mms.sp-prod.net

Issued by R3

About this certificate

This digital certificate with serial number 03:a3:2f:81:20:87:56:90:4d:5d:35:d6:48:35:d1:e7:d2:9b was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mms.sp-prod.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:2f:81:20:87:56:90:4d:5d:35:d6:48:35:d1:e7:d2:9b
Serial Number (int): 316866027785250050940975763956130501874331
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:0a:65:e0:65:4a:dd:e5:c2:10:16:34:c7:c3:10:7f:05:69:d3:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:5f:a1:7d:20:11:59:74:8e:8c:49:b0:08:d8:ea:18:d0:8d:d0:a5
Fingerprint (sha256): 17:98:ba:25:87:12:b8:14:c1:3e:62:61:c6:f9:bb:cd:90:a1:2b:46:25:f8:e6:a8:0d:1a:77:77:05:e1:e4:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mms.sp-prod.net

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mms.sp-prod.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.academics.at
cmp.academics.ch
cmp.academics.com
cmp.academics.de
cmp.arnnet.com.au
cmp.channelasia.tech
cmp.channelpartner.de
cmp.cio.com
cmp.cio.de
cmp.computerwoche.de
cmp.computerworld.com
cmp.computerworld.pl
cmp.csoonline.com
cmp.digitalartsonline.co.uk
cmp.gamestar.com
cmp.goodgearguide.com.au
cmp.idg.pl
cmp.idg.tv
cmp.idgtechnetwork.com
cmp.infoworld.com
cmp.itwhitepapers.com
cmp.javaworld.com
cmp.lacentrale.fr
cmp.macwelt.de
cmp.macworld.co.uk
cmp.macworld.com
cmp.macworld.es
cmp.mavoiturecash.fr
cmp.networkworld.com
cmp.pcwelt.de
cmp.pcworld.com
cmp.pcworld.es
cmp.pcworld.idg.com.au
cmp.pcworld.pl
cmp.prod.jobs.zeit.de
cmp.promiflash.de
cmp.sky.at
cmp.sky.de
cmp.skysportaustria.at
cmp.techconnect.com
cmp.techhive.com
cmp.thefullnerd.com
cmp.webwereld.nl
consent.computerweekly.com
consent.datasciencecentral.com
consent.eatsmarter.de
consent.iqdigital.de
consent.iskelma.fi
consent.lemagit.fr
consent.planetradio.co.uk
consent.radiocity.fi
consent.radionova.fi
consent.radioplay.dk
consent.radioplay.fi
consent.radioplay.no
consent.radioplay.se
consent.radiopooki.fi
consent.sueddeutsche.de
consent.techtarget.com
consent.techtarget.de
consent.techtarget.fr
consent.theguardian.com
consent.theserverside.com
consent.voice.fi
eurogamer-de.eurogamer.de
eurogamer-uk.eurogamer.net
glasgowtimes-gb.glasgowtimes.co.uk
lapresse-ca.lapresse.ca
message.maven.io
message.sp-prod.net
message1257.sp-prod.net
message1343.sp-prod.net
message1348.sp-prod.net
message1414.sp-prod.net
message296.sp-prod.net
message692.sp-prod.net
messaging.sourcepoint.com
metabomb-uk.metabomb.net
mms.burda-forward.de
mms.cnn.com
mms.sp-prod.net
privacy.ligabold.dk
rps-uk.rockpapershotgun.com
s1homes-gb.s1homes.com
sourcepoint-mms.aetv.com
sourcepoint-mms.biography.com
sourcepoint-mms.history.com
sourcepoint-mms.mylifetime.com
sourcepoint.vice.com
sp.nba.com
sp.nintendolife.com
sp.pushsquare.com
usgamer-us.usgamer.net
vg247-uk.vg247.com
viervijf-be.goplay.be

Other certificates including the domain name sp-prod.net

(limited to 100 certificates)
cmp.channelpartner.de
*.sp-prod.net
amonas.10kysymysta.fi
mms.sp-prod.net
cs.sp-prod.net
*.sp-prod.net
*.sp-prod.net
mms.sp-prod.net
cmp.channelpartner.de
*.sp-prod.net
mms.sp-prod.net
cs.sp-prod.net
cs.sp-prod.net
*.sp-prod.net
cs.sp-prod.net
*.sp-prod.net
cmp.academics.at
*.sp-prod.net
cmp.academics.at
cmp.academics.at
cmp.academics.at
mms.sp-prod.net
mms.sp-prod.net
mms.sp-prod.net
mms.sp-prod.net
cmp.academics.at
mms.sp-prod.net
*.sp-prod.net
mms.sp-prod.net
cs.sp-prod.net
amonas.10kysymysta.fi
cs.sp-prod.net
cmp.academics.at
*.sp-prod.net
amonas.10kysymysta.fi
cmp.channelpartner.de
cmp.channelpartner.de
*.sp-prod.net
*.sp-prod.net
cmp.channelpartner.de
cmp.academics.at
cmp.infoworld.com
cmp.academics.at
mms.sp-prod.net
cmp.channelpartner.de
message000.sp-prod.net
altpay.sp-prod.net
cmp.infoworld.com
mms.sp-prod.net
cs.sp-prod.net
mms.sp-prod.net
*.sp-prod.net
cs.sp-prod.net
cmp.infoworld.com
*.sp-prod.net
cs.sp-prod.net
mms.sp-prod.net
*.sp-prod.net
mms.sp-prod.net
amonas.10kysymysta.fi
cmp.infoworld.com
cs.sp-prod.net
mms.sp-prod.net
cmp.academics.at
account.sp-prod.net
*.sp-prod.net
amonas.10kysymysta.fi

Certificate

The complete raw certificate details for mms.sp-prod.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINHTCCDAWgAwIBAgISA6MvgSCHVpBNXTXWSDXR59KbMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjExMjYxNzEwMzBaFw0yMzAyMjQxNzEwMjlaMBoxGDAWBgNVBAMT
D21tcy5zcC1wcm9kLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKiXFdyAIZzke9wuTTV/NvRbYyglu2AjLjHJj1Z98ARRjdWexqObke/vUDR7e0CC
3jXV0baiac8NIUtG8bsNXgJQmLksM7ptmMnp3MG4nB2IQmB089MVAtRujicRTxp+
PsIh+jtDEuY7BlynRVuYOkEfL/019WOU/uEnt1PhOZ51AC83HaeJ50cy/iRLEBS4
i1h7r2OZ0tJdUSP9YGYjoheQP8ly8oxdjfRDQMYJoADBeCA4OEhzuLjPG9zzw/ZA
jm+nO0LjT94G/aQuqADfGVSZUOhHQdrri7D9RUpnC0e3O8Cy4YxNBps80mLqFDIs
LbOSGEdaZL1IYcZ31xbzlCkCAwEAAaOCCkMwggo/MA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUPgpl4GVK3eXCEBY0x8MQfwVp0zYwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wgggSBgNVHREEgggJMIIIBYIQY21wLmFjYWRlbWljcy5hdIIQY21wLmFjYWRl
bWljcy5jaIIRY21wLmFjYWRlbWljcy5jb22CEGNtcC5hY2FkZW1pY3MuZGWCEWNt
cC5hcm5uZXQuY29tLmF1ghRjbXAuY2hhbm5lbGFzaWEudGVjaIIVY21wLmNoYW5u
ZWxwYXJ0bmVyLmRlggtjbXAuY2lvLmNvbYIKY21wLmNpby5kZYIUY21wLmNvbXB1
dGVyd29jaGUuZGWCFWNtcC5jb21wdXRlcndvcmxkLmNvbYIUY21wLmNvbXB1dGVy
d29ybGQucGyCEWNtcC5jc29vbmxpbmUuY29tghtjbXAuZGlnaXRhbGFydHNvbmxp
bmUuY28udWuCEGNtcC5nYW1lc3Rhci5jb22CGGNtcC5nb29kZ2Vhcmd1aWRlLmNv
bS5hdYIKY21wLmlkZy5wbIIKY21wLmlkZy50doIWY21wLmlkZ3RlY2huZXR3b3Jr
LmNvbYIRY21wLmluZm93b3JsZC5jb22CFWNtcC5pdHdoaXRlcGFwZXJzLmNvbYIR
Y21wLmphdmF3b3JsZC5jb22CEWNtcC5sYWNlbnRyYWxlLmZygg5jbXAubWFjd2Vs
dC5kZYISY21wLm1hY3dvcmxkLmNvLnVrghBjbXAubWFjd29ybGQuY29tgg9jbXAu
bWFjd29ybGQuZXOCFGNtcC5tYXZvaXR1cmVjYXNoLmZyghRjbXAubmV0d29ya3dv
cmxkLmNvbYINY21wLnBjd2VsdC5kZYIPY21wLnBjd29ybGQuY29tgg5jbXAucGN3
b3JsZC5lc4IWY21wLnBjd29ybGQuaWRnLmNvbS5hdYIOY21wLnBjd29ybGQucGyC
FWNtcC5wcm9kLmpvYnMuemVpdC5kZYIRY21wLnByb21pZmxhc2guZGWCCmNtcC5z
a3kuYXSCCmNtcC5za3kuZGWCFmNtcC5za3lzcG9ydGF1c3RyaWEuYXSCE2NtcC50
ZWNoY29ubmVjdC5jb22CEGNtcC50ZWNoaGl2ZS5jb22CE2NtcC50aGVmdWxsbmVy
ZC5jb22CEGNtcC53ZWJ3ZXJlbGQubmyCGmNvbnNlbnQuY29tcHV0ZXJ3ZWVrbHku
Y29tgh5jb25zZW50LmRhdGFzY2llbmNlY2VudHJhbC5jb22CFWNvbnNlbnQuZWF0
c21hcnRlci5kZYIUY29uc2VudC5pcWRpZ2l0YWwuZGWCEmNvbnNlbnQuaXNrZWxt
YS5maYISY29uc2VudC5sZW1hZ2l0LmZyghljb25zZW50LnBsYW5ldHJhZGlvLmNv
LnVrghRjb25zZW50LnJhZGlvY2l0eS5maYIUY29uc2VudC5yYWRpb25vdmEuZmmC
FGNvbnNlbnQucmFkaW9wbGF5LmRrghRjb25zZW50LnJhZGlvcGxheS5maYIUY29u
c2VudC5yYWRpb3BsYXkubm+CFGNvbnNlbnQucmFkaW9wbGF5LnNlghVjb25zZW50
LnJhZGlvcG9va2kuZmmCF2NvbnNlbnQuc3VlZGRldXRzY2hlLmRlghZjb25zZW50
LnRlY2h0YXJnZXQuY29tghVjb25zZW50LnRlY2h0YXJnZXQuZGWCFWNvbnNlbnQu
dGVjaHRhcmdldC5mcoIXY29uc2VudC50aGVndWFyZGlhbi5jb22CGWNvbnNlbnQu
dGhlc2VydmVyc2lkZS5jb22CEGNvbnNlbnQudm9pY2UuZmmCGWV1cm9nYW1lci1k
ZS5ldXJvZ2FtZXIuZGWCGmV1cm9nYW1lci11ay5ldXJvZ2FtZXIubmV0giJnbGFz
Z293dGltZXMtZ2IuZ2xhc2dvd3RpbWVzLmNvLnVrghdsYXByZXNzZS1jYS5sYXBy
ZXNzZS5jYYIQbWVzc2FnZS5tYXZlbi5pb4ITbWVzc2FnZS5zcC1wcm9kLm5ldIIX
bWVzc2FnZTEyNTcuc3AtcHJvZC5uZXSCF21lc3NhZ2UxMzQzLnNwLXByb2QubmV0
ghdtZXNzYWdlMTM0OC5zcC1wcm9kLm5ldIIXbWVzc2FnZTE0MTQuc3AtcHJvZC5u
ZXSCFm1lc3NhZ2UyOTYuc3AtcHJvZC5uZXSCFm1lc3NhZ2U2OTIuc3AtcHJvZC5u
ZXSCGW1lc3NhZ2luZy5zb3VyY2Vwb2ludC5jb22CGG1ldGFib21iLXVrLm1ldGFi
b21iLm5ldIIUbW1zLmJ1cmRhLWZvcndhcmQuZGWCC21tcy5jbm4uY29tgg9tbXMu
c3AtcHJvZC5uZXSCE3ByaXZhY3kubGlnYWJvbGQuZGuCG3Jwcy11ay5yb2NrcGFw
ZXJzaG90Z3VuLmNvbYIWczFob21lcy1nYi5zMWhvbWVzLmNvbYIYc291cmNlcG9p
bnQtbW1zLmFldHYuY29tgh1zb3VyY2Vwb2ludC1tbXMuYmlvZ3JhcGh5LmNvbYIb
c291cmNlcG9pbnQtbW1zLmhpc3RvcnkuY29tgh5zb3VyY2Vwb2ludC1tbXMubXls
aWZldGltZS5jb22CFHNvdXJjZXBvaW50LnZpY2UuY29tggpzcC5uYmEuY29tghNz
cC5uaW50ZW5kb2xpZmUuY29tghFzcC5wdXNoc3F1YXJlLmNvbYIWdXNnYW1lci11
cy51c2dhbWVyLm5ldIISdmcyNDctdWsudmcyNDcuY29tghV2aWVydmlqZi1iZS5n
b3BsYXkuYmUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20
mQAAAYS1Ij0dAAAEAwBHMEUCIQCyOF3ZorTjdAoTLDi/cTC/ingpnTDFERK/dynW
DX4tBwIgb2h1B8uKn0AZn1nRGdd6cPiVpwHsZqQc4qkwKatMUtcAdQDoPtDaPvUG
NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYS1Ij0dAAAEAwBGMEQCIGIdgeDK
23yBdHSuxBa8GAGKPK5RiRhQ4FtIGJHeMAGdAiBc3XV+DGCZh2yuvM1TimqlO9UE
ivyIIRvjlK7vrNQsejANBgkqhkiG9w0BAQsFAAOCAQEAbcaPS4ZO27tt8qvprTBx
C3d70eeh/4p1+Us+9R4fwsEO9yHxdIC3vMydJs0vwsgNIivKQsrP9eXbBJgy2I9h
VcmW2K8hYAOXz+qLeTyV3eqrS3sW6lDpz8+UMyPox7JkVpXrsRIQHvm5t2Q2zhrr
IjUXoB8thv6JllZZg8XngLYXAtKJBIg/HOrNkFbxjyFvIVeOOZh4FqPVgNlkW1+9
T1vhjQ6kw7k1wam3KAJCFND8aJc+QUrBbT6viryDzs3+MODwc7NVlvpNWr7APG16
PlVBXTX1PscvXUxj8+6Jd+vziVptr7UYNeWkv+8rR/SkGua/Sz+iK30A/U+a+sXl
xA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJcV3IAhnOR73C5NNX82
9FtjKCW7YCMuMcmPVn3wBFGN1Z7Go5uR7+9QNHt7QILeNdXRtqJpzw0hS0bxuw1e
AlCYuSwzum2YyencwbicHYhCYHTz0xUC1G6OJxFPGn4+wiH6O0MS5jsGXKdFW5g6
QR8v/TX1Y5T+4Se3U+E5nnUALzcdp4nnRzL+JEsQFLiLWHuvY5nS0l1RI/1gZiOi
F5A/yXLyjF2N9ENAxgmgAMF4IDg4SHO4uM8b3PPD9kCOb6c7QuNP3gb9pC6oAN8Z
VJlQ6EdB2uuLsP1FSmcLR7c7wLLhjE0GmzzSYuoUMiwts5IYR1pkvUhhxnfXFvOU
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316866027785250050940975763956130501874331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-26 17:10:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 17:10:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mms.sp-prod.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21282538219741386217826343005907184339635813273955553378428327888144262802880448072855942713121558114618276531904806843159338011134512890863136338668190179893113211858982569239819735725509366219544744067019731710441495680793780155191781391070880024596512662681180689068580392546936033168484928814079987256699800840924673897769751070966113595472902442880302218537632874004755610468355332622124217546609060876645489465600369045401621576779378037261862895548733620939840995632610422923565954805458808915315889585434061000172607461649034832521373947080463238475631547832595951824419485410668430928347652397879498330313769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e0a65e0654adde5c2101634c7c3107f0569d336
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2057 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.arnnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelasia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelpartner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.digitalartsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gamestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.goodgearguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idgtechnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.itwhitepapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.lacentrale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mavoiturecash.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.idg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.promiflash.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.skysportaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thefullnerd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.webwereld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.computerweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.datasciencecentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.eatsmarter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iqdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iskelma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.lemagit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiocity.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radionova.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiopooki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.sueddeutsche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theserverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.voice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-de.eurogamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-uk.eurogamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasgowtimes-gb.glasgowtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapresse-ca.lapresse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1257.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1343.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1348.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1414.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message296.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message692.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.sourcepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabomb-uk.metabomb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.ligabold.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps-uk.rockpapershotgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.aetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.mylifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nintendolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgamer-us.usgamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg247-uk.vg247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viervijf-be.goplay.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184b5223d1d0000040300473045022100b2385dd9a2b4e3740a132c38bf7130bf8a78299d30c51112bf7729d60d7e2d0702206f687507cb8a9f40199f59d119d77a70f895a701ec66a41ce2a93029ab4c52d7007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184b5223d1d00000403004630440220621d81e0cadb7c817474aec416bc18018a3cae51891850e05b481891de30019d02205cdd757e0c6099876caebccd538a6aa53bd5048afc88211be394aeefacd42c7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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