cmp.aftenbladet.no

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:aa:d4:e2:ed:51:ff:a1:fd:d6:53:f5:23:f8:cb:c7:eb was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmp.aftenbladet.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:aa:d4:e2:ed:51:ff:a1:fd:d6:53:f5:23:f8:cb:c7:eb
Serial Number (int): 407885349700128746578994843821226161063915
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f0:86:ac:d0:0b:62:7a:8c:21:4e:a9:bf:e0:2c:10:1f:3d:9c:56:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:3c:ba:8e:29:db:8e:e1:52:8a:2b:ad:57:b1:a8:90:a7:5b:88:7f
Fingerprint (sha256): c6:1d:55:9b:21:2f:1b:58:d1:60:4d:9d:7c:99:5b:ad:b3:14:3b:ba:6e:52:df:b1:8c:e5:c6:d0:13:d6:34:2d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.aftenbladet.no

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.aftenbladet.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.aftenbladet.no
cmp.aftenposten.no
cmp.aftonbladet.se
cmp.av-avis.no
cmp.bareasane.no
cmp.blocket.dev
cmp.blocket.se
cmp.bt.no
cmp.bygdanytt.no
cmp.dinepenger.no
cmp.e24.no
cmp.finn.no
cmp.friflyt.no
cmp.friflytbestill.no
cmp.godare.se
cmp.godt.no
cmp.helthjem.no
cmp.hintaopas.fi
cmp.honk.no
cmp.honk.se
cmp.jeger.no
cmp.kesaduuni.org
cmp.klart.se
cmp.klarttest.net
cmp.landevei.no
cmp.ledenicheur.fr
cmp.letsdeal.no
cmp.letsdeal.se
cmp.livsstil.se
cmp.magasinpluss.no
cmp.minmote.no
cmp.norsk-klatring.no
cmp.oikotie.fi
cmp.omakotimessut.net
cmp.omataloyhtio.fi
cmp.omni.se
cmp.omniekonomi.se
cmp.onsk.no
cmp.oyposten.no
cmp.pent.no
cmp.podme.com
cmp.pricespy.co.uk
cmp.prisjagt.dk
cmp.prisjakt.no
cmp.prisjakt.nu
cmp.puutarha.net
cmp.qasa.fi
cmp.rakentaja.fi
cmp.rakentaja.pro
cmp.raksaajafiksaa.fi
cmp.randaberg24.no
cmp.rrmessut.fi
cmp.strilen.no
cmp.svd.se
cmp.talovertailu.fi
cmp.tek.no
cmp.terrengsykkel.no
cmp.tori.fi
cmp.tv.nu
cmp.utemagasinet.no
cmp.vestnytt.no
cmp.vg.no
cmp.vglive.no
cmp.vgnett.no
cmp.vgtv.no
cmp.wellness.se
psi-dev.svd.se
psi.svd.se
samtykke.bilbasen.dk
samtykke.dba.dk

Other certificates including the domain name aftenbladet.no

(limited to 100 certificates)
bedrift.schibsted.no
cis.schibsted.com
aftenposten.no
cmp.aftenbladet.no
*.i.bt.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
id.adressa.no
kundeweb.aftenposten.no
aftenbladet.no
aftenbladet.no
id.morgenlevering.no
cmp.aftenbladet.no
cmp.aftenbladet.no
aftenposten.no
kundeweb-ssl.snd.no
folk.schibsted.tech
bedrift.schibsted.no
bedrift.schibsted.no
cmp.aftenbladet.no
detskjer.snd.no
kundeportal.aftenposten.no
butikk.aftenbladet.no
ap.no
aftenposten.no
bedrift.schibsted.no
*.aftenbladet.no
bedrift.schibsted.no
detskjer.snd.no
sip.schibsted.no
ap.no
cmp.aftenbladet.no
kundeweb-ssl.snd.no
id.tek.no
aftenbladet.no
klikk.abonnement.aftenposten.no
api.snd.no
kundeweb-ssl.snd.no
cmp.aftenbladet.no
editorial.aftenbladet.no
butikk.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-03.schibsted.no
bedrift.schibsted.no
id.dolen.no
id.magasinpluss.no
test-bestilling.aftenposten.no
www.aftenposten.no
cmp.aftenbladet.no
kundeweb.aftenposten.no
i.aftenbladet.no
ap.no
i.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-04.schibsted.no
cmp.aftenbladet.no
ap.no
test-cm.aftenposten.no
cmp.aftenbladet.no
bedrift.schibsted.no
*.sacdn.no
cis.schibsted.com
cmp.aftenbladet.no
bedrift.schibsted.no
*.i.bt.no
bestilling.aftenposten.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
aftenposten.no
api.snd.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
kundeweb.aftenposten.no
klikk.abonnement.aftenposten.no
aftenbladet.no
ap.no
live.aftenposten.no
ap.no
aftenbladet.no
cmp.aftenbladet.no
www.aftenposten.no
www.aftenposten.no
red.hvaskjer.aftenbladet.no
www.aftenposten.no
bedrift.schibsted.no
kundeweb-ssl.snd.no
ap.no
ap.no
kundeportal.aftenposten.no
id.dolen.no
*.i.bt.no
aftenposten.no
sch-lyfe-03.schibsted.no
butikk.aftenbladet.no
ap.no
*.aftenbladet.no
portal.aftenbladet.no
ap.no
ap.no
cis.aftenbladet.no

Certificate

The complete raw certificate details for cmp.aftenbladet.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/LLN3aV31WFLdJjPDpz
QvCTwHOouA6MfAVyG92b8w9/COX+oCxHvZ7AqHwU7hMnLq2YvtFR2DW144X3FLk5
5urlEBSJuqh+q8wdzfO+7LJizlKxJ7hJ7ocIQzA3F+lITs8cPj/dpGFiWpTp0e0D
IcP5ElUOxSsZMXGBpgh1sQCNSGOXaRct7YfTIP/pXBHKYz2aYkHHuQ4Wm0grKbd0
++AMCjyfhuHLCsuKs07mxjNsxPa4AKdlEHQx9OR6XAqe5/qv3tXrFdK+yQ9EJ3qs
5vj6bDsuWXidnvy66Ig8IIGgdOlgcyAMlxtp8G1VcQNYevRHzZd45lnFoqaJrWYE
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407885349700128746578994843821226161063915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 09:17:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 09:16:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.aftenbladet.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23221335901243266711965015528954319220660222636932234854860977205970529106386590460503407763036545004063061167637757700638040089990769875682671578697877602985033719766444501498696777222157101871605592261060332034069282240008325891398788941002010844050349128391268696303382630402514088462961169110986175609433644508450852940422798274935936574353431923457722109738657063518424331827277940232050874444392195265507331459938164006941624468033004751480459802530135410811983078079051104669177641319568094936956414459160452388151181810592901729112021495552069311057923472188837943671767691766302394242629046112085052188132373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f086acd00b627a8c214ea9bfe02c101f3d9c5671
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenbladet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftonbladet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.av-avis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bareasane.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.blocket.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.blocket.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bygdanytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.dinepenger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.e24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.finn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflyt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflytbestill.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godare.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.helthjem.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.hintaopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.honk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.honk.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jeger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.kesaduuni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klart.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klarttest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.landevei.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ledenicheur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.livsstil.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.magasinpluss.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.minmote.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.norsk-klatring.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oikotie.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omakotimessut.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omataloyhtio.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omni.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omniekonomi.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.onsk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oyposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.podme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pricespy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjagt.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.puutarha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.qasa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.raksaajafiksaa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.randaberg24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rrmessut.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.strilen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.talovertailu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.terrengsykkel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tv.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.utemagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vestnytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vg.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vglive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgnett.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgtv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wellness.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi-dev.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.bilbasen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.dba.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ea37646400000040300473045022034ab69dba2b678e592c2280c1d6bd7900bf014fbdc111d3008de2c956458323d022100f0356ffce78df67a276df97cd4471a23ac9846a6bac03c30d43323bb87342db0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ea37646300000040300483046022100ec0dc58d53ce9b469925dfa3ee4b74dc6d6e6adbe7baa13f8c25d46f40da4297022100ce65d5c5b52067396ef5fcb3f2bf7749a645e530ee05b973ecec934752229be2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002200cfe8c8d7140c526c7e65acaabc981b3a3336d9b5a056247a68fc05e2a46c3f2e5dd3c3286f2876154bbf7f69c71e1d7f353fe2af748bf12ba8e20c42412ea86f243c299e4f449c568310899fe4bc5e0a9d1a05bcf8ac2d2dbcfb59710ad4bb74852e75aae70cc80c6cc8cf114679629afc495662fef5ceda8f4f44d5d9ee84428f658fbcc90c4d1283b567a6513f6cf08dd029c504f60915f8ecb1447abb702eed3ee463b99add3375ffb11199ff0f73ae94851975127e06bda046322d6bc1b4dcb79f088820103c3178a8dbb06d2018da7e2399a099afdd3d7b62a03b403f22775639d5dd2f41f126bd1426da87b57f75ae27a634f4e72b1863f9341672