynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.loganbanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mammothtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maplecreeknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrosepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moodycountyenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.moorefieldexaminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mykawartha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newcastlestar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newjerseyhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observer-reporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sandmountainreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sentinelsource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sequoyahcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sidmouthherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ss-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ssnewstelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.styleweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.surreylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sweetwaterreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tahoedailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.the-messenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thealbionnewera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeasleyprogress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theforecaster.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theshaunavonstandard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.travelnewmex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.viannews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.victoriaadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vp-mi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whatsuppub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.winterhavensun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wisbechstandard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wnypapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace-ml.tj.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamata-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauinews.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskegonshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.carrollcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.chicagotribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.dailypress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.muleshoejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.vagazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nor-west-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-harbour-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-taranaki-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northbay.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origaminewsmonitor.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santacruz.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithsfalls.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitebear.presspubs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017aecf74ecc000004030046304402203aec034ce2f75834adab7f797f595242de0c7079b39b66f9adab3e3a0eebd56302202032aa3a3659d9353b28add4f16f3b36502888f169f288ce69e81ffbc35138db0077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017aecf74f1d0000040300483046022100c549af9acff4f118ea7d26317473df94ddc2295956e09a61b9ac3282be170d3a022100a261b5c3b675b3bc4647fd1e80e74ccb6d7857575de9f02b9f0dbae5076e3b10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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