cmp.academics.at

Issued by R3

About this certificate

This digital certificate with serial number 04:c0:cd:bd:ea:12:d1:28:8d:16:eb:75:0e:d9:41:e6:30:7d was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmp.academics.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:cd:bd:ea:12:d1:28:8d:16:eb:75:0e:d9:41:e6:30:7d
Serial Number (int): 414056836006678027977940147270803947663485
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:98:71:f0:bf:93:2d:e0:dc:32:3a:aa:07:14:c0:35:f5:fa:06:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:33:80:ec:4b:ae:f9:02:9a:50:46:f4:4e:c2:4c:6b:23:31:6d:ce
Fingerprint (sha256): 3f:9b:3d:88:68:39:a3:6f:c4:6e:0f:c0:2b:f4:d1:fa:5a:78:06:31:20:4f:25:07:11:8e:29:ed:16:bd:01:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.academics.at

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.academics.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.academics.at
cmp.academics.ch
cmp.academics.com
cmp.academics.de
cmp.arnnet.com.au
cmp.channelasia.tech
cmp.channelpartner.de
cmp.cio.com
cmp.cio.de
cmp.computerwoche.de
cmp.computerworld.com
cmp.computerworld.pl
cmp.csoonline.com
cmp.digitalartsonline.co.uk
cmp.gamestar.com
cmp.goodgearguide.com.au
cmp.idg.pl
cmp.idg.tv
cmp.idgtechnetwork.com
cmp.infoworld.com
cmp.itwhitepapers.com
cmp.javaworld.com
cmp.lacentrale.fr
cmp.macwelt.de
cmp.macworld.co.uk
cmp.macworld.com
cmp.macworld.es
cmp.mavoiturecash.fr
cmp.networkworld.com
cmp.pcwelt.de
cmp.pcworld.com
cmp.pcworld.idg.com.au
cmp.pcworld.pl
cmp.prod.jobs.zeit.de
cmp.promiflash.de
cmp.sky.at
cmp.sky.de
cmp.skysportaustria.at
cmp.techconnect.com
cmp.techhive.com
cmp.thefullnerd.com
cmp.webwereld.nl
consent.computerweekly.com
consent.datasciencecentral.com
consent.eatsmarter.de
consent.iqdigital.de
consent.iskelma.fi
consent.lemagit.fr
consent.planetradio.co.uk
consent.radiocity.fi
consent.radionova.fi
consent.radioplay.dk
consent.radioplay.fi
consent.radioplay.no
consent.radioplay.se
consent.radiopooki.fi
consent.techtarget.com
consent.techtarget.de
consent.techtarget.fr
consent.theguardian.com
consent.theserverside.com
consent.voice.fi
eurogamer-de.eurogamer.de
eurogamer-uk.eurogamer.net
lapresse-ca.lapresse.ca
message.maven.io
message.sp-prod.net
message1257.sp-prod.net
message1343.sp-prod.net
message1348.sp-prod.net
message1414.sp-prod.net
message296.sp-prod.net
message692.sp-prod.net
messaging.sourcepoint.com
metabomb-uk.metabomb.net
mms.burda-forward.de
mms.cnn.com
mms.sp-prod.net
rps-uk.rockpapershotgun.com
s1homes-gb.s1homes.com
sourcepoint-mms.aetv.com
sourcepoint-mms.biography.com
sourcepoint-mms.history.com
sourcepoint-mms.mylifetime.com
sourcepoint.vice.com
sp.nba.com
sp.nintendolife.com
sp.pushsquare.com
usgamer-us.usgamer.net
vg247-uk.vg247.com
viervijf-be.goplay.be

Other certificates including the domain name academics.at

(limited to 100 certificates)
cmp.channelpartner.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
prod.academics.de
www.academics.de
mms.sp-prod.net
cmp.channelpartner.de
www.academics.de
stage.academics.de
stage.academics.de
www.academics.de
www.academics.de
*.academics.at
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
www.academics.de
staging.academics.de
cmp.academics.at
cmp.academics.at
prod.academics.de
cmp.academics.at
staging.academics.de
www.academics.de
cmp.academics.at
prod.academics.de
mms.sp-prod.net
cmp.academics.at
prod.academics.de
stage.academics.de
cmp.academics.at
www.academics.de
prod.academics.de
prod.academics.de
www.academics.de
www.academics.de
cmp-sp.handelsblatt.com
www.academics.de
www.academics.de
www.academics.de
prod.academics.de
dev.academics.de
cmp-sp.handelsblatt.com
cmp.academics.at
www.academics.de
dev.academics.de
stage.academics.de
dev.academics.de
www.academics.de
prod.academics.de
prod.academics.de
cmp.channelpartner.de
www.academics.de
cmp.channelpartner.de
cmp.channelpartner.de
cmp.academics.at
cmp.infoworld.com
www.academics.de
prod.academics.de
cmp.academics.at
stage.academics.de
cmp-sp.handelsblatt.com
cmp.channelpartner.de
staging.academics.de
staging.academics.de
dev.academics.de
cmp.infoworld.com
stage.academics.de
prod.academics.de
www.academics.de
prod.academics.de
staging.academics.de
cmp.infoworld.com
prod.academics.de
prod.academics.de
stage.academics.de
prod.academics.de
cmp-sp.handelsblatt.com
mms.sp-prod.net
dev.academics.de
staging.academics.de
www.academics.de
stage.academics.de
*.academics.at
www.academics.de
cmp.infoworld.com
prod.academics.de
staging.academics.de
www.academics.de
www.academics.de
mms.sp-prod.net
cmp.academics.at
prod.academics.de
prod.academics.de

Certificate

The complete raw certificate details for cmp.academics.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrijWb6nGbxrGjIG34Po
fIj/Diey5yljQBeptC4BFQI3WOTYyM1gTtYA3xLmzNVfofZ06OsNcCFp5OcZ9c2W
1XsqISp6n1v5bjZeUTqd4v5VKQbGLOt0QNZSJRjQf/yCezy3oV1zIFCxMY+ARc+k
tqrviHkG7G4nndbLuF/Ayyr7zsBSWDDZVLKrr1PNHFlBMCwJZR8yRZwPSLleQp5z
YnvdmhUGbuwv0FakoyLSnUp8ht6f9ANjIwgA9vgOCMhxWVpzP+28WZ/aIi9fXW/N
ljmhzJ5LtoavNM5rLIKK6lckHT4BgdzRKkDLQYYlmioMDduV3CgPTeDknKkDkVzm
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414056836006678027977940147270803947663485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 16:10:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 16:10:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.academics.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23066419938509101594693043189862017106749016756494647117560165635084641591916032328474653194363632385048941256565415551769567999558310395470583511117136719818871044613662208992566917493947247710446476345720544887707515616922268974237270623754270164453368820588200038856964901626200919739452410266218095655280166949037984633068022213943496093915364794140834311681963721494176840171784706168174363544694900009294529184860510892985448660135957696377361751378573982614047277020330351652706292008816454187349082109467301224531862110145214900089653622484029075754389491918897871483461300277486779987866798898494906851714781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e09871f0bf932de0dc323aaa0714c035f5fa0626
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1959 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.arnnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelasia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelpartner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.digitalartsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gamestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.goodgearguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idgtechnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.itwhitepapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.lacentrale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mavoiturecash.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.idg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.promiflash.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.skysportaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thefullnerd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.webwereld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.computerweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.datasciencecentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.eatsmarter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iqdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iskelma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.lemagit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiocity.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radionova.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiopooki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theserverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.voice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-de.eurogamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-uk.eurogamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapresse-ca.lapresse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1257.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1343.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1348.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1414.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message296.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message692.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.sourcepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabomb-uk.metabomb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps-uk.rockpapershotgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.aetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.mylifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nintendolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgamer-us.usgamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg247-uk.vg247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viervijf-be.goplay.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018908225ec50000040300473045022007478d434a39e0ff3e4d2771441faa76547265265c91734bf6fdc9d6ecbaa6050221009ef002d1543ba2103f5cebc85b50917d6f70b90fd8b25ba6a9459580a660ed6c007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018908225ebc0000040300473045022100dc04e14183dd4f3398e5a3efd8985ee6bbe5bdda2e5cc384d4e1630f1ddd6c3e022066ebf2d9bb8be7e6ac33350ab9936a954ff4434da5da795444821aa0cc96abc7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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