mediaassets.1041kqth.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:97:9e:b7:4d:b5:98:57:2a:e9:96:3d:7d:4d:53:6f:0d was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mediaassets.1041kqth.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:97:9e:b7:4d:b5:98:57:2a:e9:96:3d:7d:4d:53:6f:0d
Serial Number (int): 263239807157990329993756119656423442575117
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:5f:69:b0:77:3e:1d:41:ee:2a:25:8d:2f:5e:1b:9c:d9:88:d5:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:89:05:92:de:bd:f2:3b:be:6c:ea:9b:ed:d8:9b:0b:ba:03:4f:1f
Fingerprint (sha256): f0:c2:fb:a1:b1:87:78:c1:96:19:c1:2c:6a:24:36:a2:77:fa:e7:42:25:f1:a9:2e:8a:1b:97:6c:41:86:f5:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mediaassets.1041kqth.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediaassets.1041kqth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media.10news.com
media.abc15.com
media.abc2news.com
media.abcactionnews.com
media.bartlesvillelive.com
media.kjrh.com
media.kshb.com
media.kypost.com
media.nbcactionnews.com
media.newsnet5.com
media.scrippsnationalnews.com
media.thedenverchannel.com
media.theindychannel.com
media.thelistshow.tv
media.thelisttv.com
media.turnto23.com
media.wcpo.com
media.wptv.com
media.wsts1.com
media.wsts2.com
media.wxyz.com
media2.abc15.com
media2.abc2news.com
media2.abcactionnews.com
media2.bartlesvillelive.com
media2.kjrh.com
media2.kshb.com
media2.kypost.com
media2.nbcactionnews.com
media2.newsnet5.com
media2.scrippsnationalnews.com
media2.wcpo.com
media2.wkbw.com
media2.wptv.com
media2.wsts1.com
media2.wsts2.com
media2.wxyz.com
mediaassets.1041kqth.com
mediaassets.1045thefox.com
mediaassets.104star.com
mediaassets.1063thegroove.com
mediaassets.1067theriver.com
mediaassets.1170kfaq.com
mediaassets.620wtmj.com
mediaassets.929bobfm.com
mediaassets.931wnox.com
mediaassets.bigcountry995.com
mediaassets.caller.com
mediaassets.cd1059.com
mediaassets.channel941.com
mediaassets.classiccountry1070.com
mediaassets.commercialappeal.com
mediaassets.courierpress.com
mediaassets.fox47news.com
mediaassets.fox4now.com
mediaassets.gosanangelo.com
mediaassets.hot1045.net
mediaassets.independentmail.com
mediaassets.ironcheftucson.com
mediaassets.kfdi.com
mediaassets.kgun9.com
mediaassets.khits.com
mediaassets.khits.fm
mediaassets.kitsapsun.com
mediaassets.kivitv.com
mediaassets.kmtv.com
mediaassets.knoxbride.com
mediaassets.knoxnews.com
mediaassets.ksgf.com
mediaassets.kticountry.com
mediaassets.ktnv.com
mediaassets.ktts.com
mediaassets.kvoo.com
mediaassets.mixfm.com
mediaassets.nbc26.com
mediaassets.newschannel5.com
mediaassets.power965.com
mediaassets.q100country.com
mediaassets.radiolobo1065.com
mediaassets.redding.com
mediaassets.reporternews.com
mediaassets.riverinteractive.com
mediaassets.star1021fm.com
mediaassets.t95.com
mediaassets.tcpalm.com
mediaassets.thecwtucson.com
mediaassets.timesrecordnews.com
mediaassets.tmj4.com
mediaassets.tntradioempire.com
mediaassets.tv20detroit.com
mediaassets.varietyrocks.com
mediaassets.vcstar.com
mediaassets.wtmj.com
mediaassets.xrock.com
mediaassets.z92.com
www.ndnadvertising.com

Other certificates including the domain name 1041kqth.com

(limited to 100 certificates)
lakana-02.map.fastly.net
www.1041kqth.com
sharing.1041kqth.com
1041kqth.com
lakana-02.map.fastly.net
1041kqth.com
1041kqth.com
mediaassets.1041kqth.com
1041kqth.com
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
www.1041kqth.com
www.1041kqth.com
sharing.1041kqth.com
sharing.1041kqth.com
lakana-02.map.fastly.net
sharing.1041kqth.com
mediaassets.1041kqth.com
lakana-02.map.fastly.net
mediaassets.1041kqth.com
lakana-02.map.fastly.net
1041kqth.com
lakana-02.map.fastly.net
mediaassets.1041kqth.com
mediaassets.1041kqth.com
lakana-02.map.fastly.net
www.1041kqth.com

Certificate

The complete raw certificate details for mediaassets.1041kqth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9dzdIjFb1aFkZbDtJLA
qCjZiniYG75jo6RP1/EaZxNQFRQV4LpkO4vjBPjR7jWK0Zmr12B+O1JH20QJHdlA
g5BZqRObsbsRp17ADhIYHQkAKObAPqTPYsG+eCXxqeR9Qdi4TPetAku8/YqsnPBk
q9hID8ClhbA7x3ZNbMtoh+wIZo/YAGnhZmy/6FA/H9llekFXkKddATiNrVu4IYiV
68fAHyi0nv9TrWjfuHePQy7p5ifov/y0R7V8kS/nMqGXuneOPQo3QwI/Lt2BWN+m
opWl2v4ikp1M3UjbHk1TxCuXW4vcld3SGT+Jbjn4n4yJ7NinObsE1i9BSVnCqMjy
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263239807157990329993756119656423442575117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-12 17:05:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-10 17:05:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediaassets.1041kqth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23207852655095942489057564987378212917686413704033436878191457647872025472275397966836181036677989700893243212939895108770576881190692803628932611016335633846178020832326171567499111935231485262587381128740878288577348926918808513038959228610084997983848611829364694468571478559550978235400657880719298195788575896586018792379371373075918691221575552307116210270479497032063300979214243925959515286776967660409780974546916101987933543672039189608501182141382631581494612333730230215717162951505511793346067348086630218245624430385268021500202194998652261433666930819309017595494488054079152362448474257758253061042831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd5f69b0773e1d41ee2a258d2f5e1b9cd988d549
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.10news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.abc15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.abc2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.abcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.bartlesvillelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kjrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.kypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nbcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.newsnet5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.scrippsnationalnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.thedenverchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.theindychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.thelistshow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.thelisttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.turnto23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wcpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wsts1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wsts2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wxyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.abc15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.abc2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.abcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.bartlesvillelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.kjrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.kshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.kypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.nbcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.newsnet5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.scrippsnationalnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wcpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wkbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wsts1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wsts2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media2.wxyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1041kqth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1045thefox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.104star.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1063thegroove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1067theriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.1170kfaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.620wtmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.929bobfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.931wnox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.bigcountry995.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.caller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.cd1059.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.channel941.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.classiccountry1070.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.commercialappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.courierpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.fox47news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.fox4now.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.gosanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.hot1045.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.ironcheftucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kfdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kgun9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.khits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.khits.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kitsapsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kivitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.knoxbride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.knoxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.ksgf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kticountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.ktnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.ktts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kvoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.mixfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.nbc26.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.newschannel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.power965.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.q100country.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.radiolobo1065.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.redding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.reporternews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.riverinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.star1021fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.t95.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.tcpalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.thecwtucson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.timesrecordnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.tmj4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.tntradioempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.tv20detroit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.varietyrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.vcstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.wtmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.xrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.z92.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ndnadvertising.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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