cmp.aftenbladet.no

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:d8:fb:b5:6b:d2:ba:97:a4:cb:99:70:07:fb:c7:86:96 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmp.aftenbladet.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d7:d8:fb:b5:6b:d2:ba:97:a4:cb:99:70:07:fb:c7:86:96
Serial Number (int): 334785986876542312733140060049293246432918
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:88:cf:e1:ba:03:b7:31:b6:ce:98:9f:0e:de:56:cf:f3:08:66:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:4f:1c:42:07:1e:e8:c6:95:e7:31:c2:30:70:27:6c:2d:25:3b:d4
Fingerprint (sha256): c6:76:33:7b:91:f3:55:7a:40:82:c9:a6:0b:df:b8:ed:d9:aa:ca:a5:29:d5:4e:09:32:08:70:18:4b:0b:20:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.aftenbladet.no

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.aftenbladet.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.aftenbladet.no
cmp.aftenposten.no
cmp.aftonbladet.se
cmp.av-avis.no
cmp.bareasane.no
cmp.blocket.dev
cmp.blocket.se
cmp.bt.no
cmp.bygdanytt.no
cmp.dinepenger.no
cmp.e24.no
cmp.finn.no
cmp.friflyt.no
cmp.friflytbestill.no
cmp.godare.se
cmp.godt.no
cmp.helthjem.no
cmp.hintaopas.fi
cmp.honk.no
cmp.honk.se
cmp.jeger.no
cmp.kesaduuni.org
cmp.klart.se
cmp.klarttest.net
cmp.landevei.no
cmp.ledenicheur.fr
cmp.letsdeal.no
cmp.letsdeal.se
cmp.livsstil.se
cmp.magasinpluss.no
cmp.minmote.no
cmp.norsk-klatring.no
cmp.oikotie.fi
cmp.omakotimessut.net
cmp.omataloyhtio.fi
cmp.omni.se
cmp.omniekonomi.se
cmp.onsk.no
cmp.oyposten.no
cmp.pent.no
cmp.podme.com
cmp.pricespy.co.uk
cmp.prisjagt.dk
cmp.prisjakt.no
cmp.prisjakt.nu
cmp.puutarha.net
cmp.qasa.fi
cmp.rakentaja.fi
cmp.rakentaja.pro
cmp.raksaajafiksaa.fi
cmp.randaberg24.no
cmp.rrmessut.fi
cmp.strilen.no
cmp.svd.se
cmp.talovertailu.fi
cmp.tek.no
cmp.terrengsykkel.no
cmp.tori.fi
cmp.tv.nu
cmp.utemagasinet.no
cmp.vestnytt.no
cmp.vg.no
cmp.vglive.no
cmp.vgnett.no
cmp.vgtv.no
cmp.wellness.se
psi-dev.svd.se
psi.svd.se
samtykke.bilbasen.dk
samtykke.dba.dk

Other certificates including the domain name aftenbladet.no

(limited to 100 certificates)
bedrift.schibsted.no
cis.schibsted.com
aftenposten.no
cmp.aftenbladet.no
*.i.bt.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
id.adressa.no
kundeweb.aftenposten.no
aftenbladet.no
aftenbladet.no
id.morgenlevering.no
cmp.aftenbladet.no
cmp.aftenbladet.no
aftenposten.no
kundeweb-ssl.snd.no
folk.schibsted.tech
bedrift.schibsted.no
bedrift.schibsted.no
cmp.aftenbladet.no
detskjer.snd.no
kundeportal.aftenposten.no
butikk.aftenbladet.no
ap.no
aftenposten.no
bedrift.schibsted.no
*.aftenbladet.no
bedrift.schibsted.no
detskjer.snd.no
sip.schibsted.no
ap.no
cmp.aftenbladet.no
kundeweb-ssl.snd.no
id.tek.no
aftenbladet.no
klikk.abonnement.aftenposten.no
api.snd.no
kundeweb-ssl.snd.no
cmp.aftenbladet.no
editorial.aftenbladet.no
butikk.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-03.schibsted.no
bedrift.schibsted.no
id.dolen.no
id.magasinpluss.no
test-bestilling.aftenposten.no
www.aftenposten.no
cmp.aftenbladet.no
kundeweb.aftenposten.no
i.aftenbladet.no
ap.no
i.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-04.schibsted.no
cmp.aftenbladet.no
ap.no
test-cm.aftenposten.no
cmp.aftenbladet.no
bedrift.schibsted.no
*.sacdn.no
cis.schibsted.com
cmp.aftenbladet.no
bedrift.schibsted.no
*.i.bt.no
bestilling.aftenposten.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
aftenposten.no
api.snd.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
kundeweb.aftenposten.no
klikk.abonnement.aftenposten.no
aftenbladet.no
ap.no
live.aftenposten.no
ap.no
aftenbladet.no
cmp.aftenbladet.no
www.aftenposten.no
www.aftenposten.no
red.hvaskjer.aftenbladet.no
www.aftenposten.no
bedrift.schibsted.no
kundeweb-ssl.snd.no
ap.no
ap.no
kundeportal.aftenposten.no
id.dolen.no
*.i.bt.no
aftenposten.no
sch-lyfe-03.schibsted.no
butikk.aftenbladet.no
ap.no
*.aftenbladet.no
portal.aftenbladet.no
ap.no
ap.no
cis.aftenbladet.no

Certificate

The complete raw certificate details for cmp.aftenbladet.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOGO6ChaiuEAVx7fzcqu
hAfzZbO+BY/9CHh69bX2St7TjsoT49NyTnjRHgN1jJZzaHu3Wd0i4LDcPsY+LMYz
md3Jd9czkMuDRToPR7Hmr7Hy4zdGQbICkYR+wDJqnxWqdZIieNeIrqb7fSQwr4MI
Oz009Q9F8YipIVUPz5T6wSBWqOfCfJ4kOd5FI2bRRuMf2ms5SrbtznZK+F1WpCN9
feDrM7ZdiTIEO25Oxabwj8U8IKqBR3IZ+ZPbFPLPrdxVksxvH8M13nu5JZzAXvsl
+O97d8i0epMoXT82n7JnlN1RixXSUrDq9HRIMWz0z7HDTj028lTBdmw1E4EBZyYv
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334785986876542312733140060049293246432918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 12:24:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 12:24:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.aftenbladet.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18289542823781647175033736799384301670250456031008975454389220620411964985806470248690270198155035062380609468851861222201595470207387403343286416737952874183064208184490012429304008899515868005285922581557232914799286667267701039690696387581967593613158471862882614721220962827608230379141239717427905650821172645000902909445823941141634667933597862680821744544489130694377937840369665135075563961680679570652486803149041675264007971668376637972003598214896246188067799524965986307871346982092688050503727333759024624280167267230650159899243752234333202212342297997402016686192886237869298939759262386217942681792461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c88cfe1ba03b731b6ce989f0ede56cff3086698
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenbladet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftonbladet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.av-avis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bareasane.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.blocket.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.blocket.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bygdanytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.dinepenger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.e24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.finn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflyt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflytbestill.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godare.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.helthjem.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.hintaopas.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.honk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.honk.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jeger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.kesaduuni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klart.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klarttest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.landevei.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ledenicheur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.livsstil.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.magasinpluss.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.minmote.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.norsk-klatring.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oikotie.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omakotimessut.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omataloyhtio.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omni.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omniekonomi.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.onsk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oyposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.podme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pricespy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjagt.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.puutarha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.qasa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.raksaajafiksaa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.randaberg24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rrmessut.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.strilen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.talovertailu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.terrengsykkel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tv.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.utemagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vestnytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vg.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vglive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgnett.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgtv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wellness.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi-dev.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.bilbasen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.dba.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fc9ac9ce300000403004630440220657a452b62c3e8615506e6947111da8027df8ffeaa76e55acd492110af3cd4ad0220045f084e23ea38fd45e97907e96ee5207f95930b245f72975b9ed36ffb4ab656007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fc9ac9d9e000004030047304502202fb03e3471b9819ff8a5df4e1c39bccd4230d9c39b163edee40bf0a38445a2d8022100fe53bfc032ed8da4329f6f7e85e2f79264f0f228c9286ca84ac9cbfc68abb73f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001457e28299654c26c5cc329994ad4da7c279365d2df54953d915135b071cc89f5da8816083c9aa2c2f84daa329efd36681844909ccf164a8dcf0ed976d5409cf267a991e6c4cef9147122eb417ae1c0b38878e8bbc6934754cf830ed859f44238b1193f32bc9b5ba568f045983d6080a5e4fe7b7e98ed8cbe1509260a8f2f0de9a47fe5c4a2cbde3522e3a5c9e6d407a23b90d249f5eb34276f1dd71cab069c3b16d7e4cb7eadfe62f9de16c9523a93205a126d22e41a6cab54421f2d99e473fe42c082abb4de9acf8e07785b9fde4c36eb32f594a2fb819398a7e6bb96d12ce364f44d69212c3f60593c125438c72d8a3fb2c4ad1dda159085e5610a14e7e93