local.mycaldwellcounty.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3a:85:31:3c:49:bd:54:53:d8:07:cf:8d:3c:94:f8:98:16 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=local.mycaldwellcounty.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3a:85:31:3c:49:bd:54:53:d8:07:cf:8d:3c:94:f8:98:16
Serial Number (int): 368362563977227706180229411124385664243734
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:d4:b9:f4:28:f9:76:8d:c1:a2:9e:5e:db:45:09:ce:43:a4:7f:17
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:0d:f0:42:64:2a:32:5a:0f:9a:f6:5e:c5:62:a2:6b:ae:19:0e:0c
Fingerprint (sha256): eb:b1:7f:6c:88:ac:85:b3:d0:7c:25:84:61:04:8f:e9:3c:2c:b3:7d:60:8a:0e:73:fa:3d:61:87:92:5d:58:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate local.mycaldwellcounty.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for local.mycaldwellcounty.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aurora.yorkregion.com
austin.ownlocal.com
bracebridge.muskokaregion.com
bradford.yorkregion.com
brighton.northumberlandnews.com
forestlake.presspubs.com
gm.local.kentonline.co.uk
handelaars.kw.be
hayward.apg-wi.com
kg.local.kentonline.co.uk
local.abingtonnews.org
local.advertiser.vernonpublishing.com
local.agriculturaltrader.co.uk
local.appeal-democrat.com
local.bakersfield.com
local.baystatebanner.com
local.bladenjournal.com
local.bromleytimes.co.uk
local.burymercury.co.uk
local.countrymessenger.com
local.cranbrookherald.com
local.crestonnews.com
local.dailytimesleader.com
local.dissexpress.co.uk
local.eadt.co.uk
local.eastbayri.com
local.essexlifemag.co.uk
local.exmouthjournal.co.uk
local.fenlandcitizen.co.uk
local.granthamjournal.co.uk
local.h-ponline.com
local.hackneygazette.co.uk
local.hamiltoncountyexpress.com
local.hertsad.co.uk
local.hmbreview.com
local.huntervalleynews.net.au
local.inyoregister.com
local.janesvillemarketplace.com
local.kelownadailycourier.ca
local.kent-life.co.uk
local.leaderadvertiser.com
local.localcommunitynews.com
local.lodinews.com
local.lowestoftjournal.co.uk
local.maconcountytimes.com
local.malvern-online.com
local.mammothtimes.com
local.midweek.com
local.midweekherald.co.uk
local.minstercommunitypost.com
local.muswellbrookchronicle.com.au
local.mycaldwellcounty.com
local.newcastlestar.com.au
local.newmarketjournal.co.uk
local.newstrib.com
local.observernewsonline.com
local.pinecountynews.com
local.rutland-times.co.uk
local.saltwire.com
local.saukvalley.com
local.ssnewstelegram.com
local.sunnysidesun.com
local.tabertimes.com
local.tahoedailytribune.com
local.theameryfreepress.com
local.theday.com
local.thedickinsonpress.com
local.theeasleyprogress.com
local.thefirsthundredmiles.com
local.thewesternnews.com
local.times-journal.com
local.times-online.com
local.townandcountrymagazine.com.au
local.tribunecourier.com
local.vaildaily.com
local.vp-mi.com
local.wapakdailynews.com
local.westhawaiitoday.com
local.winterhavensun.com
local.woonsocketcall.com
local.wymondhamandattleboroughmercury.co.uk
local.yakimaherald.com
local.yourokmulgee.com
local.zip06.com
manukau-courier.origami.neighbourly.co.nz
marlborough-midweek.origami.neighbourly.co.nz
mm.local.kentonline.co.uk
newhomes.yorkregion.com
nor-west-news.origami.neighbourly.co.nz
north-taranaki-midweek.origami.neighbourly.co.nz
orangeville.orangeville.com
parrysoundbeacon.parrysound.com
parrysoundnorth.parrysound.com
shophuntsville.al.com
shopping.oregonlive.com
south-taranaki-star.origami.neighbourly.co.nz
stouffville.yorkregion.com
the-nelson-leader.origami.neighbourly.co.nz
toronto.torontostar.com
western-leader.origami.neighbourly.co.nz

Other certificates including the domain name mycaldwellcounty.com

(limited to 100 certificates)
kalamazooshopping.mlive.com
local.ripongazette.co.uk
local.airgunshooting.co.uk
local.uintacountyherald.com
local.cessnockadvertiser.com.au
local.dglobe.com
local.gettysburgtimes.com
local.mysuburbanlife.com
kawarthalakes.mykawartha.com
em.local.kentonline.co.uk
austinmetro.communityimpact.com
local.uniondailytimes.com
local.am-news.com
kg.local.kentonline.co.uk
local.mycaldwellcounty.com
bloorwestyork.toronto.com
local.spokane.exchange
western-leader.origami.neighbourly.co.nz
matamata-chronicle.origami.neighbourly.co.nz
shopping.cleveland.com
manukau-courier.origami.neighbourly.co.nz
shopping.nj.com
em.local.kentonline.co.uk
local.mycaldwellcounty.com
local.uniondailytimes.com
flintshopping.mlive.com

Certificate

The complete raw certificate details for local.mycaldwellcounty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsLGmWnuVGCJ+myAZQbt
VH00Di95MgWERlpG0Urr5VaIFvE7i7D63nWbSJzb+h2pJkDTk0wgEwsc+KQRefk6
kkO7fuJvVTwroSfcm/0MhO55I7qNEIz2ahJXwNMFPskD91wx0XdB7k1MVIEYGAaA
0+UbibeLH13OfzobGDEcJnCW7km0BmvZrIy7bVSQGxncJXUcoNAd2BCwhsNmcBws
EuFkaKM9W85jtHb87c6Qu2gbMonlLZvrSpTqIIZpb9RVsdA8UcHirg9NpwnH8a1Q
PyIvmxk7UdHY327tMmmbo6NkM6/dMxlMdD9v9OHI/d1oBskbIFaJ+GprQNKtEDqt
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368362563977227706180229411124385664243734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 09:30:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 09:30:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'local.mycaldwellcounty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26101138339081355562321989023256078526139302972632007117203254809868584872602397219281473153977624563247648342322355128088959511768099867321445433418276504514867113876211111345817111920912557913943947475959283871686858647870456576769644749901369750993395459560634745624774027978184206029095342236075791428297826543706509223668238622904409003233335896689182505563396529555942562802264251110524268850244953064889787503013962784093116800490354144779957304220186367006353601762366770868053897268971088462255865527931002849922423241131058474882994902176160480171065776962790998401344263336286847624522253220199920217796077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6d4b9f428f9768dc1a29e5edb4509ce43a47f17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2770 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracebridge.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradford.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighton.northumberlandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestlake.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayward.apg-wi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kg.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.abingtonnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.advertiser.vernonpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agriculturaltrader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.appeal-democrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bakersfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.baystatebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bladenjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bromleytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.burymercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.countrymessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cranbrookherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crestonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dailytimesleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dissexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eadt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eastbayri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.essexlifemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.exmouthjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fenlandcitizen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.granthamjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.h-ponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hamiltoncountyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hmbreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.inyoregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.janesvillemarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kelownadailycourier.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kent-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.leaderadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.localcommunitynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lodinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lowestoftjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.maconcountytimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.malvern-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mammothtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midweekherald.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.minstercommunitypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muswellbrookchronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.mycaldwellcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newcastlestar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newmarketjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newstrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.observernewsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinecountynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.rutland-times.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saltwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saukvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ssnewstelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunnysidesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tabertimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tahoedailytribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theameryfreepress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theeasleyprogress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thefirsthundredmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thewesternnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times-journal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.townandcountrymagazine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tribunecourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vaildaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vp-mi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wapakdailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.westhawaiitoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.winterhavensun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.woonsocketcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wymondhamandattleboroughmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yakimaherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.yourokmulgee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.zip06.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukau-courier.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhomes.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nor-west-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-taranaki-midweek.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangeville.orangeville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundbeacon.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parrysoundnorth.parrysound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shophuntsville.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south-taranaki-star.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stouffville.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-nelson-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.torontostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'western-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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