handelaars.kw.be

Issued by R3

About this certificate

This digital certificate with serial number 04:c4:7b:46:c5:10:d6:50:98:07:dc:31:07:24:57:35:fd:2f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=handelaars.kw.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:7b:46:c5:10:d6:50:98:07:dc:31:07:24:57:35:fd:2f
Serial Number (int): 415308350144775237259337525479577937640751
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:cf:38:f0:04:13:17:b6:2c:ee:46:c4:d0:85:a9:56:7a:be:3a:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cd:be:2d:3b:7b:d8:a0:a5:3f:80:9b:e7:8f:38:d0:a0:00:b1:3d:bb
Fingerprint (sha256): fa:0d:d0:f1:15:53:6b:e4:55:87:14:c5:15:bd:bf:f2:45:ec:79:e5:65:af:cd:c9:c6:30:61:4e:0c:be:6f:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate handelaars.kw.be

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for handelaars.kw.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ads.maryjanespost.com
ajax.durhamregion.com
almaguin.northbaynipissing.com
annarborshopping.mlive.com
contracostatimes.wanderful.ownlocal.com
em.local.kentonline.co.uk
etobicoke.toronto.com
franklin-county-news.origami.neighbourly.co.nz
handelaars.kw.be
kg.local.kentonline.co.uk
king.yorkregion.com
local.101corpuschristi.com
local.agrinews-pubs.com
local.becclesandbungayjournal.co.uk
local.brookingsregister.com
local.calgaryherald.com
local.carrollspaper.com
local.citizensvoice.com
local.cityweekly.net
local.crowrivermedia.com
local.devon24.co.uk
local.dglobe.com
local.duluthnewstribune.com
local.durantdemocrat.com
local.eacourier.com
local.essexlifemag.co.uk
local.etownpa.com
local.fauquier.com
local.flamboroughreview.com
local.frontiersman.com
local.hmbreview.com
local.huntervalleynews.net.au
local.insidehalton.com
local.jcsentinel.com
local.kcchronicle.com
local.kendallcountynow.com
local.kent-life.co.uk
local.kentnews.co.uk
local.lakecountysuburbanlife.com
local.lfpress.com
local.midweeknews.com
local.militarynews.com
local.minstercommunitypost.com
local.montrealgazette.com
local.muswellbrookchronicle.com.au
local.newcastlestar.com.au
local.newhamrecorder.co.uk
local.norfolkmag.co.uk
local.nwboomerandseniornews.com
local.ourperth.ca
local.pilotonline.com
local.pilotweb.aero
local.pinejournal.com
local.pinkun.com
local.plainsman.com
local.postbulletin.com
local.prairieadvocate.com
local.ricentral.com
local.saltwire.com
local.sedaliademocrat.com
local.simcoe.com
local.ss-times.com
local.stamfordmercury.co.uk
local.stowmarketmercury.co.uk
local.sunnysidesun.com
local.sussexlife.co.uk
local.svindependent.com
local.swnewsmedia.com
local.taosnews.com
local.thecomet.net
local.theday.com
local.therecord.com
local.times-online.com
local.toronto.com
local.univisionaustin.com
local.vanguardia.com.mx
local.wadenapj.com
local.waterloochronicle.ca
local.whatsuppub.com
local.windsorstar.com
longbeachpress.wanderful.ownlocal.com
matamata-chronicle.origami.neighbourly.co.nz
muskokan.muskokaregion.com
muskokaregion.muskokaregion.com
mylocal.baltimoresun.com
mylocal.latimes.com
mylocal.mrt.com
mylocal.sun-sentinel.com
newmarket.yorkregion.com
northyork.toronto.com
oakville.insidehalton.com
origaminewsmonitor.wahpetondailynews.com
perth.insideottawavalley.com
quad.presspubs.com
saginawshopping.mlive.com
sanbernadino.wanderful.ownlocal.com
starledger.wanderful.ownlocal.com
stcroixvalley.presspubs.com
wasagastayner.simcoe.com
whangarei-leader.origami.neighbourly.co.nz

Other certificates including the domain name kw.be

(limited to 100 certificates)
dg-0085-edb0cc1.client-tls.adestra.com
local.kentnews.co.uk
dg-0085-edb0cc1.client-tls.adestra.com
local.theameryfreepress.com
tracking.kw.be
m.kw.be
dg-0085-edb0cc1.client-tls.adestra.com
m.kw.be
mail.kw.be
m.kw.be
m.www.kw.be
local.dissexpress.co.uk
quiz.www.kw.be
local.bensonnews-sun.com
quiz.www.kw.be
tracking.kw.be
quiz.www.kw.be
c311.dezondag.be
tracking.kw.be
n659.ewonderzoeken.nl
tracking.kw.be
tracking.kw.be
dg-0085-edb0cc1.client-tls.adestra.com
flintshopping.mlive.com
j478.deapotheker.be
m.kw.be
portperry.durhamregion.com
i208.flowmagazine.nl
w722.formule1.nl
p757.plusmagazine.be
m.www.kw.be
quiz.www.kw.be
m.www.kw.be
l982.landleven.nl
dg-0085-edb0cc1.client-tls.adestra.com
quiz.www.kw.be
quiz.www.kw.be
quiz.www.kw.be
*.kw.be
local.kent-life.co.uk
m.www.kw.be
tracking.kw.be
km.local.kentonline.co.uk
local.bemidjipioneer.com
m.www.kw.be
tracking.kw.be
m.www.kw.be
m.kw.be
n554.regiotalent.be
b759.abonnements.be
local.eastlondonadvertiser.co.uk
local.militarynews.com
*.kw.be
local.cessnockadvertiser.com.au
c311.dezondag.be
dg-0085-edb0cc1.client-tls.adestra.com
m.www.kw.be
g335.ewcruises.nl
e691.procycling.nl
m.www.kw.be
q704.trendstop.be
s776.kw.be
dg-0085-edb0cc1.client-tls.adestra.com
m.kw.be
tracking.kw.be
quiz.www.kw.be
quiz.www.kw.be
local.gettysburgtimes.com
m.www.kw.be
*.kw.be
m.kw.be
p684.g-geschiedenis.eu
p684.g-geschiedenis.eu
*.kw.be
*.kw.be
tracking.kw.be
tracking.kw.be
muskokan.muskokaregion.com
p015.naaipatronen.nl
p015.naaipatronen.nl
local.topsailadvertiser.com
mylocal.journal-news.com
local.surreylife.co.uk
z766.plusonline.nl
local.eastlondonadvertiser.co.uk
m.www.kw.be
z766.plusonline.nl
quiz.www.kw.be
kawarthalakes.mykawartha.com
quiz.www.kw.be
*.kw.be
m.kw.be
n659.ewonderzoeken.nl
local.yourokmulgee.com
austinmetro.communityimpact.com
k219.gael.be
u037.vorsten.nl
dg-0085-edb0cc1.client-tls.adestra.com
*.kw.be
quiz.www.kw.be

Certificate

The complete raw certificate details for handelaars.kw.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOSjCCDTKgAwIBAgISBMR7RsUQ1lCYB9wxByRXNf0vMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA1MTkyMjU1NTVaFw0yMTA4MTcyMjU1NTVaMBsxGTAXBgNVBAMT
EGhhbmRlbGFhcnMua3cuYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDpnt+CGedrRRsT7q5LiC7c3pkZiw9T9M4Gu9F//SO7LgA6ibvbo3OxFzmuX8tp
/Ur2JwbLNF7msO+2ptd5xLQBcJCnLeuCMiNTK/Yee/5FK/LsqrsUJC2XoG5/Cd6F
jiswwjKCaYu0dfvt6psFR8nerNRYR8WZWDbFqtJhqd7gURbPqWhQ6B9uC95WOh+N
TlIXDlYba8hOUEQtD+OTN95CfCBIiaZBGi4Y47MZ4sD3XHSvb9SfZvuTErBfTaG8
nWCODHlFrSBo2LmAZ9P8I4P2i94gnZujSmd25uTJs4J6sM0LA9m5VQ1Vx/VjAY6p
BRsodP+qFIpm6MLBfg2x78OPAgMBAAGjggtvMIILazAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFJnPOPAEExe2LO5GxNCFqVZ6vjrPMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMIIKMAYDVR0RBIIKJzCCCiOCFWFkcy5tYXJ5amFuZXNwb3N0LmNvbYIVYWph
eC5kdXJoYW1yZWdpb24uY29tgh5hbG1hZ3Vpbi5ub3J0aGJheW5pcGlzc2luZy5j
b22CGmFubmFyYm9yc2hvcHBpbmcubWxpdmUuY29tgidjb250cmFjb3N0YXRpbWVz
LndhbmRlcmZ1bC5vd25sb2NhbC5jb22CGWVtLmxvY2FsLmtlbnRvbmxpbmUuY28u
dWuCFWV0b2JpY29rZS50b3JvbnRvLmNvbYIuZnJhbmtsaW4tY291bnR5LW5ld3Mu
b3JpZ2FtaS5uZWlnaGJvdXJseS5jby5ueoIQaGFuZGVsYWFycy5rdy5iZYIZa2cu
bG9jYWwua2VudG9ubGluZS5jby51a4ITa2luZy55b3JrcmVnaW9uLmNvbYIabG9j
YWwuMTAxY29ycHVzY2hyaXN0aS5jb22CF2xvY2FsLmFncmluZXdzLXB1YnMuY29t
giNsb2NhbC5iZWNjbGVzYW5kYnVuZ2F5am91cm5hbC5jby51a4IbbG9jYWwuYnJv
b2tpbmdzcmVnaXN0ZXIuY29tghdsb2NhbC5jYWxnYXJ5aGVyYWxkLmNvbYIXbG9j
YWwuY2Fycm9sbHNwYXBlci5jb22CF2xvY2FsLmNpdGl6ZW5zdm9pY2UuY29tghRs
b2NhbC5jaXR5d2Vla2x5Lm5ldIIYbG9jYWwuY3Jvd3JpdmVybWVkaWEuY29tghNs
b2NhbC5kZXZvbjI0LmNvLnVrghBsb2NhbC5kZ2xvYmUuY29tghtsb2NhbC5kdWx1
dGhuZXdzdHJpYnVuZS5jb22CGGxvY2FsLmR1cmFudGRlbW9jcmF0LmNvbYITbG9j
YWwuZWFjb3VyaWVyLmNvbYIYbG9jYWwuZXNzZXhsaWZlbWFnLmNvLnVrghFsb2Nh
bC5ldG93bnBhLmNvbYISbG9jYWwuZmF1cXVpZXIuY29tghtsb2NhbC5mbGFtYm9y
b3VnaHJldmlldy5jb22CFmxvY2FsLmZyb250aWVyc21hbi5jb22CE2xvY2FsLmht
YnJldmlldy5jb22CHWxvY2FsLmh1bnRlcnZhbGxleW5ld3MubmV0LmF1ghZsb2Nh
bC5pbnNpZGVoYWx0b24uY29tghRsb2NhbC5qY3NlbnRpbmVsLmNvbYIVbG9jYWwu
a2NjaHJvbmljbGUuY29tghpsb2NhbC5rZW5kYWxsY291bnR5bm93LmNvbYIVbG9j
YWwua2VudC1saWZlLmNvLnVrghRsb2NhbC5rZW50bmV3cy5jby51a4IgbG9jYWwu
bGFrZWNvdW50eXN1YnVyYmFubGlmZS5jb22CEWxvY2FsLmxmcHJlc3MuY29tghVs
b2NhbC5taWR3ZWVrbmV3cy5jb22CFmxvY2FsLm1pbGl0YXJ5bmV3cy5jb22CHmxv
Y2FsLm1pbnN0ZXJjb21tdW5pdHlwb3N0LmNvbYIZbG9jYWwubW9udHJlYWxnYXpl
dHRlLmNvbYIibG9jYWwubXVzd2VsbGJyb29rY2hyb25pY2xlLmNvbS5hdYIabG9j
YWwubmV3Y2FzdGxlc3Rhci5jb20uYXWCGmxvY2FsLm5ld2hhbXJlY29yZGVyLmNv
LnVrghZsb2NhbC5ub3Jmb2xrbWFnLmNvLnVrgh9sb2NhbC5ud2Jvb21lcmFuZHNl
bmlvcm5ld3MuY29tghFsb2NhbC5vdXJwZXJ0aC5jYYIVbG9jYWwucGlsb3Rvbmxp
bmUuY29tghNsb2NhbC5waWxvdHdlYi5hZXJvghVsb2NhbC5waW5lam91cm5hbC5j
b22CEGxvY2FsLnBpbmt1bi5jb22CE2xvY2FsLnBsYWluc21hbi5jb22CFmxvY2Fs
LnBvc3RidWxsZXRpbi5jb22CGWxvY2FsLnByYWlyaWVhZHZvY2F0ZS5jb22CE2xv
Y2FsLnJpY2VudHJhbC5jb22CEmxvY2FsLnNhbHR3aXJlLmNvbYIZbG9jYWwuc2Vk
YWxpYWRlbW9jcmF0LmNvbYIQbG9jYWwuc2ltY29lLmNvbYISbG9jYWwuc3MtdGlt
ZXMuY29tghtsb2NhbC5zdGFtZm9yZG1lcmN1cnkuY28udWuCHWxvY2FsLnN0b3dt
YXJrZXRtZXJjdXJ5LmNvLnVrghZsb2NhbC5zdW5ueXNpZGVzdW4uY29tghZsb2Nh
bC5zdXNzZXhsaWZlLmNvLnVrghdsb2NhbC5zdmluZGVwZW5kZW50LmNvbYIVbG9j
YWwuc3duZXdzbWVkaWEuY29tghJsb2NhbC50YW9zbmV3cy5jb22CEmxvY2FsLnRo
ZWNvbWV0Lm5ldIIQbG9jYWwudGhlZGF5LmNvbYITbG9jYWwudGhlcmVjb3JkLmNv
bYIWbG9jYWwudGltZXMtb25saW5lLmNvbYIRbG9jYWwudG9yb250by5jb22CGWxv
Y2FsLnVuaXZpc2lvbmF1c3Rpbi5jb22CF2xvY2FsLnZhbmd1YXJkaWEuY29tLm14
ghJsb2NhbC53YWRlbmFwai5jb22CGmxvY2FsLndhdGVybG9vY2hyb25pY2xlLmNh
ghRsb2NhbC53aGF0c3VwcHViLmNvbYIVbG9jYWwud2luZHNvcnN0YXIuY29tgiVs
b25nYmVhY2hwcmVzcy53YW5kZXJmdWwub3dubG9jYWwuY29tgixtYXRhbWF0YS1j
aHJvbmljbGUub3JpZ2FtaS5uZWlnaGJvdXJseS5jby5ueoIabXVza29rYW4ubXVz
a29rYXJlZ2lvbi5jb22CH211c2tva2FyZWdpb24ubXVza29rYXJlZ2lvbi5jb22C
GG15bG9jYWwuYmFsdGltb3Jlc3VuLmNvbYITbXlsb2NhbC5sYXRpbWVzLmNvbYIP
bXlsb2NhbC5tcnQuY29tghhteWxvY2FsLnN1bi1zZW50aW5lbC5jb22CGG5ld21h
cmtldC55b3JrcmVnaW9uLmNvbYIVbm9ydGh5b3JrLnRvcm9udG8uY29tghlvYWt2
aWxsZS5pbnNpZGVoYWx0b24uY29tgihvcmlnYW1pbmV3c21vbml0b3Iud2FocGV0
b25kYWlseW5ld3MuY29tghxwZXJ0aC5pbnNpZGVvdHRhd2F2YWxsZXkuY29tghJx
dWFkLnByZXNzcHVicy5jb22CGXNhZ2luYXdzaG9wcGluZy5tbGl2ZS5jb22CI3Nh
bmJlcm5hZGluby53YW5kZXJmdWwub3dubG9jYWwuY29tgiFzdGFybGVkZ2VyLndh
bmRlcmZ1bC5vd25sb2NhbC5jb22CG3N0Y3JvaXh2YWxsZXkucHJlc3NwdWJzLmNv
bYIYd2FzYWdhc3RheW5lci5zaW1jb2UuY29tgip3aGFuZ2FyZWktbGVhZGVyLm9y
aWdhbWkubmVpZ2hib3VybHkuY28ubnowTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL
KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAC1r
1RX1MpCjTZOdZxSAnvxezY1RHwZoZaD7w/CaXRhO9xPU3mkFOIwYQqqR7+TuyOpV
gMY6cOf3SpLkQOUIh+VuV0c6jYahCZAMphEF20ncNTt3uXUypEO0Zy/0WHQw1+xw
Amewtw9h79GmXMRwx/fUmsBlpOQN0umKt/1qJVFmcb6kIl01uaotWIofoSc2if1P
qsWuEWfwrhDgjZ/VhaXkGjDRQIvv7h11zpTHedf6OVUnDPwYj3vXfiyMvAerpi5O
QPd5uU/uA3V6jZ3S4nD+wUFLDqtEfgYvn+TEYmiBU6Wal3+SvSp893hE4h4MXjlN
p9/28qmgTZWxR711TYs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z7fghnna0UbE+6uS4gu
3N6ZGYsPU/TOBrvRf/0juy4AOom726NzsRc5rl/Laf1K9icGyzRe5rDvtqbXecS0
AXCQpy3rgjIjUyv2Hnv+RSvy7Kq7FCQtl6BufwnehY4rMMIygmmLtHX77eqbBUfJ
3qzUWEfFmVg2xarSYane4FEWz6loUOgfbgveVjofjU5SFw5WG2vITlBELQ/jkzfe
QnwgSImmQRouGOOzGeLA91x0r2/Un2b7kxKwX02hvJ1gjgx5Ra0gaNi5gGfT/COD
9oveIJ2bo0pndubkybOCerDNCwPZuVUNVcf1YwGOqQUbKHT/qhSKZujCwX4Nse/D
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415308350144775237259337525479577937640751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-19 22:55:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-17 22:55:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'handelaars.kw.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29491868292207643932813981103278397206389354623802482749028082981022255079132052384967146499505581077101514023859980743881473909659381083959312424729788539925136144740523075515483577791469266064778084726316540564481187323047348559959343232055321732962288204094313548699392313094879042462593090675348780097028213521300516066871691548458456286634584962621381637795207397457094749309772971691214225795927315846058392306579126216387289596688598188035251438966146768598457034977087283983453310597894732927288076885584259522040992764495736572964457386670525264018661033286483153165826324530903874849289342689086395489698703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99cf38f0041317b62cee46c4d085a9567abe3acf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2599 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.maryjanespost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajax.durhamregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almaguin.northbaynipissing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annarborshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contracostatimes.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'em.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etobicoke.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklin-county-news.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelaars.kw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kg.local.kentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'king.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.101corpuschristi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.agrinews-pubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.becclesandbungayjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.brookingsregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.calgaryherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.carrollspaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.citizensvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.cityweekly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.crowrivermedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.devon24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.durantdemocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.eacourier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.essexlifemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.etownpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fauquier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.flamboroughreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.frontiersman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.hmbreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.huntervalleynews.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jcsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kcchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kendallcountynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kent-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.kentnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lakecountysuburbanlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.lfpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.midweeknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.militarynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.minstercommunitypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.montrealgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.muswellbrookchronicle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newcastlestar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.newhamrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.norfolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.nwboomerandseniornews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ourperth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pilotweb.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pinkun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.plainsman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.prairieadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ricentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.saltwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sedaliademocrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.ss-times.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stamfordmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.stowmarketmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sunnysidesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.sussexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.svindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.swnewsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.taosnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.thecomet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.theday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.therecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.times-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.univisionaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.vanguardia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.waterloochronicle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.whatsuppub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.windsorstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longbeachpress.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamata-chronicle.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokan.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskokaregion.muskokaregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.baltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.latimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.mrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylocal.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmarket.yorkregion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northyork.toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakville.insidehalton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origaminewsmonitor.wahpetondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perth.insideottawavalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quad.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saginawshopping.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanbernadino.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starledger.wanderful.ownlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcroixvalley.presspubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasagastayner.simcoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangarei-leader.origami.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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