cmp.aftenbladet.no

Issued by R3

About this certificate

This digital certificate with serial number 04:db:bc:4a:0f:cd:51:ef:68:10:97:67:30:24:65:94:a7:02 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmp.aftenbladet.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:bc:4a:0f:cd:51:ef:68:10:97:67:30:24:65:94:a7:02
Serial Number (int): 423221261496404880927022898299751359620866
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3e:bb:5a:56:18:3b:35:a4:77:3d:2d:1b:c5:29:fe:5f:9d:01:c1:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:40:2e:32:84:3a:55:26:47:78:9e:2c:9f:4f:ee:49:66:43:df:ce
Fingerprint (sha256): ac:fb:9c:a9:63:ac:a9:54:e3:76:61:69:e6:ee:a9:61:ff:85:7e:7d:2e:6b:86:d3:0c:29:f1:e8:5f:b3:5f:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.aftenbladet.no

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.aftenbladet.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.aftenbladet.no
cmp.aftenposten.no
cmp.aftonbladet.se
cmp.av-avis.no
cmp.avointyopaikka.fi
cmp.bareasane.no
cmp.blocket.dev
cmp.blocket.se
cmp.bt.no
cmp.bygdanytt.no
cmp.dinepenger.no
cmp.e24.no
cmp.finn.no
cmp.friflyt.no
cmp.friflytbestill.no
cmp.godare.se
cmp.godt.no
cmp.helthjem.no
cmp.hintaopas.fi
cmp.honk.no
cmp.honk.se
cmp.jeger.no
cmp.kesaduuni.org
cmp.klart.se
cmp.klarttest.net
cmp.landevei.no
cmp.ledenicheur.fr
cmp.letsdeal.no
cmp.letsdeal.se
cmp.livsstil.se
cmp.minmote.no
cmp.norsk-klatring.no
cmp.oikotie.fi
cmp.omakotimessut.net
cmp.omataloyhtio.fi
cmp.omni.se
cmp.omniekonomi.se
cmp.onsk.no
cmp.oyposten.no
cmp.pent.no
cmp.podme.com
cmp.pricespy.co.uk
cmp.prisjagt.dk
cmp.prisjakt.no
cmp.prisjakt.nu
cmp.puutarha.net
cmp.qasa.fi
cmp.rakentaja.fi
cmp.rakentaja.pro
cmp.raksaajafiksaa.fi
cmp.randaberg24.no
cmp.rrmessut.fi
cmp.strilen.no
cmp.svd.se
cmp.talovertailu.fi
cmp.tek.no
cmp.terrengsykkel.no
cmp.tori.fi
cmp.tv.nu
cmp.utemagasinet.no
cmp.vestnytt.no
cmp.vg.no
cmp.vglive.no
cmp.vgnett.no
cmp.vgtv.no
cmp.wellness.se
psi-dev.svd.se
psi.svd.se
samtykke.bilbasen.dk
samtykke.dba.dk

Other certificates including the domain name aftenbladet.no

(limited to 100 certificates)
bedrift.schibsted.no
cis.schibsted.com
aftenposten.no
cmp.aftenbladet.no
*.i.bt.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
id.adressa.no
kundeweb.aftenposten.no
aftenbladet.no
aftenbladet.no
id.morgenlevering.no
cmp.aftenbladet.no
cmp.aftenbladet.no
aftenposten.no
kundeweb-ssl.snd.no
folk.schibsted.tech
bedrift.schibsted.no
bedrift.schibsted.no
cmp.aftenbladet.no
detskjer.snd.no
kundeportal.aftenposten.no
butikk.aftenbladet.no
ap.no
aftenposten.no
bedrift.schibsted.no
*.aftenbladet.no
bedrift.schibsted.no
detskjer.snd.no
sip.schibsted.no
ap.no
cmp.aftenbladet.no
kundeweb-ssl.snd.no
id.tek.no
aftenbladet.no
klikk.abonnement.aftenposten.no
api.snd.no
kundeweb-ssl.snd.no
cmp.aftenbladet.no
editorial.aftenbladet.no
butikk.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-03.schibsted.no
bedrift.schibsted.no
id.dolen.no
id.magasinpluss.no
test-bestilling.aftenposten.no
www.aftenposten.no
cmp.aftenbladet.no
kundeweb.aftenposten.no
i.aftenbladet.no
ap.no
i.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-04.schibsted.no
cmp.aftenbladet.no
ap.no
test-cm.aftenposten.no
cmp.aftenbladet.no
bedrift.schibsted.no
*.sacdn.no
cis.schibsted.com
cmp.aftenbladet.no
bedrift.schibsted.no
*.i.bt.no
bestilling.aftenposten.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
aftenposten.no
api.snd.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
kundeweb.aftenposten.no
klikk.abonnement.aftenposten.no
aftenbladet.no
ap.no
live.aftenposten.no
ap.no
aftenbladet.no
cmp.aftenbladet.no
www.aftenposten.no
www.aftenposten.no
red.hvaskjer.aftenbladet.no
www.aftenposten.no
bedrift.schibsted.no
kundeweb-ssl.snd.no
ap.no
ap.no
kundeportal.aftenposten.no
id.dolen.no
*.i.bt.no
aftenposten.no
sch-lyfe-03.schibsted.no
butikk.aftenbladet.no
ap.no
*.aftenbladet.no
portal.aftenbladet.no
ap.no
ap.no
cis.aftenbladet.no

Certificate

The complete raw certificate details for cmp.aftenbladet.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx77/v4dZ5hnQzLU+tyE
siDoZKHuS9fJgTvBuMRBUhGobx6DQ2lh6H3pio4xCUHdsJIo6vXe/iRaTWFOnefK
vhSzuvK8cu4UwwBYTyeMB7YVKjsVkOJfazJ7ETWW5NCJTSNS7o2hr7tWLJxdFt2n
Q6iNcOhuOQkwNCetHIZ+MSqpwuuc+1waxpGE4Ft8FH41owefq2p8l150rtC/+v5O
2qCMDLWcRz1np07n1FwZlYViiuUtZPIuZ4T9WvekCzNrMZRUReoSnf4UxjUOBQ6f
C9CGEbVaSNx9n6I9VINv3glxCBfPfbCeFaJ2hgDdQ+QokYaU9O5Qz+Ctfov4r1Ih
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423221261496404880927022898299751359620866
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 09:31:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 09:31:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.aftenbladet.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26146608085161652556500364922334900432911373900351086890566042443444719173847985199768440429587884765408914707606891951954097310249066429510472799631562853259568986361703179454291336112050865655821759836300335251195872703143923030297299005444918460621700856689934728568483703409544026670750348854704411193056836880741810545851852786781214508873354074534457546764830055833801725873519317199296302477179059418669164666441975481269157878785065872415149353738204322990239866423338449646501560263390332898836601315226656255603526050231503072650369730084385853115433463765203597567478004656799571209875144010004194059755963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ebb5a56183b35a4773d2d1bc529fe5f9d01c115
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenbladet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftonbladet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.av-avis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.avointyopaikka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bareasane.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.blocket.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.blocket.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bygdanytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.dinepenger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.e24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.finn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflyt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflytbestill.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godare.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.helthjem.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.hintaopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.honk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.honk.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jeger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.kesaduuni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klart.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klarttest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.landevei.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ledenicheur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.livsstil.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.minmote.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.norsk-klatring.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oikotie.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omakotimessut.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omataloyhtio.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omni.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omniekonomi.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.onsk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oyposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.podme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pricespy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjagt.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.puutarha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.qasa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.raksaajafiksaa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.randaberg24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rrmessut.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.strilen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.talovertailu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.terrengsykkel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tv.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.utemagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vestnytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vg.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vglive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgnett.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgtv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wellness.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi-dev.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.bilbasen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.dba.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cd92de3b10000040300473045022100b787bf6c782ce79071e7e32a1c540ee5654ea63053f4574612dfe7091ea3892b02200ca259281355032fdc8e517dc8b28a4ef55eacea9ba186a2be94aea73e154aba007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cd92de3ae0000040300483046022100f8e80e01928837a037bde5012c676be59269f8e3bbc0fca897da7f992db89ae2022100fe90ea1b6d85fd5eaf6e6b8b54d7c24833c88d9f7ac2f3c83ffaceaab1d6cd8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0051b19372bbeada4d17f5de3b29e3f06a1d1119324da6dac8482a6de4c51b7b65021c00bcd56d9d2c34d1821fcb61814f952ba3d1b7c5a207d013666c8e304033eeb8bc1cedf7249b0bf541bf3600c859cc8942531b4c330d7d4998cbbfc33902834359d8f060623e2ee29c252571e04582ea226890b493fd370a9a2c2137bb4488946c6367985f1bcb6f7b19125f4188ab94e2dd46bdca6c6a9aaafef27e53234e5bfc08fc712a8143fe220174a6b44a663c636e1bbc860fd70a7dc0b16fad56fa2dcb2c143a70c3797f6579daf5f3fff783bf89ebbeb0416dfaf72167cdc5c1e84f68583b8befe9b15de9bfcf60c28c6195b2c4f203a3a715bb1d1dea6829e8