cmp.academics.at

Issued by R3

About this certificate

This digital certificate with serial number 04:eb:39:ef:f7:31:14:4a:35:aa:a3:0b:e7:2b:bb:7b:df:a0 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmp.academics.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:39:ef:f7:31:14:4a:35:aa:a3:0b:e7:2b:bb:7b:df:a0
Serial Number (int): 428492511921814087008249111011492747796384
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e6:37:87:fb:23:4e:db:65:03:93:82:af:d0:43:0e:71:b5:8d:4e:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:3c:2a:17:ee:be:89:85:94:e9:f6:9a:96:c3:38:5b:34:01:dd:77
Fingerprint (sha256): 4b:8e:9d:05:4a:50:15:57:78:db:ca:61:04:75:a3:36:95:04:5a:e3:47:a9:2a:b9:2d:d1:eb:7f:e0:16:59:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.academics.at

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.academics.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.academics.at
cmp.academics.ch
cmp.academics.com
cmp.academics.de
cmp.arnnet.com.au
cmp.channelasia.tech
cmp.channelpartner.de
cmp.cio.com
cmp.cio.de
cmp.computerwoche.de
cmp.computerworld.com
cmp.computerworld.pl
cmp.csoonline.com
cmp.digitalartsonline.co.uk
cmp.gamestar.com
cmp.goodgearguide.com.au
cmp.idg.pl
cmp.idg.tv
cmp.idgtechnetwork.com
cmp.infoworld.com
cmp.itwhitepapers.com
cmp.javaworld.com
cmp.lacentrale.fr
cmp.macwelt.de
cmp.macworld.co.uk
cmp.macworld.com
cmp.macworld.es
cmp.mavoiturecash.fr
cmp.networkworld.com
cmp.pcwelt.de
cmp.pcworld.com
cmp.pcworld.idg.com.au
cmp.pcworld.pl
cmp.prod.jobs.zeit.de
cmp.promiflash.de
cmp.sky.at
cmp.sky.de
cmp.skysportaustria.at
cmp.techconnect.com
cmp.techhive.com
cmp.thefullnerd.com
cmp.webwereld.nl
consent.eatsmarter.de
consent.iqdigital.de
consent.iskelma.fi
consent.planetradio.co.uk
consent.radiocity.fi
consent.radionova.fi
consent.radioplay.dk
consent.radioplay.fi
consent.radioplay.no
consent.radioplay.se
consent.radiopooki.fi
consent.theguardian.com
consent.voice.fi
eurogamer-de.eurogamer.de
eurogamer-uk.eurogamer.net
lapresse-ca.lapresse.ca
message.maven.io
message.sp-prod.net
message1257.sp-prod.net
message1343.sp-prod.net
message1348.sp-prod.net
message1414.sp-prod.net
message296.sp-prod.net
message692.sp-prod.net
messaging.sourcepoint.com
metabomb-uk.metabomb.net
mms.burda-forward.de
mms.cnn.com
mms.sp-prod.net
rps-uk.rockpapershotgun.com
s1homes-gb.s1homes.com
sourcepoint-mms.aetv.com
sourcepoint-mms.biography.com
sourcepoint-mms.history.com
sourcepoint-mms.mylifetime.com
sourcepoint.vice.com
sp.nba.com
sp.nintendolife.com
sp.pushsquare.com
usgamer-us.usgamer.net
vg247-uk.vg247.com
viervijf-be.goplay.be

Other certificates including the domain name academics.at

(limited to 100 certificates)
cmp.channelpartner.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
prod.academics.de
www.academics.de
mms.sp-prod.net
cmp.channelpartner.de
www.academics.de
stage.academics.de
stage.academics.de
www.academics.de
www.academics.de
*.academics.at
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
www.academics.de
staging.academics.de
cmp.academics.at
cmp.academics.at
prod.academics.de
cmp.academics.at
staging.academics.de
www.academics.de
cmp.academics.at
prod.academics.de
mms.sp-prod.net
cmp.academics.at
prod.academics.de
stage.academics.de
cmp.academics.at
www.academics.de
prod.academics.de
prod.academics.de
www.academics.de
www.academics.de
cmp-sp.handelsblatt.com
www.academics.de
www.academics.de
www.academics.de
prod.academics.de
dev.academics.de
cmp-sp.handelsblatt.com
cmp.academics.at
www.academics.de
dev.academics.de
stage.academics.de
dev.academics.de
www.academics.de
prod.academics.de
prod.academics.de
cmp.channelpartner.de
www.academics.de
cmp.channelpartner.de
cmp.channelpartner.de
cmp.academics.at
cmp.infoworld.com
www.academics.de
prod.academics.de
cmp.academics.at
stage.academics.de
cmp-sp.handelsblatt.com
cmp.channelpartner.de
staging.academics.de
staging.academics.de
dev.academics.de
cmp.infoworld.com
stage.academics.de
prod.academics.de
www.academics.de
prod.academics.de
staging.academics.de
cmp.infoworld.com
prod.academics.de
prod.academics.de
stage.academics.de
prod.academics.de
cmp-sp.handelsblatt.com
mms.sp-prod.net
dev.academics.de
staging.academics.de
www.academics.de
stage.academics.de
*.academics.at
www.academics.de
cmp.infoworld.com
prod.academics.de
staging.academics.de
www.academics.de
www.academics.de
mms.sp-prod.net
cmp.academics.at
prod.academics.de
prod.academics.de

Certificate

The complete raw certificate details for cmp.academics.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06d+K1AMloYwde+JV+mh
rVu/58lhxPehQEeLzGwkS/qwdT/U13qvfs3aWxh+ia3w6gkelHEGwdQKx0/Ow3lw
9cJ0kZjMhYgW21lCBxuO+npm0GsWJ1gVBgkGkmdHCgiTp6ZWRjK+193DaClQvlaP
ThtRriztdFw0ZVjzKYdUGNKhIUiJbJ4+pn2sIelLz4EzXgpenWm7eHknXCPh94ie
ZWZ5UwTfgAwpholbHKKBMTXSM1iwGZE1E8hF3xIzmi0XFTFhlUTSOZUG3N4WNSV9
8JQ9JVEA1EauMnFv/IND6nrr2RPSVzCu0lUtdlKEr0cTDMpvWXT7r+cUci8FImyH
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428492511921814087008249111011492747796384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 13:49:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 13:49:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.academics.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26718876149697182151732174646581628241846665264239977130991410761096795443622368918183754907649085581287351884602894772528377551690440226352009171246296657755520968260645466700702014459549735096044267890218501155756636787476548784545555982164628760020095453586383323957470974600423869714913409313235327463767491378018855546702526641646621258036789415343121781695148183784122417025193942034724574900871853251707160842684536727856709496188730770060186030024679814333118530026036009323464588443644748507383437952215556160158096080933021315870265746108905600663314601751871994895113671271179180576981807485515903133321213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e63787fb234edb65039382afd0430e71b58d4e37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.arnnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelasia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelpartner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.digitalartsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gamestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.goodgearguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idgtechnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.itwhitepapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.lacentrale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mavoiturecash.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.idg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.promiflash.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.skysportaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thefullnerd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.webwereld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.eatsmarter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iqdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iskelma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiocity.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radionova.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiopooki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.voice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-de.eurogamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-uk.eurogamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapresse-ca.lapresse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1257.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1343.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1348.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1414.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message296.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message692.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.sourcepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabomb-uk.metabomb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps-uk.rockpapershotgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.aetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.mylifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nintendolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgamer-us.usgamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg247-uk.vg247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viervijf-be.goplay.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b43430568000004030046304402204d8f5c003cf2146be30725caf0a0c8f8bc261efdf2e1986a407492c8cdd3028b022013350cccf1f29801f9cc06fa8978c11f002ee9d39b0f7e044cc00eb79d59dca100750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b4343058e000004030046304402201a3dd1e5986b1685a7bea5ad9375326e830af7b8ba00ce1edb1c4cfa812f9dc602205a89e249548186d0162b6c8c73af7cf417f4501a0453a7bc24c26c74798b852a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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