derstandard-spat.derstandard.at

Issued by R3

About this certificate

This digital certificate with serial number 04:59:e1:28:25:c2:29:1b:ad:bc:e2:5f:07:2e:90:0b:23:f5 was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=derstandard-spat.derstandard.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:e1:28:25:c2:29:1b:ad:bc:e2:5f:07:2e:90:0b:23:f5
Serial Number (int): 379033559139762598508977028988553466160117
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:f0:d2:02:ac:96:70:8c:7b:d0:ee:34:41:7a:54:2b:76:ac:3e:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:c7:72:e8:e3:82:8b:04:8c:9a:6a:f5:39:f0:82:72:60:e3:66:5e
Fingerprint (sha256): 35:59:3b:ef:1b:8d:45:7b:6d:7e:13:7b:ff:10:8f:51:a0:d7:0f:99:e0:85:db:b8:a5:f9:2c:2f:cf:e2:2a:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate derstandard-spat.derstandard.at

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for derstandard-spat.derstandard.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

derstandard-spat.derstandard.at
derstandard-spde.derstandard.de
malverngazette-gb.malverngazette.co.uk
messaging.carzone.ie
messengernewspapers-gb.messengernewspapers.co.uk
middlewichguardian-gb.middlewichguardian.co.uk
milfordmercury-gb.milfordmercury.co.uk
mmm.itpro.co.uk
mmm.theweek.co.uk
mms.bournemouthecho.co.uk
mms.channelpro.co.uk
mms.closeronline.co.uk
mms.cloudpro.co.uk
mms.coachmag.co.uk
mms.cyclist.co.uk
mms.drivingelectric.co.uk
mms.evo.co.uk
mms.expertreviews.co.uk
mms.graziadaily.co.uk
mms.kwiss.me
mms.libelle.nl
mms.planetradio.co.uk
ne1jobs-gb.ne1jobs.com
newforestpost-gb.newforestpost.co.uk
newsandstar-gb.newsandstar.co.uk
newsshopper-gb.newsshopper.co.uk
northwaleschronicle-gb.northwaleschronicle.co.uk
northwalespioneer-gb.northwalespioneer.co.uk
northwichguardian-gb.northwichguardian.co.uk
northyorkshireadvertiser-gb.northyorkshireadvertiser.co.uk
nw1jobs-gb.nw1jobs.com
nwemail-gb.nwemail.co.uk
onvista.de.onvista.com
ox1jobs-gb.ox1jobs.com
oxfordmail-gb.oxfordmail.co.uk
oxfordtimes-gb.oxfordtimes.co.uk
pcgamer-gb.pcgamer.com
peeblesshirenews-gb.peeblesshirenews.com
penarthtimes-gb.penarthtimes.co.uk
prestwichandwhitefieldguide-gb.prestwichandwhitefieldguide.co.uk
prod-digitalspyuk.digitalspy.com
radiotimes-gb.radiotimes.com
readertrips-gb.readertrips.co.uk
readingchronicle-gb.readingchronicle.co.uk
redditchadvertiser-gb.redditchadvertiser.co.uk
redhillandreigatelife-gb.redhillandreigatelife.co.uk
ressource1.med1.de
ressource1.netdoktor.de
rhyljournal-gb.rhyljournal.co.uk
richmondandtwickenhamtimes-gb.richmondandtwickenhamtimes.co.uk
romseyadvertiser-gb.romseyadvertiser.co.uk
runcornandwidnesworld-gb.runcornandwidnesworld.co.uk
s1cars-gb.s1cars.com
s1homes-gb.s1homes.com
s1jobs-gb.s1jobs.com
salisburyjournal-gb.salisburyjournal.co.uk
serengo-net.serengo.net
source.cuisineactuelle.fr
source.femmeactuelle.fr
sourcepoint.sueddeutsche.de
src.gala.fr
src.voici.fr

Other certificates including the domain name derstandard.at

(limited to 100 certificates)
immobilien.derstandard.at
derstandard-spat.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
janitor.derstandard.at
px.derstandard.at
images.derstandard.at
derstandard.at
mobile.derstandard.at
livestat.derstandard.at
derstandard-spat.derstandard.at
livestat.derstandard.at
mobile.derstandard.at
static.derstandard.at
sa23gl.wpc.edgecastcdn.net
intern.derstandard.at
ts.derstandard.at
fsm.chip.de
derstandard-spat.derstandard.at
source.cuisineactuelle.fr
incapsula.com
emagazin.derstandard.at
sa23gl.wpc.edgecastcdn.net
incapsula.com
derstandard-spat.derstandard.at
checkout.derstandard.at
incapsula.com
livestat.derstandard.at
sa23gl.wpc.edgecastcdn.net
sa23gl.wpc.edgecastcdn.net
static.derstandard.at
incapsula.com
jobs.derstandard.at
livestat.derstandard.at
emagazin.derstandard.at
derstandard-spat.derstandard.at
emagazin.derstandard.at
tsgw.standard.at
editorial.derstandard.at
www.derstandard.at
mobile.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
fsm.chip.de
support.derstandard.at
derstandard-spat.derstandard.at
janitor.derstandard.at
editorial.derstandard.at
livestat.derstandard.at
www.derstandard.at
emagazin.derstandard.at
derstandard-spat.derstandard.at
imagesintern.derstandard.at
email1.derstandard.at
www.derstandard.at
www.derstandard.at
incapsula.com
www.derstandard.at
onvista.de.onvista.com
incapsula.com
auth.derstandard.at
www.derstandard.at
sa23gl.wpc.edgecastcdn.net
livestat.derstandard.at
data-dda7d24eb2.derstandard.at
derstandard-spat.derstandard.at
epaper.derstandard.at
px.derstandard.at
janitor.derstandard.at
sa23gl.wpc.edgecastcdn.net
incapsula.com
about.derstandard.at
email2.derstandard.at
editorial.derstandard.at
www.derstandard.at
text.derstandard.at
incapsula.com
sa23gl.wpc.edgecastcdn.net
text.derstandard.at
apps.derstandard.at
incapsula.com
emagazin.derstandard.at
livestat.derstandard.at
text.derstandard.at
editorial.derstandard.at
spiele.derstandard.at
janitor.derstandard.at
incapsula.com
auth.derstandard.at
px.derstandard.at
derstandard.at
livestat.derstandard.at
email1.derstandard.at
jobs.derstandard.at
incapsula.com
www.derstandard.at
px.derstandard.at
incapsula.com
epaper.derstandard.at
abo.derstandard.at

Certificate

The complete raw certificate details for derstandard-spat.derstandard.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuuVBi10Anjpb2bdIy9B
vDS+imNT1fmlyHpqv8MgoxvpG6O5uKrh2uSLAQ2LmfSrlFxzT810uL25870gkkTJ
XQL0d/rcJtsg2p2TtcDvADRQeQgPbCmshTVYHOhLYnfCaXDEkQFH3SfUqOWFtPRw
CIpR9YUhuvDFwrqLfDkJbFXuy2tVS4UkQONAh1LjosIw+prbKEBBTiG75fozCLr9
+WEG4vf0dQpm4QrtTFhEsr5EJnW7bKgu9Hy5r/InyGJX4uMpN7sK+aARtLQ0tLNt
w6xCnM2LLOioc0qYa0VZ4QHOvLP2rvXNpzcyNm0LdiNL2y+PTGYnJTmdldTJG7qG
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379033559139762598508977028988553466160117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-26 17:07:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 17:07:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'derstandard-spat.derstandard.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26121260698808585356901457443135912916805757934945110749566695032161577935876010342936073531266690936383135236325086690956397127665079258018659400193978162067017855015174560085778542350382046791295613138042332592928103082520493819914179799222036496993592647224034313495251760013675196481407530012399723188156517935422357926362032389040804325666467846334232433911013654188410018029418767205086811588618037545740099813630741781324488857050262849333837770747684591627702495009923845501207570395013860830804470947058245612382849722623583336790145131880447676168331237151989928008712131041932057582369682859157907469665907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9f0d202ac96708c7bd0ee34417a542b76ac3ed1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1975 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derstandard-spat.derstandard.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derstandard-spde.derstandard.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malverngazette-gb.malverngazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.carzone.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messengernewspapers-gb.messengernewspapers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middlewichguardian-gb.middlewichguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfordmercury-gb.milfordmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmm.itpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmm.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.bournemouthecho.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.channelpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.closeronline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cloudpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.coachmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cyclist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.drivingelectric.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.expertreviews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.graziadaily.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.kwiss.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.libelle.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ne1jobs-gb.ne1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newforestpost-gb.newforestpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsandstar-gb.newsandstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsshopper-gb.newsshopper.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwaleschronicle-gb.northwaleschronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwalespioneer-gb.northwalespioneer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwichguardian-gb.northwichguardian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northyorkshireadvertiser-gb.northyorkshireadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw1jobs-gb.nw1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwemail-gb.nwemail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onvista.de.onvista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ox1jobs-gb.ox1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordmail-gb.oxfordmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordtimes-gb.oxfordtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgamer-gb.pcgamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peeblesshirenews-gb.peeblesshirenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penarthtimes-gb.penarthtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestwichandwhitefieldguide-gb.prestwichandwhitefieldguide.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-digitalspyuk.digitalspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiotimes-gb.radiotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readertrips-gb.readertrips.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingchronicle-gb.readingchronicle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redditchadvertiser-gb.redditchadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redhillandreigatelife-gb.redhillandreigatelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ressource1.med1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ressource1.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhyljournal-gb.rhyljournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondandtwickenhamtimes-gb.richmondandtwickenhamtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romseyadvertiser-gb.romseyadvertiser.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runcornandwidnesworld-gb.runcornandwidnesworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1cars-gb.s1cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1jobs-gb.s1jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salisburyjournal-gb.salisburyjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serengo-net.serengo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.cuisineactuelle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.femmeactuelle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.sueddeutsche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.gala.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'src.voici.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0072cc9fea65696f6daa40e64674a5100b4510d024864a2226a57ed8acd61c2b2bb64becec9494fa97b438f2cf86b13496f9a29dd076dabc108a0de4f4486a943000b7afe26a10511f7e8b794ecf804cdb9d40423c87d40f7a9d0b7286c6ccb468c698dc294dfb8e1b0fdf043f0c942da4f0dfaaa336126bca83d2349cb46a11457d86d8e9ae86cae8aa52ed0dcf15a154b9fbad153b0aac7af38ea903c4de8a8da1b02a379a0c0af8149f9dcff181fe9c73546c52b085cb25dc3083e60bb0dbd3c9e1562f5dec1910b70c1b2e9003807073eca859c01ee63ef371fdf73d8482e27733d68160a82df3970130daea9a0852f1b9620bc14923e732748497cb517367