cmp.academics.at

Issued by R3

About this certificate

This digital certificate with serial number 03:e8:0d:2e:bd:26:21:39:4d:6b:f1:af:f4:e4:e8:fd:7a:a7 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cmp.academics.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:0d:2e:bd:26:21:39:4d:6b:f1:af:f4:e4:e8:fd:7a:a7
Serial Number (int): 340299889566935527517210282906496706378407
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:45:77:86:a6:28:7f:2d:ae:10:f6:c3:91:ab:e9:f4:e0:63:53:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:6f:f4:49:d8:f0:e2:2a:3e:95:0a:fd:ce:56:0f:ff:bd:19:3f:70
Fingerprint (sha256): ed:50:96:98:2f:98:b8:4a:d0:38:7c:16:b9:90:ff:ce:3d:11:4e:29:5b:65:49:f1:eb:a0:04:f5:79:1e:45:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmp.academics.at

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmp.academics.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmp.academics.at
cmp.academics.ch
cmp.academics.com
cmp.academics.de
cmp.arnnet.com.au
cmp.channelasia.tech
cmp.channelpartner.de
cmp.cio.com
cmp.cio.de
cmp.computerwoche.de
cmp.computerworld.com
cmp.computerworld.pl
cmp.csoonline.com
cmp.digitalartsonline.co.uk
cmp.gamestar.com
cmp.goodgearguide.com.au
cmp.idg.pl
cmp.idg.tv
cmp.idgtechnetwork.com
cmp.infoworld.com
cmp.itwhitepapers.com
cmp.javaworld.com
cmp.lacentrale.fr
cmp.macwelt.de
cmp.macworld.co.uk
cmp.macworld.com
cmp.macworld.es
cmp.mavoiturecash.fr
cmp.networkworld.com
cmp.pcwelt.de
cmp.pcworld.com
cmp.pcworld.idg.com.au
cmp.pcworld.pl
cmp.prod.jobs.zeit.de
cmp.promiflash.de
cmp.sky.at
cmp.sky.de
cmp.skysportaustria.at
cmp.techconnect.com
cmp.techhive.com
cmp.thefullnerd.com
cmp.webwereld.nl
consent.eatsmarter.de
consent.iqdigital.de
consent.iskelma.fi
consent.planetradio.co.uk
consent.radiocity.fi
consent.radionova.fi
consent.radioplay.dk
consent.radioplay.fi
consent.radioplay.no
consent.radioplay.se
consent.radiopooki.fi
consent.theguardian.com
consent.voice.fi
eurogamer-de.eurogamer.de
eurogamer-uk.eurogamer.net
lapresse-ca.lapresse.ca
message.maven.io
message.sp-prod.net
message1257.sp-prod.net
message1343.sp-prod.net
message1348.sp-prod.net
message1414.sp-prod.net
message296.sp-prod.net
message692.sp-prod.net
messaging.sourcepoint.com
metabomb-uk.metabomb.net
mms.burda-forward.de
mms.cnn.com
mms.sp-prod.net
rps-uk.rockpapershotgun.com
s1homes-gb.s1homes.com
sourcepoint-mms.aetv.com
sourcepoint-mms.biography.com
sourcepoint-mms.history.com
sourcepoint-mms.mylifetime.com
sourcepoint.vice.com
sp.nba.com
sp.nintendolife.com
sp.pushsquare.com
usgamer-us.usgamer.net
vg247-uk.vg247.com
viervijf-be.goplay.be

Other certificates including the domain name academics.at

(limited to 100 certificates)
cmp.channelpartner.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
prod.academics.de
www.academics.de
mms.sp-prod.net
cmp.channelpartner.de
www.academics.de
stage.academics.de
stage.academics.de
www.academics.de
www.academics.de
*.academics.at
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
prod.academics.de
www.academics.de
staging.academics.de
www.academics.de
staging.academics.de
cmp.academics.at
cmp.academics.at
prod.academics.de
cmp.academics.at
staging.academics.de
cmp.academics.at
www.academics.de
cmp.academics.at
prod.academics.de
mms.sp-prod.net
cmp.academics.at
prod.academics.de
stage.academics.de
cmp.academics.at
www.academics.de
prod.academics.de
prod.academics.de
www.academics.de
www.academics.de
cmp-sp.handelsblatt.com
www.academics.de
www.academics.de
www.academics.de
prod.academics.de
dev.academics.de
cmp-sp.handelsblatt.com
cmp.academics.at
www.academics.de
dev.academics.de
stage.academics.de
dev.academics.de
www.academics.de
prod.academics.de
prod.academics.de
cmp.channelpartner.de
www.academics.de
cmp.channelpartner.de
cmp.channelpartner.de
cmp.academics.at
cmp.infoworld.com
www.academics.de
prod.academics.de
cmp.academics.at
stage.academics.de
cmp-sp.handelsblatt.com
cmp.channelpartner.de
staging.academics.de
staging.academics.de
dev.academics.de
cmp.infoworld.com
stage.academics.de
prod.academics.de
www.academics.de
prod.academics.de
staging.academics.de
cmp.infoworld.com
prod.academics.de
prod.academics.de
stage.academics.de
prod.academics.de
cmp-sp.handelsblatt.com
mms.sp-prod.net
dev.academics.de
staging.academics.de
www.academics.de
stage.academics.de
*.academics.at
prod.academics.de
www.academics.de
cmp.infoworld.com
prod.academics.de
staging.academics.de
www.academics.de
www.academics.de
mms.sp-prod.net
cmp.academics.at

Certificate

The complete raw certificate details for cmp.academics.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7jOCBdA0HTEbOK9AHP8
1kkePwRoBhsYazfZJx3AIjYk2gpSgtnuNXbF77Yy/TTd0+u7tYDY9eab4rapXRmG
dRFy1JuCYtG7aOas7UZHEz9Qu5aczxrq42dXv5xcMFv7WJe33RzBTFSfaphumKMC
WD8EaHBReP8Ay5RKaeuPM93QO4PadVkxxQ91reDhrvPaBPUl6D7M5e7n7NlraMIc
ht+1arD9nBZXbMNkaQI3Y9Rq67aRQh9LFwW611pudVMPTlHQM7lDyNNc5PFkNV/i
CZw22fOFAeEEbcyfYrHdjdBLvpdmdCi5jYGxm4blpcHJGYRl2s5ey4pXCqFmysVL
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340299889566935527517210282906496706378407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 12:29:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 12:29:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmp.academics.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19153114698643201508449395505078773692405733118235191779059298108980155448060780476465016805547309861814986813266521982895256336790997059844842178183198956059657666550656509383515393407966733404642379864706899273150216213205510955551300111730572992599906212836229845630038209194200760187532494476130755675740759763013624081137279976311944434183248334306111206424622572037901977273361550523821966118484281560908130200869176642738277685734418991819561882573395257200664477048359161814481291376093131365299937147770651210728897988008165797021195764800957288243743757492643989856110659191131767624562141557036610595670821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14457786a6287f2dae10f6c391abe9f4e06353f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.academics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.arnnet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelasia.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.channelpartner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.computerworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.digitalartsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.gamestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.goodgearguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idg.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.idgtechnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.itwhitepapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.lacentrale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.macworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.mavoiturecash.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.idg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.pcworld.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.prod.jobs.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.promiflash.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.sky.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.skysportaustria.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.thefullnerd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.webwereld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.eatsmarter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iqdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.iskelma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.planetradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiocity.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radionova.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radioplay.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.radiopooki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.theguardian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.voice.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-de.eurogamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurogamer-uk.eurogamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapresse-ca.lapresse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1257.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1343.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1348.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message1414.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message296.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'message692.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messaging.sourcepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metabomb-uk.metabomb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.cnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.sp-prod.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps-uk.rockpapershotgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1homes-gb.s1homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.aetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.biography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.history.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint-mms.mylifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcepoint.vice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nintendolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pushsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgamer-us.usgamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg247-uk.vg247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viervijf-be.goplay.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d9d81ef470000040300463044022070cc0f69a43ce77629690c659d773bbd1b47d6d792868ea3f4a086ebbb98e0c3022056d44fbf3fa801653dafbf0af210fbbea629baf63edaac4507125b53609843880076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d9d81f1550000040300473045022100ab59ef82323ebc3efd1fb353520e1641c97eabbb7ce0f6e8635d99cfef1d45c402205746cdd62e12ab1455baa6a4b484bcedce0ef3b5d84db4fce6ff7e0b014247da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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