cmp.infoworld.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f7:37:b1:72:9b:22:5d:ee:e7:52:27:10:ae:6d:1f:6c:0d was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmp.infoworld.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:37:b1:72:9b:22:5d:ee:e7:52:27:10:ae:6d:1f:6c:0d
Serial Number (int): 432572917257310614154075976404357947026445
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 94:4f:0c:64:2b:77:ce:f9:13:13:b2:59:24:75:ed:7d:68:09:99:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:1f:f6:96:ef:6b:8d:a2:55:16:de:f0:b0:09:3d:60:fb:5d:3f:1a
Fingerprint (sha256): 8f:5a:4a:4a:42:71:21:6f:1c:a9:75:e2:d3:a5:9e:b1:82:7b:a6:ef:67:44:df:63:af:0b:f8:fd:78:da:84:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.infoworld.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.infoworld.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.academics.at
cmp.academics.ch
cmp.academics.com
cmp.academics.de
cmp.arnnet.com.au
cmp.channelasia.tech
cmp.channelpartner.de
cmp.cio.com
cmp.cio.de
cmp.computerwoche.de
cmp.computerworld.com
cmp.computerworld.pl
cmp.csoonline.com
cmp.digitalartsonline.co.uk
cmp.gamestar.com
cmp.goodgearguide.com.au
cmp.idg.pl
cmp.idg.tv
cmp.idgtechnetwork.com
cmp.infoworld.com
cmp.itwhitepapers.com
cmp.javaworld.com
cmp.lacentrale.fr
cmp.macwelt.de
cmp.macworld.co.uk
cmp.macworld.com
cmp.macworld.es
cmp.mavoiturecash.fr
cmp.networkworld.com
cmp.pcwelt.de
cmp.pcworld.com
cmp.pcworld.idg.com.au
cmp.pcworld.pl
cmp.prod.jobs.zeit.de
cmp.promiflash.de
cmp.sky.at
cmp.sky.de
cmp.skysportaustria.at
cmp.techconnect.com
cmp.techhive.com
cmp.thefullnerd.com
cmp.webwereld.nl
consent.computerweekly.com
consent.datasciencecentral.com
consent.eatsmarter.de
consent.iqdigital.de
consent.iskelma.fi
consent.lemagit.fr
consent.planetradio.co.uk
consent.radiocity.fi
consent.radionova.fi
consent.radioplay.dk
consent.radioplay.fi
consent.radioplay.no
consent.radioplay.se
consent.radiopooki.fi
consent.sueddeutsche.de
consent.techtarget.com
consent.techtarget.de
consent.techtarget.fr
consent.theguardian.com
consent.theserverside.com
consent.voice.fi
eurogamer-de.eurogamer.de
eurogamer-uk.eurogamer.net
glasgowtimes-gb.glasgowtimes.co.uk
lapresse-ca.lapresse.ca
message.maven.io
message.sp-prod.net
message1257.sp-prod.net
message1343.sp-prod.net
message1348.sp-prod.net
message1414.sp-prod.net
message296.sp-prod.net
message692.sp-prod.net
messaging.sourcepoint.com
metabomb-uk.metabomb.net
mms.burda-forward.de
mms.cnn.com
mms.sp-prod.net
privacy.ligabold.dk
rps-uk.rockpapershotgun.com
s1homes-gb.s1homes.com
sourcepoint-mms.aetv.com
sourcepoint-mms.biography.com
sourcepoint-mms.history.com
sourcepoint-mms.mylifetime.com
sourcepoint.vice.com
sp.nba.com
sp.nintendolife.com
sp.pushsquare.com
usgamer-us.usgamer.net
vg247-uk.vg247.com
viervijf-be.goplay.be

Other certificates including the domain name infoworld.com

(limited to 100 certificates)
stacksocial.com
stacksocial.com
stacksocial.com
dns-vetting1j.map.fastly.net
WebReg.Events.Infoworld.com
stacksocial.com
stacksocial.com
stacksocial.com
stacksocial.com
stacksocial.com
stacksocial.com
stacksocial.com
stacksocial.com
dns-vetting1j.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1j.map.fastly.net
stacksocial.com
stacksocial.com
stacksocial.com
*.cfoworld.com
stacksocial.com
dns-vetting1e.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
stacksocial.com
stacksocial.com
dns-vetting1j.map.fastly.net
stacksocial.com
consent.planetradio.co.uk
q2.shared.global.fastly.net
q2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
stacksocial.com
q2.shared.global.fastly.net
stacksocial.com
stacksocial.com
idgesg.net
dns-vetting1j.map.fastly.net
q2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
stacksocial.com
dns-vetting1j.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
stacksocial.com
stacksocial.com
stacksocial.com
q2.shared.global.fastly.net
stacksocial.com
stacksocial.com
stacksocial.com
dns-vetting1e.map.fastly.net
dns-vetting1j.map.fastly.net
stacksocial.com
stacksocial.com
dns-vetting1j.map.fastly.net
stacksocial.com
stacksocial.com
dns-vetting1j.map.fastly.net
www.stacksocial.com
gate.idgesg.net
dns-vetting1j.map.fastly.net
stacksocial.com
stacksocial.com
q2.shared.global.fastly.net
q2.shared.global.fastly.net
dns-vetting1e.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
stacksocial.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
cmp.computerworld.com
stacksocial.com
stacksocial.com
stacksocial.com
stacksocial.com
stacksocial.com
idg.map.fastly.net
stacksocial.com
stacksocial.com
stacksocial.com
stacksocial.com
stacksocial.com
dns-vetting1j.map.fastly.net
stacksocial.com
stacksocial.com
q2.shared.global.fastly.net
stacksocial.com
dns-vetting1j.map.fastly.net
c.api.permutive.app
stacksocial.com
mms.sp-prod.net
stacksocial.com
stacksocial.com
stacksocial.com
cert1-prod.aut.a24365.net
dg-0051-aa2de51.client-tls.adestra.com

Certificate

The complete raw certificate details for cmp.infoworld.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINEjCCC/qgAwIBAgISBPc3sXKbIl3u51InEK5tH2wNMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAyMTAxNjMxNDhaFw0yMzA1MTExNjMxNDdaMBwxGjAYBgNVBAMT
EWNtcC5pbmZvd29ybGQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7Ktd5tjZ7knLFtpex/Jxo5sweBknUywyvSYAXL6fja+Ercv7PCfc9XrgQL8
R4EvCaUaaB92xtEZ6h/sShmCCSkhrI74AbWiNeyT+1lldKeFQrvQSiGvXHivAO2y
MJhcJZL9C7tPjf1G0qGnHXo+AAxnq7do1+MRdZGYTtCpvdCwEYysellBlSDPGRem
F3jC/74Kc54t9ANGftE/U1ecvWUk0Txg2STtyaEFXj8PZoC+9sCAC6MaEcyaow3L
2B4adLbAmXi0szxzO5wwBA83Q3xcMCp95HPLTPl5/JD6h+aTSJ2+h3474ioP8uIQ
VKf8RjRv+JzI/gzLhblxJmWRJwIDAQABo4IKNjCCCjIwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBSUTwxkK3fO+RMTslkkde19aAmZRDAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCCAIGA1UdEQSCB/kwggf1ghBjbXAuYWNhZGVtaWNzLmF0ghBjbXAuYWNh
ZGVtaWNzLmNoghFjbXAuYWNhZGVtaWNzLmNvbYIQY21wLmFjYWRlbWljcy5kZYIR
Y21wLmFybm5ldC5jb20uYXWCFGNtcC5jaGFubmVsYXNpYS50ZWNoghVjbXAuY2hh
bm5lbHBhcnRuZXIuZGWCC2NtcC5jaW8uY29tggpjbXAuY2lvLmRlghRjbXAuY29t
cHV0ZXJ3b2NoZS5kZYIVY21wLmNvbXB1dGVyd29ybGQuY29tghRjbXAuY29tcHV0
ZXJ3b3JsZC5wbIIRY21wLmNzb29ubGluZS5jb22CG2NtcC5kaWdpdGFsYXJ0c29u
bGluZS5jby51a4IQY21wLmdhbWVzdGFyLmNvbYIYY21wLmdvb2RnZWFyZ3VpZGUu
Y29tLmF1ggpjbXAuaWRnLnBsggpjbXAuaWRnLnR2ghZjbXAuaWRndGVjaG5ldHdv
cmsuY29tghFjbXAuaW5mb3dvcmxkLmNvbYIVY21wLml0d2hpdGVwYXBlcnMuY29t
ghFjbXAuamF2YXdvcmxkLmNvbYIRY21wLmxhY2VudHJhbGUuZnKCDmNtcC5tYWN3
ZWx0LmRlghJjbXAubWFjd29ybGQuY28udWuCEGNtcC5tYWN3b3JsZC5jb22CD2Nt
cC5tYWN3b3JsZC5lc4IUY21wLm1hdm9pdHVyZWNhc2guZnKCFGNtcC5uZXR3b3Jr
d29ybGQuY29tgg1jbXAucGN3ZWx0LmRlgg9jbXAucGN3b3JsZC5jb22CFmNtcC5w
Y3dvcmxkLmlkZy5jb20uYXWCDmNtcC5wY3dvcmxkLnBsghVjbXAucHJvZC5qb2Jz
LnplaXQuZGWCEWNtcC5wcm9taWZsYXNoLmRlggpjbXAuc2t5LmF0ggpjbXAuc2t5
LmRlghZjbXAuc2t5c3BvcnRhdXN0cmlhLmF0ghNjbXAudGVjaGNvbm5lY3QuY29t
ghBjbXAudGVjaGhpdmUuY29tghNjbXAudGhlZnVsbG5lcmQuY29tghBjbXAud2Vi
d2VyZWxkLm5sghpjb25zZW50LmNvbXB1dGVyd2Vla2x5LmNvbYIeY29uc2VudC5k
YXRhc2NpZW5jZWNlbnRyYWwuY29tghVjb25zZW50LmVhdHNtYXJ0ZXIuZGWCFGNv
bnNlbnQuaXFkaWdpdGFsLmRlghJjb25zZW50Lmlza2VsbWEuZmmCEmNvbnNlbnQu
bGVtYWdpdC5mcoIZY29uc2VudC5wbGFuZXRyYWRpby5jby51a4IUY29uc2VudC5y
YWRpb2NpdHkuZmmCFGNvbnNlbnQucmFkaW9ub3ZhLmZpghRjb25zZW50LnJhZGlv
cGxheS5ka4IUY29uc2VudC5yYWRpb3BsYXkuZmmCFGNvbnNlbnQucmFkaW9wbGF5
Lm5vghRjb25zZW50LnJhZGlvcGxheS5zZYIVY29uc2VudC5yYWRpb3Bvb2tpLmZp
ghdjb25zZW50LnN1ZWRkZXV0c2NoZS5kZYIWY29uc2VudC50ZWNodGFyZ2V0LmNv
bYIVY29uc2VudC50ZWNodGFyZ2V0LmRlghVjb25zZW50LnRlY2h0YXJnZXQuZnKC
F2NvbnNlbnQudGhlZ3VhcmRpYW4uY29tghljb25zZW50LnRoZXNlcnZlcnNpZGUu
Y29tghBjb25zZW50LnZvaWNlLmZpghlldXJvZ2FtZXItZGUuZXVyb2dhbWVyLmRl
ghpldXJvZ2FtZXItdWsuZXVyb2dhbWVyLm5ldIIiZ2xhc2dvd3RpbWVzLWdiLmds
YXNnb3d0aW1lcy5jby51a4IXbGFwcmVzc2UtY2EubGFwcmVzc2UuY2GCEG1lc3Nh
Z2UubWF2ZW4uaW+CE21lc3NhZ2Uuc3AtcHJvZC5uZXSCF21lc3NhZ2UxMjU3LnNw
LXByb2QubmV0ghdtZXNzYWdlMTM0My5zcC1wcm9kLm5ldIIXbWVzc2FnZTEzNDgu
c3AtcHJvZC5uZXSCF21lc3NhZ2UxNDE0LnNwLXByb2QubmV0ghZtZXNzYWdlMjk2
LnNwLXByb2QubmV0ghZtZXNzYWdlNjkyLnNwLXByb2QubmV0ghltZXNzYWdpbmcu
c291cmNlcG9pbnQuY29tghhtZXRhYm9tYi11ay5tZXRhYm9tYi5uZXSCFG1tcy5i
dXJkYS1mb3J3YXJkLmRlggttbXMuY25uLmNvbYIPbW1zLnNwLXByb2QubmV0ghNw
cml2YWN5LmxpZ2Fib2xkLmRrghtycHMtdWsucm9ja3BhcGVyc2hvdGd1bi5jb22C
FnMxaG9tZXMtZ2IuczFob21lcy5jb22CGHNvdXJjZXBvaW50LW1tcy5hZXR2LmNv
bYIdc291cmNlcG9pbnQtbW1zLmJpb2dyYXBoeS5jb22CG3NvdXJjZXBvaW50LW1t
cy5oaXN0b3J5LmNvbYIec291cmNlcG9pbnQtbW1zLm15bGlmZXRpbWUuY29tghRz
b3VyY2Vwb2ludC52aWNlLmNvbYIKc3AubmJhLmNvbYITc3AubmludGVuZG9saWZl
LmNvbYIRc3AucHVzaHNxdWFyZS5jb22CFnVzZ2FtZXItdXMudXNnYW1lci5uZXSC
EnZnMjQ3LXVrLnZnMjQ3LmNvbYIVdmllcnZpamYtYmUuZ29wbGF5LmJlMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADy
AHcAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGPGIchAAABAMA
SDBGAiEAg0FtPlgmAmBO/tPMzSjvKkvIQ9wa7G3Q+TITH4aCTswCIQC5ls4fAMIH
qq6xXjY7KCLdzuwhv6dhd0XkMgzKYI+ulQB3AK33vvp8/xDIi509nB4+GGq0Zyld
z7EMJMqFhjTr3IKKAAABhjxiHL8AAAQDAEgwRgIhAIQcqHeAsWrbIqksgjFcF3kM
QhbYibalVsXpKglNHjItAiEAtYePQURbTkRAWqjNOfP5pm+q2DJ/5CM8nL6sKUgZ
d2QwDQYJKoZIhvcNAQELBQADggEBAJ91u3FBONHm+VfHAj3Q/ZtzFPi8rJhBjcKx
4E0S3f7ZOA6/Yx7Y7JT39Veiq4KyJmjxh9l7wZsCQBc2EKV5ou5eGH9otdp17mtg
beaOv5T6MlRjohiVsKIHP6teInQU1AUGkvjlG81P558JF59t05OhwS4Wf4WiQFee
yN49MrCrhyC7NXCBA6Zqvf5kKtUtwFTx2seNUFKXmIm7H3hT59zZ5EpDiNaycVvK
n2MyRFGa4+B3ymtAR4oV5SkEdzopjEtfCMInUNKrmgqTLOumPtGgxY9VhEhhcQhI
JJWHBU3/sfRSgi8mPpU9IWsEpe0zNaPOYe6FZNV/dDo2h9qvm/Y=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Ktd5tjZ7knLFtpex/J
xo5sweBknUywyvSYAXL6fja+Ercv7PCfc9XrgQL8R4EvCaUaaB92xtEZ6h/sShmC
CSkhrI74AbWiNeyT+1lldKeFQrvQSiGvXHivAO2yMJhcJZL9C7tPjf1G0qGnHXo+
AAxnq7do1+MRdZGYTtCpvdCwEYysellBlSDPGRemF3jC/74Kc54t9ANGftE/U1ec
vWUk0Txg2STtyaEFXj8PZoC+9sCAC6MaEcyaow3L2B4adLbAmXi0szxzO5wwBA83
Q3xcMCp95HPLTPl5/JD6h+aTSJ2+h3474ioP8uIQVKf8RjRv+JzI/gzLhblxJmWR
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432572917257310614154075976404357947026445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 16:31:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-11 16:31:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.infoworld.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24704578679927074852744014269306424462049406013111928333194953113413080351242048127108402009021405656142521056011824288789508925507038905116532420298036789638050330313293768958206119020871377087638496257614111359780538219577902032223692583973279505248208719207827633842937482813421167167332398509670149218147263696795178520917937609453939684168323717612871988207463973218665502509899674233814106940493264017519929837761747555596523665581881986157559711291985820613113699858210204744910958629004821308595490887780803663219530981238897246644237195228056380930317754930219632858107544594631245480798926226650982097719591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							944f0c642b77cef91313b2592475ed7d68099944
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2041 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.arnnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelasia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelpartner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.digitalartsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gamestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.goodgearguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idgtechnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.itwhitepapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.lacentrale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mavoiturecash.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.idg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.promiflash.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.skysportaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thefullnerd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.webwereld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.computerweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.datasciencecentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.eatsmarter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iqdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iskelma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.lemagit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiocity.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radionova.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiopooki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.sueddeutsche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.techtarget.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theserverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.voice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-de.eurogamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-uk.eurogamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasgowtimes-gb.glasgowtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapresse-ca.lapresse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1257.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1343.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1348.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1414.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message296.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message692.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.sourcepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabomb-uk.metabomb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.ligabold.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps-uk.rockpapershotgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.aetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.mylifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nintendolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgamer-us.usgamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg247-uk.vg247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viervijf-be.goplay.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001863c621c84000004030048304602210083416d3e582602604efed3cccd28ef2a4bc843dc1aec6dd0f932131f86824ecc022100b996ce1f00c207aaaeb15e363b2822ddceec21bfa7617745e4320cca608fae95007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001863c621cbf0000040300483046022100841ca87780b16adb22a92c82315c17790c4216d889b6a556c5e92a094d1e322d022100b5878f41445b4e44405aa8cd39f3f9a66faad8327fe4233c9cbeac2948197764
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f75bb714138d1e6f957c7023dd0fd9b7314f8bcac98418dc2b1e04d12ddfed9380ebf631ed8ec94f7f557a2ab82b22668f187d97bc19b0240173610a579a2ee5e187f68b5da75ee6b606de68ebf94fa325463a21895b0a2073fab5e227414d4050692f8e51bcd4fe79f09179f6dd393a1c12e167f85a240579ec8de3d32b0ab8720bb35708103a66abdfe642ad52dc054f1dac78d5052979889bb1f7853e7dcd9e44a4388d6b2715bca9f633244519ae3e077ca6b40478a15e52904773a298c4b5f08c22750d2ab9a0a932ceba63ed1a0c58f55844861710848249587054dffb1f452822f263e953d216b04a5ed3335a3ce61ee8564d57f743a3687daaf9bf6