cmp.am-online.com

Issued by R3

About this certificate

This digital certificate with serial number 03:61:60:36:46:14:21:c7:2f:53:aa:8b:f2:19:18:02:9b:a3 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmp.am-online.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:60:36:46:14:21:c7:2f:53:aa:8b:f2:19:18:02:9b:a3
Serial Number (int): 294472135079601173011268759314909366492067
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:94:0a:12:91:e2:2d:9d:dc:0e:b6:c4:f0:30:60:59:b6:57:12:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:f4:9e:da:95:ca:75:51:04:49:cd:a3:9b:3e:0b:22:04:16:39:00
Fingerprint (sha256): 93:94:3e:b0:d5:b6:15:96:06:65:28:1e:17:60:3c:d6:c3:4b:e2:44:8d:09:d5:f3:f5:41:ef:23:8f:26:60:31

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.am-online.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.am-online.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.am-online.com
cmp.amodernkitchen.com
cmp.amretailcongress.co.uk
cmp.anglingtimes.co.uk
cmp.automotivemanagementlive.co.uk
cmp.bauerb2bconferences.co.uk
cmp.bellamagazine.co.uk
cmp.bikemagazine.co.uk
cmp.birdwatching.co.uk
cmp.builtmag.co.uk
cmp.carmagazine.co.uk
cmp.carpfeed.com
cmp.carzing.co.uk
cmp.classicbike.co.uk
cmp.classiccargiveaways.co.uk
cmp.classiccarsforsale.co.uk
cmp.classiccarsmagazine.co.uk
cmp.classiccarweekly.co.uk
cmp.closeronline.co.uk
cmp.commercialfleet.org
cmp.companycarinaction.co.uk
cmp.electricfleetconference.co.uk
cmp.empireonline.com
cmp.fateandfortunemagazine.co.uk
cmp.fleetandmobilitylive.com
cmp.fleetmobilityconference.com
cmp.fleetnews.co.uk
cmp.gardenanswersmagazine.co.uk
cmp.gardennewsmagazine.co.uk
cmp.gofishing.co.uk
cmp.graziadaily.co.uk
cmp.greatmagazines.co.uk
cmp.heatworld.com
cmp.hellorayo.co.uk
cmp.landscapemagazine.co.uk
cmp.livefortheoutdoors.com
cmp.lro.com
cmp.mcnfestival.com
cmp.mcnmotorcycleshow.com
cmp.mcnsport.co.uk
cmp.mindthegapconference.com
cmp.model-rail.co.uk
cmp.modernclassicsmagazine.co.uk
cmp.moderngardensmagazine.co.uk
cmp.mojo4music.com
cmp.motherandbaby.co.uk
cmp.motherandbaby.com
cmp.motorcyclenews.com
cmp.myfavouriterecipes.net
cmp.nationalrailconference.com
cmp.parkers.co.uk
cmp.performancebikes.co.uk
cmp.photoanswers.co.uk
cmp.planetradio.co.uk
cmp.practicalclassics.co.uk
cmp.practicalsportsbikesmag.co.uk
cmp.puzzlemagazines.co.uk
cmp.puzzleshq.com
cmp.radioplay.dk
cmp.radioplay.fi
cmp.radioplay.no
cmp.radioplay.se
cmp.railbusinessevents.co.uk
cmp.raillive.org.uk
cmp.railmagazine.com
cmp.railreview.com
cmp.recipes-plus.co.uk
cmp.ride.co.uk
cmp.smarttransport.org.uk
cmp.soundis.gr
cmp.soundis.ro
cmp.spiritanddestiny.co.uk
cmp.steamrailway.co.uk
cmp.takeabreak.co.uk
cmp.thatslife.co.uk
cmp.todays-golfer.com
cmp.todaysgolfer.co.uk
cmp.trailrunningmag.co.uk
cmp.troutfisherman.co.uk
cmp.tvchoicemagazine.co.uk
cmp.walk1000miles.co.uk
cmp.whatsthebest-diy.co.uk
cmp.whatsthebest.co.uk
cmp.winchristmas.co.uk
cmp.winitforhim.co.uk
cmp.winsomething.co.uk
cmp.winspring.co.uk
cmp.winsummer.co.uk
cmp.wintoys.co.uk
cmp.yourhorselive.co.uk
cmp.yours.co.uk
consent.podplay.com

Other certificates including the domain name am-online.com

(limited to 100 certificates)
cmp.am-online.com
ssl392057.cloudflaressl.com
ssl392057.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
ssl392057.cloudflaressl.com
ssl392057.cloudflaressl.com
ssl392056.cloudflaressl.com
ssl392057.cloudflaressl.com
am-online.com
ssl392057.cloudflaressl.com
automotive-management-live.am-online.com
ssl392057.cloudflaressl.com
ssl392056.cloudflaressl.com
ssl392057.cloudflaressl.com
ssl392057.cloudflaressl.com
automotive-management-live.am-online.com
sa12gl.wpc.edgecastcdn.net
automotive-management-live.am-online.com
dg-0096-485615a.client-tls.adestra.com
sa12gl.wpc.edgecastcdn.net
ssl392057.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
*.am-online.com
sa12gl.wpc.edgecastcdn.net
automotive-management-live.am-online.com
automotive-management-live.am-online.com
ssl392056.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
ssl392055.cloudflaressl.com
automotive-management-live.am-online.com
automotive-management-live.am-online.com
ssl392057.cloudflaressl.com
am-online.com
sa12gl.wpc.edgecastcdn.net
automotive-management-live.am-online.com
ssl392057.cloudflaressl.com
ssl392055.cloudflaressl.com
*.am-online.com
ssl392056.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
ssl392057.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
sa12gl.wpc.edgecastcdn.net
ssl392055.cloudflaressl.com
ssl392057.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
sa12gl.wpc.edgecastcdn.net
ssl392056.cloudflaressl.com
ssl392056.cloudflaressl.com
automotive-management-live.am-online.com
am-online.com
automotive-management-live.am-online.com
sa12gl.wpc.edgecastcdn.net
sa12gl.wpc.edgecastcdn.net
ssl392057.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
ssl392055.cloudflaressl.com
automotive-management-live.am-online.com
am-online.com
*.am-online.com
ssl392055.cloudflaressl.com
cdn.am-online.com
automotive-management-live.am-online.com
sa12gl.wpc.edgecastcdn.net
sa394gl.wpc.edgecastcdn.net
ssl392057.cloudflaressl.com
ssl392056.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
cmp.am-online.com
cmp.am-online.com
sa12gl.wpc.edgecastcdn.net
ssl392057.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
sa394gl.wpc.edgecastcdn.net
am-online.com
ssl392056.cloudflaressl.com
ssl392055.cloudflaressl.com
automotive-management-live.am-online.com
ssl392056.cloudflaressl.com
cdn.am-online.com
ssl392055.cloudflaressl.com
ssl392055.cloudflaressl.com
ssl392056.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
automotive-management-live.am-online.com
ssl392057.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
automotive-management-live.am-online.com
cmp.am-online.com
*.am-online.com
ssl392056.cloudflaressl.com
sa12gl.wpc.edgecastcdn.net
ssl392057.cloudflaressl.com
ssl392055.cloudflaressl.com
ssl392056.cloudflaressl.com
automotive-management-live.am-online.com
ssl392055.cloudflaressl.com
automotive-management-live.am-online.com
ssl392056.cloudflaressl.com
ssl392056.cloudflaressl.com

Certificate

The complete raw certificate details for cmp.am-online.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINtTCCDJ2gAwIBAgISA2FgNkYUIccvU6qL8hkYApujMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTkxNjQ5MThaFw0yNDAzMTgxNjQ5MTdaMBwxGjAYBgNVBAMT
EWNtcC5hbS1vbmxpbmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlAwUv3wjTwoI8y4gXFN2xXIQ8fCNRw5ItDhsRlfjRPmMnInSaXRQTSwQD9Of
VHreib0FdE6Cy0F5bJ7I7KXC6RH414/12BoDL5L8zMZ0G+V+fijUdkmapiiu35L5
tyUF6hlif6dOCNddXSg1v5mewG79QQ7J4XzIKz5etvsKLCc6xigB/H/GhapQiujn
WrZz/cOdT2740y+6NXRgd5nAt4Vzn28kA8WBOdQZP1+NCXlVDP9hU/mm6zIVb8Rv
77QfWQEf7Sci2qfOAJQi2cVOeHyPdlcKRK3sEhrvg7inCxOR+lYvGirBFidMr8iE
wgW07OBcM5aUWOkoT05H0o6P3QIDAQABo4IK2TCCCtUwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBSelAoSkeItndwOtsTwMGBZtlcS4TAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCCN4GA1UdEQSCCNUwggjRghFjbXAuYW0tb25saW5lLmNvbYIWY21wLmFt
b2Rlcm5raXRjaGVuLmNvbYIaY21wLmFtcmV0YWlsY29uZ3Jlc3MuY28udWuCFmNt
cC5hbmdsaW5ndGltZXMuY28udWuCImNtcC5hdXRvbW90aXZlbWFuYWdlbWVudGxp
dmUuY28udWuCHWNtcC5iYXVlcmIyYmNvbmZlcmVuY2VzLmNvLnVrghdjbXAuYmVs
bGFtYWdhemluZS5jby51a4IWY21wLmJpa2VtYWdhemluZS5jby51a4IWY21wLmJp
cmR3YXRjaGluZy5jby51a4ISY21wLmJ1aWx0bWFnLmNvLnVrghVjbXAuY2FybWFn
YXppbmUuY28udWuCEGNtcC5jYXJwZmVlZC5jb22CEWNtcC5jYXJ6aW5nLmNvLnVr
ghVjbXAuY2xhc3NpY2Jpa2UuY28udWuCHWNtcC5jbGFzc2ljY2FyZ2l2ZWF3YXlz
LmNvLnVrghxjbXAuY2xhc3NpY2NhcnNmb3JzYWxlLmNvLnVrgh1jbXAuY2xhc3Np
Y2NhcnNtYWdhemluZS5jby51a4IaY21wLmNsYXNzaWNjYXJ3ZWVrbHkuY28udWuC
FmNtcC5jbG9zZXJvbmxpbmUuY28udWuCF2NtcC5jb21tZXJjaWFsZmxlZXQub3Jn
ghxjbXAuY29tcGFueWNhcmluYWN0aW9uLmNvLnVrgiFjbXAuZWxlY3RyaWNmbGVl
dGNvbmZlcmVuY2UuY28udWuCFGNtcC5lbXBpcmVvbmxpbmUuY29tgiBjbXAuZmF0
ZWFuZGZvcnR1bmVtYWdhemluZS5jby51a4IcY21wLmZsZWV0YW5kbW9iaWxpdHls
aXZlLmNvbYIfY21wLmZsZWV0bW9iaWxpdHljb25mZXJlbmNlLmNvbYITY21wLmZs
ZWV0bmV3cy5jby51a4IfY21wLmdhcmRlbmFuc3dlcnNtYWdhemluZS5jby51a4Ic
Y21wLmdhcmRlbm5ld3NtYWdhemluZS5jby51a4ITY21wLmdvZmlzaGluZy5jby51
a4IVY21wLmdyYXppYWRhaWx5LmNvLnVrghhjbXAuZ3JlYXRtYWdhemluZXMuY28u
dWuCEWNtcC5oZWF0d29ybGQuY29tghNjbXAuaGVsbG9yYXlvLmNvLnVrghtjbXAu
bGFuZHNjYXBlbWFnYXppbmUuY28udWuCGmNtcC5saXZlZm9ydGhlb3V0ZG9vcnMu
Y29tggtjbXAubHJvLmNvbYITY21wLm1jbmZlc3RpdmFsLmNvbYIZY21wLm1jbm1v
dG9yY3ljbGVzaG93LmNvbYISY21wLm1jbnNwb3J0LmNvLnVrghxjbXAubWluZHRo
ZWdhcGNvbmZlcmVuY2UuY29tghRjbXAubW9kZWwtcmFpbC5jby51a4IgY21wLm1v
ZGVybmNsYXNzaWNzbWFnYXppbmUuY28udWuCH2NtcC5tb2Rlcm5nYXJkZW5zbWFn
YXppbmUuY28udWuCEmNtcC5tb2pvNG11c2ljLmNvbYIXY21wLm1vdGhlcmFuZGJh
YnkuY28udWuCFWNtcC5tb3RoZXJhbmRiYWJ5LmNvbYIWY21wLm1vdG9yY3ljbGVu
ZXdzLmNvbYIaY21wLm15ZmF2b3VyaXRlcmVjaXBlcy5uZXSCHmNtcC5uYXRpb25h
bHJhaWxjb25mZXJlbmNlLmNvbYIRY21wLnBhcmtlcnMuY28udWuCGmNtcC5wZXJm
b3JtYW5jZWJpa2VzLmNvLnVrghZjbXAucGhvdG9hbnN3ZXJzLmNvLnVrghVjbXAu
cGxhbmV0cmFkaW8uY28udWuCG2NtcC5wcmFjdGljYWxjbGFzc2ljcy5jby51a4Ih
Y21wLnByYWN0aWNhbHNwb3J0c2Jpa2VzbWFnLmNvLnVrghljbXAucHV6emxlbWFn
YXppbmVzLmNvLnVrghFjbXAucHV6emxlc2hxLmNvbYIQY21wLnJhZGlvcGxheS5k
a4IQY21wLnJhZGlvcGxheS5maYIQY21wLnJhZGlvcGxheS5ub4IQY21wLnJhZGlv
cGxheS5zZYIcY21wLnJhaWxidXNpbmVzc2V2ZW50cy5jby51a4ITY21wLnJhaWxs
aXZlLm9yZy51a4IUY21wLnJhaWxtYWdhemluZS5jb22CEmNtcC5yYWlscmV2aWV3
LmNvbYIWY21wLnJlY2lwZXMtcGx1cy5jby51a4IOY21wLnJpZGUuY28udWuCGWNt
cC5zbWFydHRyYW5zcG9ydC5vcmcudWuCDmNtcC5zb3VuZGlzLmdygg5jbXAuc291
bmRpcy5yb4IaY21wLnNwaXJpdGFuZGRlc3RpbnkuY28udWuCFmNtcC5zdGVhbXJh
aWx3YXkuY28udWuCFGNtcC50YWtlYWJyZWFrLmNvLnVrghNjbXAudGhhdHNsaWZl
LmNvLnVrghVjbXAudG9kYXlzLWdvbGZlci5jb22CFmNtcC50b2RheXNnb2xmZXIu
Y28udWuCGWNtcC50cmFpbHJ1bm5pbmdtYWcuY28udWuCGGNtcC50cm91dGZpc2hl
cm1hbi5jby51a4IaY21wLnR2Y2hvaWNlbWFnYXppbmUuY28udWuCF2NtcC53YWxr
MTAwMG1pbGVzLmNvLnVrghpjbXAud2hhdHN0aGViZXN0LWRpeS5jby51a4IWY21w
LndoYXRzdGhlYmVzdC5jby51a4IWY21wLndpbmNocmlzdG1hcy5jby51a4IVY21w
Lndpbml0Zm9yaGltLmNvLnVrghZjbXAud2luc29tZXRoaW5nLmNvLnVrghNjbXAu
d2luc3ByaW5nLmNvLnVrghNjbXAud2luc3VtbWVyLmNvLnVrghFjbXAud2ludG95
cy5jby51a4IXY21wLnlvdXJob3JzZWxpdmUuY28udWuCD2NtcC55b3Vycy5jby51
a4ITY29uc2VudC5wb2RwbGF5LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYG
CisGAQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABjIMyRAEAAAQDAEgwRgIhAPErlzE8NDibuKXoDKalqkwWntknKCQh
F0JSaiozrFThAiEA/qwD9R8/Ru7tzRdCZkBr2iQBz9Z92YWNfthAj5OIkx8AdwCi
4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYyDMkQUAAAEAwBIMEYC
IQD6fqbraVrKOkl5jvTIfF4bU1Ky5WEr9kR08TLknILnngIhAIKSomnSBxODLi8U
qG8Emg93kmMXLh9nPVM4as7/nTfoMA0GCSqGSIb3DQEBCwUAA4IBAQARW3uAzuDv
8SAvgPhAlbdLlGPtjeGszssGAwJwI+sNdwW7YBzvVv+M+5OP6IR6pVdMlDdqVItp
wMpxa18gr+jcksXM3k6d2nqLUMFsCbB1G/TQcl21abFfCYz4GNUj1o6lvooY6fIu
oVVsw8F3KwB7jyiMunuiiep7FRDZblCGdHbGiY/uIMjWd1SbdwX3fBIXBmxw+nkH
HawI1KE42SDuCI0llNxzjHPHQq2N4bYew9B8xnJxIqidLRm3+Xh8zM+KolcSDcvl
7J+GOnZQtYe/mq0zaJgEDYRZ8/Y6GGYU0ZqJAA8GiEfK5UWvmLJsC+hBBzEwUVs4
hg0lT+K2G8yX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAwUv3wjTwoI8y4gXFN2
xXIQ8fCNRw5ItDhsRlfjRPmMnInSaXRQTSwQD9OfVHreib0FdE6Cy0F5bJ7I7KXC
6RH414/12BoDL5L8zMZ0G+V+fijUdkmapiiu35L5tyUF6hlif6dOCNddXSg1v5me
wG79QQ7J4XzIKz5etvsKLCc6xigB/H/GhapQiujnWrZz/cOdT2740y+6NXRgd5nA
t4Vzn28kA8WBOdQZP1+NCXlVDP9hU/mm6zIVb8Rv77QfWQEf7Sci2qfOAJQi2cVO
eHyPdlcKRK3sEhrvg7inCxOR+lYvGirBFidMr8iEwgW07OBcM5aUWOkoT05H0o6P
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294472135079601173011268759314909366492067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 16:49:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 16:49:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.am-online.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18689226521202342759954164028142453629982049585487979701243364793832978967457220932197781582251139691693923053988940967733574524664219704408382577687422344185603988388675051898183941181656153852581595529512968055543137940413052228426835664772164769433677078369207508923282579015941956636970456673458117655367717173834778141187421715441992041850547002052356258532426442462696773410333984714884521622807230527472195115427167581763179292172627849458282753279108099320125436234984675090545532244522504706947299369417929188252320433957079296190012780425359397776384803120039345057526823189765057455868092697499479541977053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e940a1291e22d9ddc0eb6c4f0306059b65712e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2261 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.am-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.amodernkitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.amretailcongress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.anglingtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.automotivemanagementlive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bauerb2bconferences.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bellamagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bikemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.birdwatching.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.builtmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.carmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.carpfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.carzing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.classicbike.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.classiccargiveaways.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.classiccarsforsale.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.classiccarsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.classiccarweekly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.closeronline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.commercialfleet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.companycarinaction.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.electricfleetconference.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.empireonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.fateandfortunemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.fleetandmobilitylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.fleetmobilityconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.fleetnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gardenanswersmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gardennewsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gofishing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.graziadaily.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.greatmagazines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.heatworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.hellorayo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.landscapemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.livefortheoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.lro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mcnfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mcnmotorcycleshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mcnsport.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mindthegapconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.model-rail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.modernclassicsmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.moderngardensmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mojo4music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.motherandbaby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.motherandbaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.myfavouriterecipes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.nationalrailconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.performancebikes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.photoanswers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.practicalclassics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.practicalsportsbikesmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.puzzlemagazines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.puzzleshq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.radioplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.radioplay.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.radioplay.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.radioplay.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.railbusinessevents.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.raillive.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.railmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.railreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.recipes-plus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ride.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.smarttransport.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.soundis.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.soundis.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.spiritanddestiny.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.steamrailway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.takeabreak.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thatslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.todays-golfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.todaysgolfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.trailrunningmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.troutfisherman.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tvchoicemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.walk1000miles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.whatsthebest-diy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.whatsthebest.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.winchristmas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.winitforhim.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.winsomething.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.winspring.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.winsummer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wintoys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.yourhorselive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.yours.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.podplay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c833244010000040300483046022100f12b97313c34389bb8a5e80ca6a5aa4c169ed9272824211742526a2a33ac54e1022100feac03f51f3f46eeedcd174266406bda2401cfd67dd9858d7ed8408f9388931f007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c833244140000040300483046022100fa7ea6eb695aca3a49798ef4c87c5e1b5352b2e5612bf64474f132e49c82e79e0221008292a269d20713832e2f14a86f049a0f779263172e1f673d53386aceff9d37e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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