derstandard-spat.derstandard.at

Issued by R3

About this certificate

This digital certificate with serial number 04:db:3f:f8:57:0a:0d:8b:00:97:24:b0:bb:0b:23:60:f5:f1 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=derstandard-spat.derstandard.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:3f:f8:57:0a:0d:8b:00:97:24:b0:bb:0b:23:60:f5:f1
Serial Number (int): 423056012901447984913662128798038124197361
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d0:a4:ae:3e:90:5c:0b:08:b6:d9:4a:77:03:27:57:8d:b7:c2:99:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:d5:b9:bf:60:19:07:03:0d:ad:46:ce:34:b0:e6:d5:fd:e2:5d:cb
Fingerprint (sha256): 03:3c:22:c7:14:be:19:6c:08:8b:15:8f:9b:16:4d:34:7c:11:15:47:47:09:03:77:94:17:99:4e:72:cc:58:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate derstandard-spat.derstandard.at

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for derstandard-spat.derstandard.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

derstandard-spat.derstandard.at
derstandard-spde.derstandard.de
malverngazette-gb.malverngazette.co.uk
messaging.carzone.ie
messengernewspapers-gb.messengernewspapers.co.uk
middlewichguardian-gb.middlewichguardian.co.uk
milfordmercury-gb.milfordmercury.co.uk
mmm.itpro.co.uk
mmm.theweek.co.uk
mms.bournemouthecho.co.uk
mms.channelpro.co.uk
mms.closeronline.co.uk
mms.cloudpro.co.uk
mms.coachmag.co.uk
mms.cyclist.co.uk
mms.drivingelectric.co.uk
mms.evo.co.uk
mms.expertreviews.co.uk
mms.graziadaily.co.uk
mms.kwiss.me
mms.libelle.nl
mms.planetradio.co.uk
ne1jobs-gb.ne1jobs.com
newforestpost-gb.newforestpost.co.uk
newsandstar-gb.newsandstar.co.uk
newsshopper-gb.newsshopper.co.uk
northwaleschronicle-gb.northwaleschronicle.co.uk
northwalespioneer-gb.northwalespioneer.co.uk
northwichguardian-gb.northwichguardian.co.uk
northyorkshireadvertiser-gb.northyorkshireadvertiser.co.uk
nw1jobs-gb.nw1jobs.com
nwemail-gb.nwemail.co.uk
onvista.de.onvista.com
ox1jobs-gb.ox1jobs.com
oxfordmail-gb.oxfordmail.co.uk
oxfordtimes-gb.oxfordtimes.co.uk
pcgamer-gb.pcgamer.com
peeblesshirenews-gb.peeblesshirenews.com
penarthtimes-gb.penarthtimes.co.uk
prestwichandwhitefieldguide-gb.prestwichandwhitefieldguide.co.uk
prod-digitalspyuk.digitalspy.com
radiotimes-gb.radiotimes.com
readertrips-gb.readertrips.co.uk
readingchronicle-gb.readingchronicle.co.uk
redditchadvertiser-gb.redditchadvertiser.co.uk
redhillandreigatelife-gb.redhillandreigatelife.co.uk
ressource1.med1.de
ressource1.netdoktor.de
rhyljournal-gb.rhyljournal.co.uk
richmondandtwickenhamtimes-gb.richmondandtwickenhamtimes.co.uk
romseyadvertiser-gb.romseyadvertiser.co.uk
runcornandwidnesworld-gb.runcornandwidnesworld.co.uk
s1cars-gb.s1cars.com
s1homes-gb.s1homes.com
s1jobs-gb.s1jobs.com
salisburyjournal-gb.salisburyjournal.co.uk
serengo-net.serengo.net
source.cuisineactuelle.fr
source.femmeactuelle.fr
sourcepoint.sueddeutsche.de
src.gala.fr
src.voici.fr

Other certificates including the domain name derstandard.at

(limited to 100 certificates)
immobilien.derstandard.at
derstandard-spat.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
janitor.derstandard.at
px.derstandard.at
images.derstandard.at
derstandard.at
mobile.derstandard.at
livestat.derstandard.at
derstandard-spat.derstandard.at
livestat.derstandard.at
mobile.derstandard.at
static.derstandard.at
sa23gl.wpc.edgecastcdn.net
intern.derstandard.at
ts.derstandard.at
fsm.chip.de
derstandard-spat.derstandard.at
source.cuisineactuelle.fr
incapsula.com
emagazin.derstandard.at
sa23gl.wpc.edgecastcdn.net
incapsula.com
derstandard-spat.derstandard.at
checkout.derstandard.at
incapsula.com
livestat.derstandard.at
sa23gl.wpc.edgecastcdn.net
sa23gl.wpc.edgecastcdn.net
static.derstandard.at
incapsula.com
jobs.derstandard.at
livestat.derstandard.at
emagazin.derstandard.at
derstandard-spat.derstandard.at
emagazin.derstandard.at
tsgw.standard.at
editorial.derstandard.at
www.derstandard.at
mobile.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
fsm.chip.de
support.derstandard.at
derstandard-spat.derstandard.at
janitor.derstandard.at
editorial.derstandard.at
livestat.derstandard.at
www.derstandard.at
emagazin.derstandard.at
derstandard-spat.derstandard.at
imagesintern.derstandard.at
email1.derstandard.at
www.derstandard.at
www.derstandard.at
incapsula.com
www.derstandard.at
onvista.de.onvista.com
incapsula.com
auth.derstandard.at
www.derstandard.at
sa23gl.wpc.edgecastcdn.net
livestat.derstandard.at
data-dda7d24eb2.derstandard.at
derstandard-spat.derstandard.at
epaper.derstandard.at
px.derstandard.at
janitor.derstandard.at
sa23gl.wpc.edgecastcdn.net
incapsula.com
about.derstandard.at
email2.derstandard.at
editorial.derstandard.at
www.derstandard.at
text.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
text.derstandard.at
apps.derstandard.at
incapsula.com
emagazin.derstandard.at
livestat.derstandard.at
text.derstandard.at
editorial.derstandard.at
spiele.derstandard.at
janitor.derstandard.at
incapsula.com
auth.derstandard.at
px.derstandard.at
derstandard.at
livestat.derstandard.at
email1.derstandard.at
jobs.derstandard.at
incapsula.com
www.derstandard.at
px.derstandard.at
incapsula.com
epaper.derstandard.at
abo.derstandard.at

Certificate

The complete raw certificate details for derstandard-spat.derstandard.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7I27+U5+R47IEkRYDFA
mv9JwLaOfRNVzeVYYezlxoyi6Sz4JjrTW85vCaRCqVxEjg3h9787wozsgEPJCyZd
p17M87SH/L7ZZjtLjtUFhI6ijeAI2wq8T8YfvIbWxs8Jnm1NbZFLSuvPcrUt16qN
mrZFiOs4Sd51K8H+Wz2Np43kKwdHQojJmtl5PF6vZcrznNDkxeEBRiX1leKaloLZ
5QQTs7g+QcvOy4SD7zDxO90dP9l/5OPfdoqVHPDJomgGH27ma2Hdcr0b/7BVyNC+
MSQAFDQlHfqgeq2nndCWaOOq3SowPmIai2TJOQnitRRtoqkmVvikmyinoUJTSJ/6
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423056012901447984913662128798038124197361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-25 17:07:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-23 17:07:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'derstandard-spat.derstandard.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21674631042842265640817415834874546802060062418011744138111547212518247130936978679555132328336222393920005700837248676954774598430783497158460224468452092930284980270974490889053046186990177372831148121666426539464257609759666746071094051206923773729564062988344404932121585031116569723161566186322610205052498845174698612338830823557928058482165661243739184509625904766527668253958208610669304148393220204578877292910057012135123683257911945883844532829361378433411992834100760830755752704742550419406493049021082355177670519822793903701752822266808968849440587962268692888258895983361646348372987941378503387118331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0a4ae3e905c0b08b6d94a770327578db7c2993c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1975 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derstandard-spat.derstandard.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derstandard-spde.derstandard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malverngazette-gb.malverngazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.carzone.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messengernewspapers-gb.messengernewspapers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlewichguardian-gb.middlewichguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfordmercury-gb.milfordmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmm.itpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmm.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.bournemouthecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.channelpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.closeronline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cloudpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.coachmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cyclist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.drivingelectric.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.expertreviews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.graziadaily.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.kwiss.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.libelle.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ne1jobs-gb.ne1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newforestpost-gb.newforestpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsandstar-gb.newsandstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsshopper-gb.newsshopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwaleschronicle-gb.northwaleschronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwalespioneer-gb.northwalespioneer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwichguardian-gb.northwichguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northyorkshireadvertiser-gb.northyorkshireadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw1jobs-gb.nw1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwemail-gb.nwemail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onvista.de.onvista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ox1jobs-gb.ox1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordmail-gb.oxfordmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordtimes-gb.oxfordtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgamer-gb.pcgamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peeblesshirenews-gb.peeblesshirenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penarthtimes-gb.penarthtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestwichandwhitefieldguide-gb.prestwichandwhitefieldguide.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-digitalspyuk.digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiotimes-gb.radiotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readertrips-gb.readertrips.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingchronicle-gb.readingchronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redditchadvertiser-gb.redditchadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redhillandreigatelife-gb.redhillandreigatelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ressource1.med1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ressource1.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhyljournal-gb.rhyljournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondandtwickenhamtimes-gb.richmondandtwickenhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romseyadvertiser-gb.romseyadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runcornandwidnesworld-gb.runcornandwidnesworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1cars-gb.s1cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1jobs-gb.s1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salisburyjournal-gb.salisburyjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serengo-net.serengo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.cuisineactuelle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.femmeactuelle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.sueddeutsche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.gala.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.voici.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017b7e7f4f7400000403004730450221008d4a374ec7eff3b1f095d382008b13e143163fc9c0269179ac97008746c4a2bf0220572cf9f50d004758c7ad0a54a0794af4a5c4c425c064de550d963ea67b2f34880075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017b7e7f4f9600000403004630440220419d066f3613f04d6235c74552f1cc73c5578346ddad9db9a186e39708479f5802206aa06060da9b9a6d86200885e8c1cf3150a04e072b9fbd9a0e78bf7c43fa00fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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