cmp.aftenbladet.no

Issued by R3

About this certificate

This digital certificate with serial number 04:48:7e:62:0b:97:7c:d6:60:30:e7:d4:79:b4:8a:4a:3f:38 was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmp.aftenbladet.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:7e:62:0b:97:7c:d6:60:30:e7:d4:79:b4:8a:4a:3f:38
Serial Number (int): 373117465953018185254366910564421851561784
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f4:37:c2:e9:ee:13:cf:c9:cb:81:62:7e:5a:be:1d:90:bc:b3:a5:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:2a:47:7a:7d:2c:cf:dc:90:e8:92:6b:ef:6b:9d:40:63:bf:87:e3
Fingerprint (sha256): 09:25:c2:2b:f5:6e:d1:90:fa:90:6f:b7:c7:6e:0c:da:11:aa:c3:c6:75:a0:e5:b6:ba:d1:42:62:03:33:47:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.aftenbladet.no

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.aftenbladet.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.aftenbladet.no
cmp.aftenposten.no
cmp.aftonbladet.se
cmp.av-avis.no
cmp.avointyopaikka.fi
cmp.bareasane.no
cmp.blocket.dev
cmp.bt.no
cmp.byas.no
cmp.bygdanytt.no
cmp.dinepenger.no
cmp.e24.no
cmp.finn.no
cmp.friflyt.no
cmp.friflytbestill.no
cmp.godare.se
cmp.godt.no
cmp.helthjem.no
cmp.honk.no
cmp.honk.se
cmp.jeger.no
cmp.kesaduuni.org
cmp.klart.se
cmp.klarttest.net
cmp.landevei.no
cmp.ledenicheur.fr
cmp.letsdeal.no
cmp.letsdeal.se
cmp.livsstil.se
cmp.minmote.no
cmp.norsk-klatring.no
cmp.oikotie.fi
cmp.omakotimessut.net
cmp.omataloyhtio.fi
cmp.omni.se
cmp.omniekonomi.se
cmp.onsk.no
cmp.oyposten.no
cmp.pent.no
cmp.podme.com
cmp.pricespy.co.uk
cmp.prisjakt.no
cmp.prisjakt.nu
cmp.puutarha.net
cmp.qasa.fi
cmp.rakentaja.fi
cmp.rakentaja.pro
cmp.randaberg24.no
cmp.rrmessut.fi
cmp.strilen.no
cmp.svd.se
cmp.talovertailu.fi
cmp.tek.no
cmp.terrengsykkel.no
cmp.tori.fi
cmp.tv.nu
cmp.utemagasinet.no
cmp.vestnytt.no
cmp.vg.no
cmp.vglive.no
cmp.vgnett.no
cmp.vgtv.no
cmp.wellness.se
psi-dev.svd.se
psi.svd.se
samtykke.bilbasen.dk
samtykke.dba.dk

Other certificates including the domain name aftenbladet.no

(limited to 100 certificates)
bedrift.schibsted.no
cis.schibsted.com
aftenposten.no
cmp.aftenbladet.no
*.i.bt.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
id.adressa.no
kundeweb.aftenposten.no
aftenbladet.no
aftenbladet.no
id.morgenlevering.no
cmp.aftenbladet.no
cmp.aftenbladet.no
aftenposten.no
kundeweb-ssl.snd.no
folk.schibsted.tech
bedrift.schibsted.no
bedrift.schibsted.no
cmp.aftenbladet.no
detskjer.snd.no
kundeportal.aftenposten.no
butikk.aftenbladet.no
ap.no
aftenposten.no
bedrift.schibsted.no
*.aftenbladet.no
bedrift.schibsted.no
detskjer.snd.no
sip.schibsted.no
ap.no
cmp.aftenbladet.no
kundeweb-ssl.snd.no
id.tek.no
aftenbladet.no
klikk.abonnement.aftenposten.no
api.snd.no
kundeweb-ssl.snd.no
cmp.aftenbladet.no
editorial.aftenbladet.no
butikk.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-03.schibsted.no
bedrift.schibsted.no
id.dolen.no
id.magasinpluss.no
test-bestilling.aftenposten.no
www.aftenposten.no
cmp.aftenbladet.no
kundeweb.aftenposten.no
i.aftenbladet.no
ap.no
i.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-04.schibsted.no
cmp.aftenbladet.no
ap.no
test-cm.aftenposten.no
cmp.aftenbladet.no
bedrift.schibsted.no
*.sacdn.no
cis.schibsted.com
cmp.aftenbladet.no
bedrift.schibsted.no
*.i.bt.no
bestilling.aftenposten.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
aftenposten.no
api.snd.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
kundeweb.aftenposten.no
klikk.abonnement.aftenposten.no
aftenbladet.no
ap.no
live.aftenposten.no
ap.no
aftenbladet.no
cmp.aftenbladet.no
www.aftenposten.no
www.aftenposten.no
red.hvaskjer.aftenbladet.no
www.aftenposten.no
bedrift.schibsted.no
kundeweb-ssl.snd.no
ap.no
ap.no
kundeportal.aftenposten.no
id.dolen.no
*.i.bt.no
aftenposten.no
sch-lyfe-03.schibsted.no
butikk.aftenbladet.no
ap.no
*.aftenbladet.no
portal.aftenbladet.no
ap.no
ap.no
cis.aftenbladet.no

Certificate

The complete raw certificate details for cmp.aftenbladet.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRPq2rNCw4I/xkzuuPkk
Z8RQ1gEzvK/in++i8FVdc5uHO8XfTkES9NUdPr+KIx5KThxIlRo22rbSKW1AT58s
uSoILjOK7/qkDbV9Vne+o3Btkif5fYrbsP5HxsTNW3aPYq4lszvsYCd7lwCm6Y8R
NQvVRYqu7f0OTj2wfUv+45PAhBvY9k2s+YNNzGtrZxfLJaNTacqCXALdu0rMKWdP
b6MjE2MmbP+kyKiVOH5RHQLCUwN9OoTkvi3ZGMxEwuSdfxt0HYyLIAKwn8oxetCG
Gufr8qBvZy/GQCNQy2uOyO3aEVjPbVI0EOqqhIOXgyajNylfDKKs/w73G/U0yx1m
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373117465953018185254366910564421851561784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 11:28:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 11:28:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.aftenbladet.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20334188735335967848940829192000531293479529479237817891298085265964741416585680874151836274057003443054579455120245157576576141407834897436102753374906240218615393951888592046185104921032910209714377490385034658336087548928329385093495237234465019814172720116410426511989561598619109321999706226911302906981335102221031091295028294222399465408699696003669740514663270696483183156001096322510361723973559583664852060500884896746057184672154403002469252382959218466646671113037252696829556776977833958730311149125422005465583783251616013996663347707321214627524638494069177860081835424429497548435938291435452023793229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f437c2e9ee13cfc9cb81627e5abe1d90bcb3a54d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenbladet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftonbladet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.av-avis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.avointyopaikka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bareasane.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.blocket.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.byas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bygdanytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.dinepenger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.e24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.finn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflyt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflytbestill.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godare.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.helthjem.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.honk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.honk.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jeger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.kesaduuni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klart.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klarttest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.landevei.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ledenicheur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.livsstil.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.minmote.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.norsk-klatring.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oikotie.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omakotimessut.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omataloyhtio.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omni.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omniekonomi.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.onsk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oyposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.podme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pricespy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.puutarha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.qasa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.randaberg24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rrmessut.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.strilen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.talovertailu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.terrengsykkel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tv.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.utemagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vestnytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vg.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vglive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgnett.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgtv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wellness.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi-dev.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.bilbasen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.dba.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189bb5ef7a00000040300463044022033d5e1d0ee2dcce24ed93ec6d6683a5b353f7740b4fa9e270f711e98f548d2f50220743483ab3d525a88077e42e295d07124dbf256b415cbfa2c41a5e06eadf6aa9f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189bb5ef8840000040300473045022100d3578294bb87fe092887bcda144461254146287941793fc61d8eda4465573be102200f90a1be3b467661e4c4ab61f9ffd9d528c7abf5105429f81c2694cb4f7bd5d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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