cmp.academics.at

Issued by R3

About this certificate

This digital certificate with serial number 03:6d:43:03:c2:53:36:67:b7:91:41:12:f3:56:13:31:f2:1b was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmp.academics.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:43:03:c2:53:36:67:b7:91:41:12:f3:56:13:31:f2:1b
Serial Number (int): 298516713583651435599217279922281542447643
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:e2:6e:5e:72:24:54:a9:1e:c1:85:81:a3:7c:89:83:01:c9:4f:85
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:5e:0c:06:dd:64:d8:32:09:db:c0:26:f5:7c:97:7b:09:c3:2b:f0
Fingerprint (sha256): 3d:b1:d0:7b:a3:a6:5e:1f:b8:6b:3b:d2:a1:c4:c9:aa:9f:e3:e2:22:15:e7:e2:5d:35:48:e1:af:d8:60:11:b0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.academics.at

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.academics.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.academics.at
cmp.academics.ch
cmp.academics.com
cmp.academics.de
cmp.arnnet.com.au
cmp.channelasia.tech
cmp.channelpartner.de
cmp.cio.com
cmp.cio.de
cmp.computerwoche.de
cmp.computerworld.com
cmp.computerworld.pl
cmp.csoonline.com
cmp.digitalartsonline.co.uk
cmp.gamestar.com
cmp.goodgearguide.com.au
cmp.idg.pl
cmp.idg.tv
cmp.idgtechnetwork.com
cmp.infoworld.com
cmp.itwhitepapers.com
cmp.javaworld.com
cmp.lacentrale.fr
cmp.macwelt.de
cmp.macworld.co.uk
cmp.macworld.com
cmp.macworld.es
cmp.mavoiturecash.fr
cmp.networkworld.com
cmp.pcwelt.de
cmp.pcworld.com
cmp.pcworld.idg.com.au
cmp.pcworld.pl
cmp.prod.jobs.zeit.de
cmp.promiflash.de
cmp.sky.at
cmp.sky.de
cmp.skysportaustria.at
cmp.techconnect.com
cmp.techhive.com
cmp.thefullnerd.com
cmp.webwereld.nl
consent.computerweekly.com
consent.datasciencecentral.com
consent.eatsmarter.de
consent.iqdigital.de
consent.iskelma.fi
consent.lemagit.fr
consent.planetradio.co.uk
consent.radiocity.fi
consent.radionova.fi
consent.radioplay.dk
consent.radioplay.fi
consent.radioplay.no
consent.radioplay.se
consent.radiopooki.fi
consent.techtarget.com
consent.techtarget.de
consent.techtarget.fr
consent.theguardian.com
consent.theserverside.com
consent.voice.fi
eurogamer-de.eurogamer.de
eurogamer-uk.eurogamer.net
lapresse-ca.lapresse.ca
message.maven.io
message.sp-prod.net
message1257.sp-prod.net
message1343.sp-prod.net
message1348.sp-prod.net
message1414.sp-prod.net
message296.sp-prod.net
message692.sp-prod.net
messaging.sourcepoint.com
metabomb-uk.metabomb.net
mms.burda-forward.de
mms.cnn.com
mms.sp-prod.net
rps-uk.rockpapershotgun.com
s1homes-gb.s1homes.com
sourcepoint-mms.aetv.com
sourcepoint-mms.biography.com
sourcepoint-mms.history.com
sourcepoint-mms.mylifetime.com
sourcepoint.vice.com
sp.nba.com
sp.nintendolife.com
sp.pushsquare.com
usgamer-us.usgamer.net
vg247-uk.vg247.com
viervijf-be.goplay.be

Other certificates including the domain name academics.at

(limited to 100 certificates)
cmp.channelpartner.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
prod.academics.de
www.academics.de
mms.sp-prod.net
cmp.channelpartner.de
www.academics.de
stage.academics.de
stage.academics.de
www.academics.de
www.academics.de
*.academics.at
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
www.academics.de
staging.academics.de
cmp.academics.at
cmp.academics.at
prod.academics.de
cmp.academics.at
staging.academics.de
www.academics.de
cmp.academics.at
prod.academics.de
mms.sp-prod.net
cmp.academics.at
prod.academics.de
stage.academics.de
cmp.academics.at
www.academics.de
prod.academics.de
prod.academics.de
www.academics.de
www.academics.de
cmp-sp.handelsblatt.com
www.academics.de
www.academics.de
www.academics.de
prod.academics.de
dev.academics.de
cmp-sp.handelsblatt.com
cmp.academics.at
www.academics.de
dev.academics.de
stage.academics.de
dev.academics.de
www.academics.de
prod.academics.de
prod.academics.de
cmp.channelpartner.de
www.academics.de
cmp.channelpartner.de
cmp.channelpartner.de
cmp.academics.at
cmp.infoworld.com
www.academics.de
prod.academics.de
cmp.academics.at
stage.academics.de
cmp-sp.handelsblatt.com
cmp.channelpartner.de
staging.academics.de
staging.academics.de
dev.academics.de
cmp.infoworld.com
stage.academics.de
prod.academics.de
www.academics.de
prod.academics.de
staging.academics.de
cmp.infoworld.com
prod.academics.de
prod.academics.de
stage.academics.de
prod.academics.de
cmp-sp.handelsblatt.com
mms.sp-prod.net
dev.academics.de
staging.academics.de
www.academics.de
stage.academics.de
*.academics.at
www.academics.de
cmp.infoworld.com
prod.academics.de
staging.academics.de
www.academics.de
www.academics.de
mms.sp-prod.net
cmp.academics.at
prod.academics.de
prod.academics.de

Certificate

The complete raw certificate details for cmp.academics.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMhDCCC2ygAwIBAgISA21DA8JTNme3kUES81YTMfIbMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MjgxMjIwMDdaFw0yMzExMjYxMjIwMDZaMBsxGTAXBgNVBAMT
EGNtcC5hY2FkZW1pY3MuYXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCx0CLJMIfX+2Ff5jjpk3AqehRFNNma5rq6c7hN7euFABb3iVcchSpi6+GfjEO5
NOVGWskk3VTpho2AQXLm6M/QpDnqDuJN1XP9njp1aVwCusx8wd/JmtBryp5ue4Ud
iq0F7U1267s7Z3I+WIXVzfJV6XvoktIVIwrasVlTYtVu3up5Ey3jkmenI1UGaBxU
tqfaWc4XrfeqmkHSa6dGVv5/d/BLYkLscUXHdyo3qp6ZMvukfCo2E8VMirCCrTUt
/zWs0awRJAfw+fX4oIPaX75dMo8KjX3LM/YNjIuwL2On2iaQReVnq+pQteNSW3Wk
xNWOWcgct+UTgTCIt0cZrr+ZAgMBAAGjggmpMIIJpTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFB/ibl5yJFSpHsGFgaN8iYMByU+FMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMIIHsAYDVR0RBIIHpzCCB6OCEGNtcC5hY2FkZW1pY3MuYXSCEGNtcC5hY2Fk
ZW1pY3MuY2iCEWNtcC5hY2FkZW1pY3MuY29tghBjbXAuYWNhZGVtaWNzLmRlghFj
bXAuYXJubmV0LmNvbS5hdYIUY21wLmNoYW5uZWxhc2lhLnRlY2iCFWNtcC5jaGFu
bmVscGFydG5lci5kZYILY21wLmNpby5jb22CCmNtcC5jaW8uZGWCFGNtcC5jb21w
dXRlcndvY2hlLmRlghVjbXAuY29tcHV0ZXJ3b3JsZC5jb22CFGNtcC5jb21wdXRl
cndvcmxkLnBsghFjbXAuY3Nvb25saW5lLmNvbYIbY21wLmRpZ2l0YWxhcnRzb25s
aW5lLmNvLnVrghBjbXAuZ2FtZXN0YXIuY29tghhjbXAuZ29vZGdlYXJndWlkZS5j
b20uYXWCCmNtcC5pZGcucGyCCmNtcC5pZGcudHaCFmNtcC5pZGd0ZWNobmV0d29y
ay5jb22CEWNtcC5pbmZvd29ybGQuY29tghVjbXAuaXR3aGl0ZXBhcGVycy5jb22C
EWNtcC5qYXZhd29ybGQuY29tghFjbXAubGFjZW50cmFsZS5mcoIOY21wLm1hY3dl
bHQuZGWCEmNtcC5tYWN3b3JsZC5jby51a4IQY21wLm1hY3dvcmxkLmNvbYIPY21w
Lm1hY3dvcmxkLmVzghRjbXAubWF2b2l0dXJlY2FzaC5mcoIUY21wLm5ldHdvcmt3
b3JsZC5jb22CDWNtcC5wY3dlbHQuZGWCD2NtcC5wY3dvcmxkLmNvbYIWY21wLnBj
d29ybGQuaWRnLmNvbS5hdYIOY21wLnBjd29ybGQucGyCFWNtcC5wcm9kLmpvYnMu
emVpdC5kZYIRY21wLnByb21pZmxhc2guZGWCCmNtcC5za3kuYXSCCmNtcC5za3ku
ZGWCFmNtcC5za3lzcG9ydGF1c3RyaWEuYXSCE2NtcC50ZWNoY29ubmVjdC5jb22C
EGNtcC50ZWNoaGl2ZS5jb22CE2NtcC50aGVmdWxsbmVyZC5jb22CEGNtcC53ZWJ3
ZXJlbGQubmyCGmNvbnNlbnQuY29tcHV0ZXJ3ZWVrbHkuY29tgh5jb25zZW50LmRh
dGFzY2llbmNlY2VudHJhbC5jb22CFWNvbnNlbnQuZWF0c21hcnRlci5kZYIUY29u
c2VudC5pcWRpZ2l0YWwuZGWCEmNvbnNlbnQuaXNrZWxtYS5maYISY29uc2VudC5s
ZW1hZ2l0LmZyghljb25zZW50LnBsYW5ldHJhZGlvLmNvLnVrghRjb25zZW50LnJh
ZGlvY2l0eS5maYIUY29uc2VudC5yYWRpb25vdmEuZmmCFGNvbnNlbnQucmFkaW9w
bGF5LmRrghRjb25zZW50LnJhZGlvcGxheS5maYIUY29uc2VudC5yYWRpb3BsYXku
bm+CFGNvbnNlbnQucmFkaW9wbGF5LnNlghVjb25zZW50LnJhZGlvcG9va2kuZmmC
FmNvbnNlbnQudGVjaHRhcmdldC5jb22CFWNvbnNlbnQudGVjaHRhcmdldC5kZYIV
Y29uc2VudC50ZWNodGFyZ2V0LmZyghdjb25zZW50LnRoZWd1YXJkaWFuLmNvbYIZ
Y29uc2VudC50aGVzZXJ2ZXJzaWRlLmNvbYIQY29uc2VudC52b2ljZS5maYIZZXVy
b2dhbWVyLWRlLmV1cm9nYW1lci5kZYIaZXVyb2dhbWVyLXVrLmV1cm9nYW1lci5u
ZXSCF2xhcHJlc3NlLWNhLmxhcHJlc3NlLmNhghBtZXNzYWdlLm1hdmVuLmlvghNt
ZXNzYWdlLnNwLXByb2QubmV0ghdtZXNzYWdlMTI1Ny5zcC1wcm9kLm5ldIIXbWVz
c2FnZTEzNDMuc3AtcHJvZC5uZXSCF21lc3NhZ2UxMzQ4LnNwLXByb2QubmV0ghdt
ZXNzYWdlMTQxNC5zcC1wcm9kLm5ldIIWbWVzc2FnZTI5Ni5zcC1wcm9kLm5ldIIW
bWVzc2FnZTY5Mi5zcC1wcm9kLm5ldIIZbWVzc2FnaW5nLnNvdXJjZXBvaW50LmNv
bYIYbWV0YWJvbWItdWsubWV0YWJvbWIubmV0ghRtbXMuYnVyZGEtZm9yd2FyZC5k
ZYILbW1zLmNubi5jb22CD21tcy5zcC1wcm9kLm5ldIIbcnBzLXVrLnJvY2twYXBl
cnNob3RndW4uY29tghZzMWhvbWVzLWdiLnMxaG9tZXMuY29tghhzb3VyY2Vwb2lu
dC1tbXMuYWV0di5jb22CHXNvdXJjZXBvaW50LW1tcy5iaW9ncmFwaHkuY29tghtz
b3VyY2Vwb2ludC1tbXMuaGlzdG9yeS5jb22CHnNvdXJjZXBvaW50LW1tcy5teWxp
ZmV0aW1lLmNvbYIUc291cmNlcG9pbnQudmljZS5jb22CCnNwLm5iYS5jb22CE3Nw
Lm5pbnRlbmRvbGlmZS5jb22CEXNwLnB1c2hzcXVhcmUuY29tghZ1c2dhbWVyLXVz
LnVzZ2FtZXIubmV0ghJ2ZzI0Ny11ay52ZzI0Ny5jb22CFXZpZXJ2aWpmLWJlLmdv
cGxheS5iZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB3AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABijxNNjsA
AAQDAEgwRgIhAPiULO7+ASv1mWtkH/02vrCxBBaDI0yoVae2km27i8rTAiEA7DAu
cd5q8Zc842S7LLagxVT8iKOK8/1PmvqpFsAvLCkAdQC3Pvsk35xNunXyOcW6WPRs
XfxCz3qfNcSeHQmBJe20mQAAAYo8TTYtAAAEAwBGMEQCICZQmm1JzX3PVjBwxPDc
Lk1XwJN3wt1U1XlPRkIy071uAiAVv/2TFL44Qk2R4KBzU0o9TR2MX1sVxwJNPykX
wceF6zANBgkqhkiG9w0BAQsFAAOCAQEAD1xvNP7Lr37Cr22fAaGULEMZ+BnSa7va
6CJLFGlkdoKPihSHwZcBYpC0LpWOQS2JNE2TtvXvwDyVXTM6vSt7j7sWN6LwEzuR
oTbA07YKp1WsGuDMoQ6ZOVpaNinkzZOyRRlMGft9NTSeKPlbN0Kp66dbFyWS+MZK
QWRFbDGIwo9vhBpKjKBak1phB8yu1lCYSSlmMqwDtmEWzngcNFRfToasg9voJb6z
gpyCplCEK7oAEB0dIRl9ftn4B+o1PSyaw5XhacQsC4jIIUPh0Pipor5HK13JyEZh
AX4dcyR29bbuZkHJ0n/X3/ktwa2KrskwumXp+UprirYI2bAWsPUG7A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdAiyTCH1/thX+Y46ZNw
KnoURTTZmua6unO4Te3rhQAW94lXHIUqYuvhn4xDuTTlRlrJJN1U6YaNgEFy5ujP
0KQ56g7iTdVz/Z46dWlcArrMfMHfyZrQa8qebnuFHYqtBe1Nduu7O2dyPliF1c3y
Vel76JLSFSMK2rFZU2LVbt7qeRMt45JnpyNVBmgcVLan2lnOF633qppB0munRlb+
f3fwS2JC7HFFx3cqN6qemTL7pHwqNhPFTIqwgq01Lf81rNGsESQH8Pn1+KCD2l++
XTKPCo19yzP2DYyLsC9jp9omkEXlZ6vqULXjUlt1pMTVjlnIHLflE4EwiLdHGa6/
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298516713583651435599217279922281542447643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 12:20:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 12:20:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.academics.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22446815607890653512277812517384383368294990297732585766887210379966603851596181935663566405593930180653488348583677171586700011816845950721006169221634661343537202418446418130926381893936127607016263248593211817353084151777031034399366938940846793301082886664963178212960082742872440057626531498121587051347588756889663102961738373807181262804911433987690104956830164154597664959308074557658299926295690225344617294201485014363762726861526981817210759409729273926366069697510710326053837727953112687826953887883741459983369584043417502023665164088486052791484959037689569535211382778207530823450123827638607465594777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fe26e5e722454a91ec18581a37c898301c94f85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1959 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.arnnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelasia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelpartner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.digitalartsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gamestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.goodgearguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idgtechnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.itwhitepapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.lacentrale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mavoiturecash.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.idg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.promiflash.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.skysportaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thefullnerd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.webwereld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.computerweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.datasciencecentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.eatsmarter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iqdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iskelma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.lemagit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiocity.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radionova.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiopooki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theserverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.voice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-de.eurogamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-uk.eurogamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapresse-ca.lapresse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1257.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1343.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1348.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1414.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message296.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message692.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.sourcepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabomb-uk.metabomb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps-uk.rockpapershotgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.aetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.mylifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nintendolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgamer-us.usgamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg247-uk.vg247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viervijf-be.goplay.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a3c4d363b0000040300483046022100f8942ceefe012bf5996b641ffd36beb0b1041683234ca855a7b6926dbb8bcad3022100ec302e71de6af1973ce364bb2cb6a0c554fc88a38af3fd4f9afaa916c02f2c29007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a3c4d362d0000040300463044022026509a6d49cd7dcf563070c4f0dc2e4d57c09377c2dd54d5794f464232d3bd6e022015bffd9314be38424d91e0a073534a3d4d1d8c5f5b15c7024d3f2917c1c785eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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