studio.florida.universalstudios.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:af:0b:ce:cd:ff:20:1a:78:3c:8f:fb:de:7b:b9:a3:7e:ec was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=studio.florida.universalstudios.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:af:0b:ce:cd:ff:20:1a:78:3c:8f:fb:de:7b:b9:a3:7e:ecSerial Number (int): 320901967305658549004972267705731836509932
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bf:32:66:80:bf:32:49:00:94:61:ae:2c:de:88:50:71:ba:dd:c3:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c8:aa:5b:68:41:39:ed:f5:3a:62:30:ec:7f:9b:91:b3:67:6c:7d:74
Fingerprint (sha256): 14:19:13:79:29:b0:90:54:08:91:22:81:4b:bb:6c:e4:53:5c:a9:28:6f:35:97:4f:f2:bb:4d:00:3b:80:d7:32
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate studio.florida.universalstudios.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for studio.florida.universalstudios.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
studio.florida.universalstudios.com
Other certificates including the domain name universalstudios.com
(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
secure.universalstudios.com
secure.universalstudios.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
secure.universalstudios.com
www.universalorlando.com
propsstg.universalstudios.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.seeso.com
secure.universalstudios.com
web2.sourceaudio.com
www.universalorlando.com
www.universalpictures.com
www.seeso.com
www.seeso.com
www.universalpictures.com
secure.universalstudios.com
studio.florida.universalstudios.com
www.universalpictures.com
www.universalorlando.com
oltsuat.secure.universalstudios.com
secure.universalstudios.com
www.universalorlando.com
www.universalpictures.com
props.universalstudios.com
www.universalpictures.com
twuat.secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.seeso.com
www.seeso.com
propsstg.universalstudios.com
san-3-s6.tlsprovisioning.exacttarget.com
secure.universalstudios.com
www.universalpictures.com
secure.universalstudios.com
www.universalpictures.com
www.seeso.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.universalpictures.com
www.seeso.com
studioopsportal.universalstudios.com
studio.florida.universalstudios.com
san-3-s6.tlsprovisioning.exacttarget.com
etds.universalstudios.com
web2.sourceaudio.com
etdsuat.universalstudios.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
studioopsportal.universalstudios.com
www.seeso.com
san-3-s6.tlsprovisioning.exacttarget.com
www.seeso.com
www.universalpictures.com
www.universalpictures.com
secure.universalstudios.com
studio.florida.universalstudios.com
web2.sourceaudio.com
www.universalpictures.com
www.universalorlando.com
signup.universalstudios.com
nbcuat.secure.universalstudios.com
www.universalpictures.com
secure.universalstudios.com
www.universalorlando.com
www.universalpictures.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
props.universalstudios.com
secure.universalstudios.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
web2.sourceaudio.com
www.universalpictures.com
etdsuat-o.ucdp.net
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
propsstg.universalstudios.com
secure.universalstudios.com
secure.universalstudios.com
secure.universalstudios.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
secure.universalstudios.com
www.universalorlando.com
propsstg.universalstudios.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.seeso.com
secure.universalstudios.com
web2.sourceaudio.com
www.universalorlando.com
www.universalpictures.com
www.seeso.com
www.seeso.com
www.universalpictures.com
secure.universalstudios.com
studio.florida.universalstudios.com
www.universalpictures.com
www.universalorlando.com
oltsuat.secure.universalstudios.com
secure.universalstudios.com
www.universalorlando.com
www.universalpictures.com
props.universalstudios.com
www.universalpictures.com
twuat.secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.seeso.com
www.seeso.com
propsstg.universalstudios.com
san-3-s6.tlsprovisioning.exacttarget.com
secure.universalstudios.com
www.universalpictures.com
secure.universalstudios.com
www.universalpictures.com
www.seeso.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.universalpictures.com
www.seeso.com
studioopsportal.universalstudios.com
studio.florida.universalstudios.com
san-3-s6.tlsprovisioning.exacttarget.com
etds.universalstudios.com
web2.sourceaudio.com
etdsuat.universalstudios.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
studioopsportal.universalstudios.com
www.seeso.com
san-3-s6.tlsprovisioning.exacttarget.com
www.seeso.com
www.universalpictures.com
www.universalpictures.com
secure.universalstudios.com
studio.florida.universalstudios.com
web2.sourceaudio.com
www.universalpictures.com
www.universalorlando.com
signup.universalstudios.com
nbcuat.secure.universalstudios.com
www.universalpictures.com
secure.universalstudios.com
www.universalorlando.com
www.universalpictures.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
props.universalstudios.com
secure.universalstudios.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
web2.sourceaudio.com
www.universalpictures.com
etdsuat-o.ucdp.net
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
propsstg.universalstudios.com
Certificate
The complete raw certificate details for studio.florida.universalstudios.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISA68Lzs3/IBp4PI/73nu5o37sMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjEwOTE2MDRaFw0y MDAzMjAwOTE2MDRaMC4xLDAqBgNVBAMTI3N0dWRpby5mbG9yaWRhLnVuaXZlcnNh bHN0dWRpb3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84yM /PcUHcpDaEGg/iAEDBloxYF2rzECu/6piDssYnaitf1jKYtLmiU2SmqOm3j+vp8n nOxZL40tags9ndIGstru4B/SEyNpLryKoSvtlTtme2kfQLQh6nMIlDgRhWqgKO0g xW9kJN29leBtzQPjK4eEqk09TA2tVy3qj7F3Upt1dGSWudLDr2r5qnaLwAtdjwdl 6Fl3XlYeJZnoiTUHC1Za6kPS9EruOefMwxtOYtUN6TyfHhPeMA61p2zdj1wWVoGJ vQHEtKolxDBvMkaONx41uMfYPVviiZ8HuYQUdK/xmmI6P8qKwjL915Yxjvv4ruBM sPbTpdU8ZkwokNyypwIDAQABo4ICeTCCAnUwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBS/MmaAvzJJAJRhrizeiFBxut3DwDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMC4GA1UdEQQnMCWCI3N0dWRpby5mbG9y aWRhLnVuaXZlcnNhbHN0dWRpb3MuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA8JWkWfIA0YJAEC0vk4iO rUv+HUfjmeHQNKawqKqOsnMAAAFvJ/T+fgAABAMARzBFAiEArT1pZB8xNe1VeOoz qM1pjAg7ZQ4Xw57bO91CzEeB+J0CICRr2ZzSpz6GBWtPqKki8bClRa1wfiF8MeL9 SHER7SHEAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvJ/T+ oQAABAMASDBGAiEA4CU5mGYceNB8A6UJ9aTzKjBqBXX4/EwF/8PSAGhrKB0CIQC2 4Z/ak1r0HfsLjLA/3q8XkKQ4JGuSfnz8AiF8/kV6/zANBgkqhkiG9w0BAQsFAAOC AQEAU9bsbdfKffm9ZheIXaXLfkq+9qwxm1qCxUaEb6xwm0V2ikk5WyLdiWpaMcAH wnUqp+/rLmmErzBdgPSnLSRB++bg+s30lxbHawmWBra0d87ANYPsumUkzjlSjZAm debMPbCLmE0e2qS0cOs2pb/lIyaXVdV5oueYRf5PR3FOq8Pi+8aAy3Em8ynQ5cCS 6o7fLpqTj7e06A/0KlsehJ4UsfBPWt4BzQZkY0ikqhQqqQ1aKT0YwgL87bN3ukcW cXV/ZISm777P100RJRJtGfmjBmRKeQHG9IcU5uWs9HqZR6PLpKkN8she28M+Zohz yGN7CB74nuBFlwHlPFGQCFabbA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84yM/PcUHcpDaEGg/iAE DBloxYF2rzECu/6piDssYnaitf1jKYtLmiU2SmqOm3j+vp8nnOxZL40tags9ndIG stru4B/SEyNpLryKoSvtlTtme2kfQLQh6nMIlDgRhWqgKO0gxW9kJN29leBtzQPj K4eEqk09TA2tVy3qj7F3Upt1dGSWudLDr2r5qnaLwAtdjwdl6Fl3XlYeJZnoiTUH C1Za6kPS9EruOefMwxtOYtUN6TyfHhPeMA61p2zdj1wWVoGJvQHEtKolxDBvMkaO Nx41uMfYPVviiZ8HuYQUdK/xmmI6P8qKwjL915Yxjvv4ruBMsPbTpdU8ZkwokNyy pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320901967305658549004972267705731836509932 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 09:16:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 09:16:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'studio.florida.universalstudios.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30745216257302229789842840120920543274791446948419956337213785255953011018192722877661545360289314658970004739940158678506237819510137843961246040278481642943848423209499276491061759059958369103938757360069588299812569118803639828727385371041891378412625423676166346685648989281697878995306365227153123084002120471311668483349253593328736773275220006680271531771639566377617645802668420907803914519703588141395372420452106889290996931076915289258696546993218374378285045797938867480465904912940915724128173444200295041540426292600930747285687811636859660054370776725473394744810364917976857682245163155806077698486951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bf326680bf3249009461ae2cde885071baddc3c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.florida.universalstudios.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f27f4fe7e0000040300473045022100ad3d69641f3135ed5578ea33a8cd698c083b650e17c39edb3bdd42cc4781f89d0220246bd99cd2a73e86056b4fa8a922f1b0a545ad707e217c31e2fd487111ed21c400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f27f4fea10000040300483046022100e0253998661c78d07c03a509f5a4f32a306a0575f8fc4c05ffc3d200686b281d022100b6e19fda935af41dfb0b8cb03fdeaf1790a438246b927e7cfc02217cfe457aff . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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