derstandard-spat.derstandard.at

Issued by R3

About this certificate

This digital certificate with serial number 03:65:15:a0:97:0e:ce:03:f7:73:5a:ae:04:d0:db:a8:ee:04 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=derstandard-spat.derstandard.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:15:a0:97:0e:ce:03:f7:73:5a:ae:04:d0:db:a8:ee:04
Serial Number (int): 295734124473521176689379100358957939092996
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:d2:1f:da:67:b9:8d:3a:19:b7:d7:63:68:ea:85:5b:c0:b3:8a:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:43:99:a1:58:78:7a:a5:cc:73:28:ad:df:78:a4:c0:70:39:94:c5
Fingerprint (sha256): 11:a1:81:da:fa:e1:57:f1:62:c8:57:4b:1a:0e:30:6a:3f:67:85:8e:c8:03:5e:db:23:be:f1:e4:65:a8:fd:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate derstandard-spat.derstandard.at

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for derstandard-spat.derstandard.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

derstandard-spat.derstandard.at
derstandard-spde.derstandard.de
malverngazette-gb.malverngazette.co.uk
messaging.carzone.ie
messengernewspapers-gb.messengernewspapers.co.uk
middlewichguardian-gb.middlewichguardian.co.uk
milfordmercury-gb.milfordmercury.co.uk
mmm.itpro.co.uk
mmm.theweek.co.uk
mms.bournemouthecho.co.uk
mms.channelpro.co.uk
mms.closeronline.co.uk
mms.cloudpro.co.uk
mms.coachmag.co.uk
mms.cyclist.co.uk
mms.drivingelectric.co.uk
mms.evo.co.uk
mms.expertreviews.co.uk
mms.graziadaily.co.uk
mms.kwiss.me
mms.libelle.nl
mms.planetradio.co.uk
ne1jobs-gb.ne1jobs.com
newforestpost-gb.newforestpost.co.uk
newsandstar-gb.newsandstar.co.uk
newsshopper-gb.newsshopper.co.uk
northwaleschronicle-gb.northwaleschronicle.co.uk
northwalespioneer-gb.northwalespioneer.co.uk
northwichguardian-gb.northwichguardian.co.uk
northyorkshireadvertiser-gb.northyorkshireadvertiser.co.uk
nw1jobs-gb.nw1jobs.com
nwemail-gb.nwemail.co.uk
onvista.de.onvista.com
ox1jobs-gb.ox1jobs.com
oxfordmail-gb.oxfordmail.co.uk
oxfordtimes-gb.oxfordtimes.co.uk
pcgamer-gb.pcgamer.com
peeblesshirenews-gb.peeblesshirenews.com
penarthtimes-gb.penarthtimes.co.uk
prestwichandwhitefieldguide-gb.prestwichandwhitefieldguide.co.uk
prod-digitalspyuk.digitalspy.com
radiotimes-gb.radiotimes.com
readertrips-gb.readertrips.co.uk
readingchronicle-gb.readingchronicle.co.uk
redditchadvertiser-gb.redditchadvertiser.co.uk
redhillandreigatelife-gb.redhillandreigatelife.co.uk
ressource1.med1.de
ressource1.netdoktor.de
rhyljournal-gb.rhyljournal.co.uk
richmondandtwickenhamtimes-gb.richmondandtwickenhamtimes.co.uk
romseyadvertiser-gb.romseyadvertiser.co.uk
runcornandwidnesworld-gb.runcornandwidnesworld.co.uk
s1cars-gb.s1cars.com
s1homes-gb.s1homes.com
s1jobs-gb.s1jobs.com
salisburyjournal-gb.salisburyjournal.co.uk
serengo-net.serengo.net
source.cuisineactuelle.fr
source.femmeactuelle.fr
sourcepoint.sueddeutsche.de
src.gala.fr
src.voici.fr

Other certificates including the domain name derstandard.at

(limited to 100 certificates)
immobilien.derstandard.at
derstandard-spat.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
janitor.derstandard.at
px.derstandard.at
images.derstandard.at
derstandard.at
mobile.derstandard.at
livestat.derstandard.at
derstandard-spat.derstandard.at
livestat.derstandard.at
mobile.derstandard.at
static.derstandard.at
sa23gl.wpc.edgecastcdn.net
intern.derstandard.at
ts.derstandard.at
fsm.chip.de
derstandard-spat.derstandard.at
source.cuisineactuelle.fr
incapsula.com
emagazin.derstandard.at
sa23gl.wpc.edgecastcdn.net
incapsula.com
derstandard-spat.derstandard.at
checkout.derstandard.at
incapsula.com
livestat.derstandard.at
sa23gl.wpc.edgecastcdn.net
sa23gl.wpc.edgecastcdn.net
static.derstandard.at
incapsula.com
jobs.derstandard.at
livestat.derstandard.at
emagazin.derstandard.at
derstandard-spat.derstandard.at
emagazin.derstandard.at
tsgw.standard.at
editorial.derstandard.at
www.derstandard.at
mobile.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
fsm.chip.de
support.derstandard.at
derstandard-spat.derstandard.at
janitor.derstandard.at
editorial.derstandard.at
livestat.derstandard.at
www.derstandard.at
emagazin.derstandard.at
derstandard-spat.derstandard.at
imagesintern.derstandard.at
email1.derstandard.at
www.derstandard.at
www.derstandard.at
incapsula.com
www.derstandard.at
onvista.de.onvista.com
incapsula.com
auth.derstandard.at
www.derstandard.at
sa23gl.wpc.edgecastcdn.net
livestat.derstandard.at
data-dda7d24eb2.derstandard.at
derstandard-spat.derstandard.at
epaper.derstandard.at
px.derstandard.at
janitor.derstandard.at
sa23gl.wpc.edgecastcdn.net
incapsula.com
about.derstandard.at
email2.derstandard.at
editorial.derstandard.at
www.derstandard.at
text.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
text.derstandard.at
apps.derstandard.at
incapsula.com
emagazin.derstandard.at
livestat.derstandard.at
text.derstandard.at
editorial.derstandard.at
spiele.derstandard.at
janitor.derstandard.at
incapsula.com
auth.derstandard.at
px.derstandard.at
derstandard.at
livestat.derstandard.at
email1.derstandard.at
jobs.derstandard.at
incapsula.com
www.derstandard.at
px.derstandard.at
incapsula.com
epaper.derstandard.at
abo.derstandard.at

Certificate

The complete raw certificate details for derstandard-spat.derstandard.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs75wrOtAWiLauqEAmHLA
8OxQjLf7q4JQ9b2Cb2ah2VmV3ZIqpI3CQKDNhuXnY2sEGldfZ3q0lvIREEYNUph4
X2xOXfKUkoHojzRjkHzLbtjK8XVZBr8pHqQdzwGti0/IhEU3rbzBFgD+n2mJvTBA
gD2r2m5qkISTb5b/a6jzxWEyITdQTSnz0G5SzbRi5mKsXFCxgGwzphQ8z8vGgRn2
oc+FEJF0AfDio2SVp4HGD/BLxBMMolIQQiNCHadovUXS0hgDlILq4tpLbk2WHS2h
3JG8/HJEwBnXMuLbt50FaBnD5zOPH7iOaar4UCtNJg88kDoxDGY5BBp/CjUDERQq
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295734124473521176689379100358957939092996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-23 17:07:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-21 17:07:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'derstandard-spat.derstandard.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22690566121291710045592488018831307306811135046631679398001350983614494925390354054545848549761781993924227634561762591452893995040899255116699758010048652264103733307629120914339726532063398853230360404881072750157257594795204757537929329458696175444208525937243650551678015257557344882756365084508642400556382352649389334332859099943252423566420212131114497598216595353493862573183315840525010793742660200344993905911998876835063164247286851423958570232722181044348219349108421323324637875890083626442946616270516990642488343296688056934365291272831014999393411397104341153181975217259942832472717818525603413109399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4d21fda67b98d3a19b7d76368ea855bc0b38acb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1975 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derstandard-spat.derstandard.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derstandard-spde.derstandard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malverngazette-gb.malverngazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.carzone.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messengernewspapers-gb.messengernewspapers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlewichguardian-gb.middlewichguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfordmercury-gb.milfordmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmm.itpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmm.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.bournemouthecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.channelpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.closeronline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cloudpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.coachmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cyclist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.drivingelectric.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.expertreviews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.graziadaily.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.kwiss.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.libelle.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ne1jobs-gb.ne1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newforestpost-gb.newforestpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsandstar-gb.newsandstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsshopper-gb.newsshopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwaleschronicle-gb.northwaleschronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwalespioneer-gb.northwalespioneer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwichguardian-gb.northwichguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northyorkshireadvertiser-gb.northyorkshireadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw1jobs-gb.nw1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwemail-gb.nwemail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onvista.de.onvista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ox1jobs-gb.ox1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordmail-gb.oxfordmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordtimes-gb.oxfordtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgamer-gb.pcgamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peeblesshirenews-gb.peeblesshirenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penarthtimes-gb.penarthtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestwichandwhitefieldguide-gb.prestwichandwhitefieldguide.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-digitalspyuk.digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiotimes-gb.radiotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readertrips-gb.readertrips.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingchronicle-gb.readingchronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redditchadvertiser-gb.redditchadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redhillandreigatelife-gb.redhillandreigatelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ressource1.med1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ressource1.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhyljournal-gb.rhyljournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondandtwickenhamtimes-gb.richmondandtwickenhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romseyadvertiser-gb.romseyadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runcornandwidnesworld-gb.runcornandwidnesworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1cars-gb.s1cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1jobs-gb.s1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salisburyjournal-gb.salisburyjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serengo-net.serengo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.cuisineactuelle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.femmeactuelle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.sueddeutsche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.gala.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.voici.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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