cmp.aftenbladet.no

Issued by R3

About this certificate

This digital certificate with serial number 04:c0:97:7b:89:d6:6b:a6:ac:ae:53:0d:a7:88:90:6e:d3:08 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmp.aftenbladet.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:97:7b:89:d6:6b:a6:ac:ae:53:0d:a7:88:90:6e:d3:08
Serial Number (int): 413984713051416552523601416176858620154632
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:9d:50:f5:73:7f:f8:5b:fe:b4:46:79:ab:a0:ed:65:5f:2b:71:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:f1:58:8c:8a:8b:c7:ca:72:95:e9:7d:9d:5a:2c:c6:b6:e0:85:d1
Fingerprint (sha256): c9:a4:93:03:b0:6f:60:67:81:85:0e:72:7a:a1:af:1f:1d:e8:d0:84:55:5b:bc:9f:e7:cc:d8:b9:3f:04:97:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.aftenbladet.no

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.aftenbladet.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.aftenbladet.no
cmp.aftenposten.no
cmp.aftonbladet.se
cmp.av-avis.no
cmp.avointyopaikka.fi
cmp.bareasane.no
cmp.bt.no
cmp.byas.no
cmp.bygdanytt.no
cmp.dinepenger.no
cmp.e24.no
cmp.finn.no
cmp.friflyt.no
cmp.friflytbestill.no
cmp.godare.se
cmp.godt.no
cmp.helthjem.no
cmp.jeger.no
cmp.kesaduuni.org
cmp.klart.se
cmp.klarttest.net
cmp.landevei.no
cmp.ledenicheur.fr
cmp.letsdeal.no
cmp.letsdeal.se
cmp.minmote.no
cmp.norsk-klatring.no
cmp.oikotie.fi
cmp.omakotimessut.net
cmp.omataloyhtio.fi
cmp.omni.se
cmp.omniekonomi.se
cmp.oyposten.no
cmp.peil.no
cmp.pent.no
cmp.pricespy.co.uk
cmp.prisjakt.no
cmp.prisjakt.nu
cmp.privacy-dev.schibsted.io
cmp.privacy-pre.schibsted.io
cmp.privacy-pro.schibsted.io
cmp.puutarha.net
cmp.qasa.fi
cmp.rakentaja.fi
cmp.rakentaja.pro
cmp.randaberg24.no
cmp.rrmessut.fi
cmp.sahkovertailu.fi
cmp.strilen.no
cmp.svd.se
cmp.talovertailu.fi
cmp.tek.no
cmp.terrengsykkel.no
cmp.tipster.no
cmp.tori.fi
cmp.tv.nu
cmp.utemagasinet.no
cmp.vestnytt.no
cmp.vg.no
cmp.vgd.no
cmp.vglive.no
cmp.vgnett.no
cmp.vgtv.no
cmp.wellness.se
psi-dev.svd.se
psi.svd.se
samtykke.bilbasen.dk
samtykke.dba.dk

Other certificates including the domain name aftenbladet.no

(limited to 100 certificates)
bedrift.schibsted.no
cis.schibsted.com
aftenposten.no
cmp.aftenbladet.no
*.i.bt.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
id.adressa.no
kundeweb.aftenposten.no
aftenbladet.no
aftenbladet.no
id.morgenlevering.no
cmp.aftenbladet.no
cmp.aftenbladet.no
aftenposten.no
kundeweb-ssl.snd.no
folk.schibsted.tech
bedrift.schibsted.no
bedrift.schibsted.no
cmp.aftenbladet.no
detskjer.snd.no
kundeportal.aftenposten.no
butikk.aftenbladet.no
ap.no
aftenposten.no
bedrift.schibsted.no
*.aftenbladet.no
bedrift.schibsted.no
detskjer.snd.no
sip.schibsted.no
ap.no
cmp.aftenbladet.no
kundeweb-ssl.snd.no
id.tek.no
aftenbladet.no
klikk.abonnement.aftenposten.no
api.snd.no
kundeweb-ssl.snd.no
cmp.aftenbladet.no
editorial.aftenbladet.no
butikk.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-03.schibsted.no
bedrift.schibsted.no
id.dolen.no
id.magasinpluss.no
test-bestilling.aftenposten.no
www.aftenposten.no
cmp.aftenbladet.no
kundeweb.aftenposten.no
i.aftenbladet.no
ap.no
i.aftenbladet.no
bedrift.schibsted.no
sch-lyfe-04.schibsted.no
cmp.aftenbladet.no
ap.no
test-cm.aftenposten.no
cmp.aftenbladet.no
bedrift.schibsted.no
*.sacdn.no
cis.schibsted.com
cmp.aftenbladet.no
bedrift.schibsted.no
*.i.bt.no
bestilling.aftenposten.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
aftenposten.no
api.snd.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
kundeweb.aftenposten.no
klikk.abonnement.aftenposten.no
aftenbladet.no
ap.no
live.aftenposten.no
ap.no
aftenbladet.no
cmp.aftenbladet.no
www.aftenposten.no
www.aftenposten.no
red.hvaskjer.aftenbladet.no
www.aftenposten.no
bedrift.schibsted.no
kundeweb-ssl.snd.no
ap.no
ap.no
kundeportal.aftenposten.no
id.dolen.no
*.i.bt.no
aftenposten.no
sch-lyfe-03.schibsted.no
butikk.aftenbladet.no
ap.no
*.aftenbladet.no
portal.aftenbladet.no
ap.no
ap.no
cis.aftenbladet.no

Certificate

The complete raw certificate details for cmp.aftenbladet.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJujCCCKKgAwIBAgISBMCXe4nWa6asrlMNp4iQbtMIMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA3MTIxMjMyMDlaFw0yMjEwMTAxMjMyMDhaMB0xGzAZBgNVBAMT
EmNtcC5hZnRlbmJsYWRldC5ubzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKn3iTQLjugfaFvviYG2l/HnsFQTMBbu6e0T2v9pv8F0YS081504dTDjIjf6
4OYp3+JwTljMGE5bS7AmK+qKKT/ky3gUEaBBSyx+UQPfrZIpNqg5DWYbvreHB/nh
89wVpJGfjDhRj7bqTmnt1v2pC56sIzmwPBmx5qTV33XaeRhhkjl/JJWrLV5/gRmW
csJmd1fYkf2cF5BBfhjk7G4UxGn8JpAybEcKO3nYjq32jvlIyCPQH5oUUBlouV4b
kloS+tPY4//FZEs8opLS6J3PEl0DpDNzMoC9OrUOzbHdTLLfRQTTTCKaMi0lXNju
8ree9/yfMJLChZfbyPrGxMkwQlcCAwEAAaOCBt0wggbZMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUkZ1Q9XN/+Fv+tEZ5q6DtZV8rcbwwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wggSqBgNVHREEggShMIIEnYISY21wLmFmdGVuYmxhZGV0Lm5vghJjbXAu
YWZ0ZW5wb3N0ZW4ubm+CEmNtcC5hZnRvbmJsYWRldC5zZYIOY21wLmF2LWF2aXMu
bm+CFWNtcC5hdm9pbnR5b3BhaWtrYS5maYIQY21wLmJhcmVhc2FuZS5ub4IJY21w
LmJ0Lm5vggtjbXAuYnlhcy5ub4IQY21wLmJ5Z2Rhbnl0dC5ub4IRY21wLmRpbmVw
ZW5nZXIubm+CCmNtcC5lMjQubm+CC2NtcC5maW5uLm5vgg5jbXAuZnJpZmx5dC5u
b4IVY21wLmZyaWZseXRiZXN0aWxsLm5vgg1jbXAuZ29kYXJlLnNlggtjbXAuZ29k
dC5ub4IPY21wLmhlbHRoamVtLm5vggxjbXAuamVnZXIubm+CEWNtcC5rZXNhZHV1
bmkub3JnggxjbXAua2xhcnQuc2WCEWNtcC5rbGFydHRlc3QubmV0gg9jbXAubGFu
ZGV2ZWkubm+CEmNtcC5sZWRlbmljaGV1ci5mcoIPY21wLmxldHNkZWFsLm5vgg9j
bXAubGV0c2RlYWwuc2WCDmNtcC5taW5tb3RlLm5vghVjbXAubm9yc2sta2xhdHJp
bmcubm+CDmNtcC5vaWtvdGllLmZpghVjbXAub21ha290aW1lc3N1dC5uZXSCE2Nt
cC5vbWF0YWxveWh0aW8uZmmCC2NtcC5vbW5pLnNlghJjbXAub21uaWVrb25vbWku
c2WCD2NtcC5veXBvc3Rlbi5ub4ILY21wLnBlaWwubm+CC2NtcC5wZW50Lm5vghJj
bXAucHJpY2VzcHkuY28udWuCD2NtcC5wcmlzamFrdC5ub4IPY21wLnByaXNqYWt0
Lm51ghxjbXAucHJpdmFjeS1kZXYuc2NoaWJzdGVkLmlvghxjbXAucHJpdmFjeS1w
cmUuc2NoaWJzdGVkLmlvghxjbXAucHJpdmFjeS1wcm8uc2NoaWJzdGVkLmlvghBj
bXAucHV1dGFyaGEubmV0ggtjbXAucWFzYS5maYIQY21wLnJha2VudGFqYS5maYIR
Y21wLnJha2VudGFqYS5wcm+CEmNtcC5yYW5kYWJlcmcyNC5ub4IPY21wLnJybWVz
c3V0LmZpghRjbXAuc2Foa292ZXJ0YWlsdS5maYIOY21wLnN0cmlsZW4ubm+CCmNt
cC5zdmQuc2WCE2NtcC50YWxvdmVydGFpbHUuZmmCCmNtcC50ZWsubm+CFGNtcC50
ZXJyZW5nc3lra2VsLm5vgg5jbXAudGlwc3Rlci5ub4ILY21wLnRvcmkuZmmCCWNt
cC50di5udYITY21wLnV0ZW1hZ2FzaW5ldC5ub4IPY21wLnZlc3RueXR0Lm5vgglj
bXAudmcubm+CCmNtcC52Z2Qubm+CDWNtcC52Z2xpdmUubm+CDWNtcC52Z25ldHQu
bm+CC2NtcC52Z3R2Lm5vgg9jbXAud2VsbG5lc3Muc2WCDnBzaS1kZXYuc3ZkLnNl
ggpwc2kuc3ZkLnNlghRzYW10eWtrZS5iaWxiYXNlbi5ka4IPc2FtdHlra2UuZGJh
LmRrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIE
AgSB9gSB8wDxAHcA36Veq2iCTx9sre64X04+WurNohKkal6OOxLAIERcKnMAAAGB
8pwp1AAABAMASDBGAiEAmsQM9dKlBrsbnJaE2KTCjwI1K/SBmfPoNAQL616VvIUC
IQCyGWMsHEcRgnPqY0+Fj+/gm2QW4FoV0QZkIDZnBYOnJgB2ACl5vvCeOTkh8FZz
n2Old+W+V32cYAr4+U1dJlwlXceEAAABgfKcKcQAAAQDAEcwRQIhANp4pFry/BIA
ORP392xGiuEDaFIYi0ioTmH40Z1yoBFeAiA3y4en+gtgJAwLd0yivV32cQBX6TP3
64vdjuYaFl9rIzANBgkqhkiG9w0BAQsFAAOCAQEAZIiZLFe+ftTppqtFBOyLl7bc
Eqyu1Ld18UCCB9yvlbp4bgkGPpLuK7/SJkEMjeF7AymyXnpO5Xc1Vu6gix+vt2/O
DKdmYq9UIHN/wyrxvzTv/h20JQxIEbveWHWeuxIi+opOFwWPJfPlhZUr0TMo7386
YX2fZLzYvg+/v4/3OHxtC+FrjoKbAetSISRveooZgSfameIrUmQ0/IMXZt+51m5+
A/lBHQj0BIPJA0mC8pH6kdqhGXlz2CweUmCO1IbXMaWpjWEF4pAOYknhyGIBaZh5
VZ6ZxqGKyx//9aLAoqndyqtD+SKcgax3o6aTkrCFjZGw9uh37L6V/xxbvWhRpA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfeJNAuO6B9oW++JgbaX
8eewVBMwFu7p7RPa/2m/wXRhLTzXnTh1MOMiN/rg5inf4nBOWMwYTltLsCYr6oop
P+TLeBQRoEFLLH5RA9+tkik2qDkNZhu+t4cH+eHz3BWkkZ+MOFGPtupOae3W/akL
nqwjObA8GbHmpNXfddp5GGGSOX8klastXn+BGZZywmZ3V9iR/ZwXkEF+GOTsbhTE
afwmkDJsRwo7ediOrfaO+UjII9AfmhRQGWi5XhuSWhL609jj/8VkSzyiktLonc8S
XQOkM3MygL06tQ7Nsd1Mst9FBNNMIpoyLSVc2O7yt573/J8wksKFl9vI+sbEyTBC
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413984713051416552523601416176858620154632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-12 12:32:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 12:32:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.aftenbladet.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21456338065811359422747265810270678522955866330380791431743481209437729148314869801555070590552674660876333662246112318796142903612349744335148536481796838806998317596371409917378133626901636624395968280817674079563268869368688479602655466960590934244480072188066262749528607831879636398779272750168349889765070151037563699074190228154323632175733629019466431052115569568180232649742488172783872654731684377774005396644945172149016840101870572691500475381063849936407979926149074564241791134761458137983453971250255638926965168482631741075485556067798546565864475681520761095578731385241954857586219178220304464888407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							919d50f5737ff85bfeb44679aba0ed655f2b71bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenbladet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.aftonbladet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.av-avis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.avointyopaikka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bareasane.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.byas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.bygdanytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.dinepenger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.e24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.finn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflyt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.friflytbestill.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godare.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.godt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.helthjem.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.jeger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.kesaduuni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klart.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.klarttest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.landevei.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.ledenicheur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.letsdeal.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.minmote.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.norsk-klatring.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oikotie.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omakotimessut.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omataloyhtio.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omni.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.omniekonomi.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.oyposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.peil.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pricespy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prisjakt.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.privacy-dev.schibsted.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.privacy-pre.schibsted.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.privacy-pro.schibsted.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.puutarha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.qasa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rakentaja.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.randaberg24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.rrmessut.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sahkovertailu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.strilen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.talovertailu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.terrengsykkel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tipster.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tori.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.tv.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.utemagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vestnytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vg.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgd.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vglive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgnett.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.vgtv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.wellness.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi-dev.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.bilbasen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtykke.dba.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000181f29c29d400000403004830460221009ac40cf5d2a506bb1b9c9684d8a4c28f02352bf48199f3e834040beb5e95bc85022100b219632c1c47118273ea634f858fefe09b6416e05a15d106642036670583a7260076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000181f29c29c40000040300473045022100da78a45af2fc12003913f7f76c468ae1036852188b48a84e61f8d19d72a0115e022037cb87a7fa0b60240c0b774ca2bd5df6710057e933f7eb8bdd8ee61a165f6b23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006488992c57be7ed4e9a6ab4504ec8b97b6dc12acaed4b775f1408207dcaf95ba786e09063e92ee2bbfd226410c8de17b0329b25e7a4ee5773556eea08b1fafb76fce0ca76662af5420737fc32af1bf34effe1db4250c4811bbde58759ebb1222fa8a4e17058f25f3e585952bd13328ef7f3a617d9f64bcd8be0fbfbf8ff7387c6d0be16b8e829b01eb5221246f7a8a198127da99e22b526434fc831766dfb9d66e7e03f9411d08f40483c9034982f291fa91daa1197973d82c1e52608ed486d731a5a98d6105e2900e6249e1c86201699879559e99c6a18acb1ffff5a2c0a2a9ddcaab43f9229c81ac77a3a69392b0858d91b0f6e877ecbe95ff1c5bbd6851a4