cmp.academics.at

Issued by R3

About this certificate

This digital certificate with serial number 04:d0:eb:fd:41:f4:a1:3f:7c:af:8c:9e:69:c7:cd:39:6f:51 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmp.academics.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d0:eb:fd:41:f4:a1:3f:7c:af:8c:9e:69:c7:cd:39:6f:51
Serial Number (int): 419541559614449051256958634179028034613073
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:02:42:0d:ec:01:a2:99:3f:4f:e0:fb:59:47:87:90:14:b1:ed:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:54:e1:3b:b0:59:6b:61:6f:a7:9b:8d:f1:65:01:36:7c:d0:97:92
Fingerprint (sha256): 3e:62:88:a7:15:65:4a:b8:c5:e0:06:e5:d7:a7:0d:29:a7:96:48:7c:27:69:30:90:ca:c8:e8:27:7b:3c:48:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.academics.at

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.academics.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.academics.at
cmp.academics.ch
cmp.academics.com
cmp.academics.de
cmp.arnnet.com.au
cmp.channelasia.tech
cmp.channelpartner.de
cmp.cio.com
cmp.cio.de
cmp.computerwoche.de
cmp.computerworld.com
cmp.computerworld.pl
cmp.csoonline.com
cmp.digitalartsonline.co.uk
cmp.gamestar.com
cmp.goodgearguide.com.au
cmp.idg.pl
cmp.idg.tv
cmp.idgtechnetwork.com
cmp.infoworld.com
cmp.itwhitepapers.com
cmp.javaworld.com
cmp.lacentrale.fr
cmp.macwelt.de
cmp.macworld.co.uk
cmp.macworld.com
cmp.macworld.es
cmp.mavoiturecash.fr
cmp.networkworld.com
cmp.pcwelt.de
cmp.pcworld.com
cmp.pcworld.idg.com.au
cmp.pcworld.pl
cmp.prod.jobs.zeit.de
cmp.promiflash.de
cmp.sky.at
cmp.sky.de
cmp.skysportaustria.at
cmp.techconnect.com
cmp.techhive.com
cmp.thefullnerd.com
cmp.webwereld.nl
consent.eatsmarter.de
consent.iqdigital.de
consent.iskelma.fi
consent.planetradio.co.uk
consent.radiocity.fi
consent.radionova.fi
consent.radioplay.dk
consent.radioplay.fi
consent.radioplay.no
consent.radioplay.se
consent.radiopooki.fi
consent.theguardian.com
consent.voice.fi
eurogamer-de.eurogamer.de
eurogamer-uk.eurogamer.net
lapresse-ca.lapresse.ca
message.maven.io
message.sp-prod.net
message1257.sp-prod.net
message1343.sp-prod.net
message1348.sp-prod.net
message1414.sp-prod.net
message296.sp-prod.net
message692.sp-prod.net
messaging.sourcepoint.com
metabomb-uk.metabomb.net
mms.burda-forward.de
mms.cnn.com
mms.sp-prod.net
rps-uk.rockpapershotgun.com
s1homes-gb.s1homes.com
sourcepoint-mms.aetv.com
sourcepoint-mms.biography.com
sourcepoint-mms.history.com
sourcepoint-mms.mylifetime.com
sourcepoint.vice.com
sp.nba.com
sp.nintendolife.com
sp.pushsquare.com
usgamer-us.usgamer.net
vg247-uk.vg247.com
viervijf-be.goplay.be

Other certificates including the domain name academics.at

(limited to 100 certificates)
cmp.channelpartner.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
prod.academics.de
www.academics.de
mms.sp-prod.net
cmp.channelpartner.de
www.academics.de
stage.academics.de
stage.academics.de
www.academics.de
www.academics.de
*.academics.at
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
www.academics.de
staging.academics.de
cmp.academics.at
cmp.academics.at
prod.academics.de
cmp.academics.at
staging.academics.de
www.academics.de
cmp.academics.at
prod.academics.de
mms.sp-prod.net
cmp.academics.at
prod.academics.de
stage.academics.de
cmp.academics.at
www.academics.de
prod.academics.de
prod.academics.de
www.academics.de
www.academics.de
cmp-sp.handelsblatt.com
www.academics.de
www.academics.de
www.academics.de
prod.academics.de
dev.academics.de
cmp-sp.handelsblatt.com
cmp.academics.at
www.academics.de
dev.academics.de
stage.academics.de
dev.academics.de
www.academics.de
prod.academics.de
prod.academics.de
cmp.channelpartner.de
www.academics.de
cmp.channelpartner.de
cmp.channelpartner.de
cmp.academics.at
cmp.infoworld.com
www.academics.de
prod.academics.de
cmp.academics.at
stage.academics.de
cmp-sp.handelsblatt.com
cmp.channelpartner.de
staging.academics.de
staging.academics.de
dev.academics.de
cmp.infoworld.com
stage.academics.de
prod.academics.de
www.academics.de
prod.academics.de
staging.academics.de
cmp.infoworld.com
prod.academics.de
prod.academics.de
stage.academics.de
prod.academics.de
cmp-sp.handelsblatt.com
mms.sp-prod.net
dev.academics.de
staging.academics.de
www.academics.de
stage.academics.de
*.academics.at
www.academics.de
cmp.infoworld.com
prod.academics.de
staging.academics.de
www.academics.de
www.academics.de
mms.sp-prod.net
cmp.academics.at
prod.academics.de
prod.academics.de

Certificate

The complete raw certificate details for cmp.academics.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMizrsdb4BIG/sJxJoqg
PbegFzaGcZq3Olboiz3A35v/LwgxGdhxZpWZthcY359a/PBZs2Lji1cSoEM+IaYR
auhJiFsuvzRzuMi+/kM6Kd8pJWY5xnME33dQiD7F576w2Gs2xPNdYpoeesJbR4sx
wFiXJpHbuu4PdP9QnoVMQZZNfk7/T9MJ92DRFAh7fVlxvPlp4PRzWr1SlXQ1yQ8x
bxt0/UzfOTva4pBfdo4aZ/CYXndl2MsAoevJkUp29zZqoMzXz2G48TLq0FpEyloZ
+TgTkT+Yg4MUO6IfMiudxBFOEpoG8eNBBvVV7W1j+9tc+Oe93/SU0CroZsAMI8SV
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419541559614449051256958634179028034613073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 12:19:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 12:19:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.academics.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18782238923451145511929197331914362841431006237897195462778241306812918568391985551006183779671836186141483355227639946772976134922596395991033999818935468805747323984675241970702527483774272134321570253285165074038087445453543826461885026156208135126490540188283353417866207459823082242645322155740811199912476682352074435862000214912776380942999275748792430781083486053862375068860603616375424618805780498731125864508345952960848362268601457372708363422926902643576690326006477972828389830509514872000459455675128130390860492568950640205926837121857129192932618209583584782126303524427182571656830348848742088873251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba02420dec01a2993f4fe0fb5947879014b1ed69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.arnnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelasia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelpartner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.digitalartsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gamestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.goodgearguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idgtechnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.itwhitepapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.lacentrale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mavoiturecash.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.idg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.promiflash.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.skysportaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thefullnerd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.webwereld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.eatsmarter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iqdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iskelma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiocity.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radionova.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiopooki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.voice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-de.eurogamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-uk.eurogamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapresse-ca.lapresse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1257.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1343.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1348.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1414.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message296.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message692.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.sourcepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabomb-uk.metabomb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps-uk.rockpapershotgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.aetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.mylifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nintendolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgamer-us.usgamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg247-uk.vg247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viervijf-be.goplay.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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