tomorrow-studio.leftfield-entertainment.com
Issued by R3
About this certificate
This digital certificate with serial number 04:14:61:e7:ef:40:97:dc:a9:da:e2:10:23:83:cf:88:8e:23 was issued on by Let's Encrypt.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tomorrow-studio.leftfield-entertainment.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:14:61:e7:ef:40:97:dc:a9:da:e2:10:23:83:cf:88:8e:23Serial Number (int): 355384930454238710916560052613380955475491
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: cd:a4:dc:ed:97:ac:59:89:30:1e:14:a0:ea:49:c7:53:49:87:2e:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2b:e9:14:19:83:03:a6:9d:6e:3f:44:df:65:dd:66:c2:54:95:a5:78
Fingerprint (sha256): 2c:3b:7e:52:fd:33:5b:15:2a:af:8c:25:fb:d0:4a:40:47:e0:db:5b:05:3f:64:77:56:6f:66:2a:4c:f0:6a:bd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate tomorrow-studio.leftfield-entertainment.com
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tomorrow-studio.leftfield-entertainment.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
itv-america.com
itv-america.leftfield-entertainment.com
itv-creative.com
itv-creative.leftfield-entertainment.com
itvamerica-net.leftfield-entertainment.com
itvamerica.net
leftfield-creative1.leftfield-entertainment.com
leftfieldrentals.com
leftfieldrentals.leftfield-entertainment.com
mail.itvamerica.net
mail.leftfieldrentals.com
tomorrow-studio.leftfield-entertainment.com
tomorrowstudiosstaging.leftfield-entertainment.com
www.itv-america.com
www.itv-america.leftfield-entertainment.com
www.itv-creative.com
www.itv-creative.leftfield-entertainment.com
www.itvamerica-net.leftfield-entertainment.com
www.itvamerica.net
www.leftfield-creative1.leftfield-entertainment.com
www.leftfieldrentals.com
www.leftfieldrentals.leftfield-entertainment.com
www.tomorrow-studio.leftfield-entertainment.com
www.tomorrowstudiosstaging.leftfield-entertainment.com
itv-america.leftfield-entertainment.com
itv-creative.com
itv-creative.leftfield-entertainment.com
itvamerica-net.leftfield-entertainment.com
itvamerica.net
leftfield-creative1.leftfield-entertainment.com
leftfieldrentals.com
leftfieldrentals.leftfield-entertainment.com
mail.itvamerica.net
mail.leftfieldrentals.com
tomorrow-studio.leftfield-entertainment.com
tomorrowstudiosstaging.leftfield-entertainment.com
www.itv-america.com
www.itv-america.leftfield-entertainment.com
www.itv-creative.com
www.itv-creative.leftfield-entertainment.com
www.itvamerica-net.leftfield-entertainment.com
www.itvamerica.net
www.leftfield-creative1.leftfield-entertainment.com
www.leftfieldrentals.com
www.leftfieldrentals.leftfield-entertainment.com
www.tomorrow-studio.leftfield-entertainment.com
www.tomorrowstudiosstaging.leftfield-entertainment.com
Other certificates including the domain name leftfield-entertainment.com
(limited to 100 certificates)
goodcaper.com
autodiscover.thecastinghive.com
leftfield-entertainment.com
leftfield-entertainment.com
leftfield-entertainment.com
www.itv-creative.com
goodcaper.leftfield-entertainment.com
www.itv-america.com
www.itv-entertainment.com
www.itv-entertainment.com
webdisk.itvorbitprogram-us.com
www.tomorrow-studio.leftfield-entertainment.com
filewave.leftfield-entertainment.com
tomorrow-studio.leftfield-entertainment.com
sirensmedia.com
www.goodcaper.com
www.itv-creative.leftfield-entertainment.com
leftfield-entertainment.com
sirensmedia.com
tomorrow-studio.leftfield-entertainment.com
db.leftfield-entertainment.com
soundminer.leftfield-entertainment.com
mail.itvorbitprogram-us.com
www.goodcaper.leftfield-entertainment.com
itvamerica.co
mail.bigblack.org
goodcaper.com
www.goodcapercontent.leftfield-entertainment.com
itv-leftfield.com
tomorrow-studio.leftfield-entertainment.com
db.leftfield-entertainment.com
sirensmedia.com
leftfield-entertainment.com
goodcapercontent.leftfield-entertainment.com
webdisk.bigblack.org
sire.leftfield-entertainment.com
db.leftfield-entertainment.com
www.sirensmedia.com
leftfield-entertainment.com
www.itv-creative.com
www.itv-america.com
mail.itv-entertainment.com
goodcaper.com
www.itv-america.com
cpcontacts.itvorbitprogram-us.com
sire.leftfield-entertainment.com
www.itv-leftfield.leftfield-entertainment.com
itv-creative.com
mail.itv-lfe.com
itv-america.com
leftfield-entertainment.com
leftfieldrentals.leftfield-entertainment.com
autodiscover.itvleftfield.com
www.goodcapercontent.leftfield-entertainment.com
goodcapercontent.com
itv-creative.leftfield-entertainment.com
itv-ent.com
leftfieldrentals.com
mail.itv-entertainment.com
sire.leftfield-entertainment.com
leftfield-entertainment.com
webdb.leftfield-entertainment.com
www.goodcaper.com
autodiscover.thecastinghive.com
leftfield-entertainment.com
leftfield-entertainment.com
leftfield-entertainment.com
www.itv-creative.com
goodcaper.leftfield-entertainment.com
www.itv-america.com
www.itv-entertainment.com
www.itv-entertainment.com
webdisk.itvorbitprogram-us.com
www.tomorrow-studio.leftfield-entertainment.com
filewave.leftfield-entertainment.com
tomorrow-studio.leftfield-entertainment.com
sirensmedia.com
www.goodcaper.com
www.itv-creative.leftfield-entertainment.com
leftfield-entertainment.com
sirensmedia.com
tomorrow-studio.leftfield-entertainment.com
db.leftfield-entertainment.com
soundminer.leftfield-entertainment.com
mail.itvorbitprogram-us.com
www.goodcaper.leftfield-entertainment.com
itvamerica.co
mail.bigblack.org
goodcaper.com
www.goodcapercontent.leftfield-entertainment.com
itv-leftfield.com
tomorrow-studio.leftfield-entertainment.com
db.leftfield-entertainment.com
sirensmedia.com
leftfield-entertainment.com
goodcapercontent.leftfield-entertainment.com
webdisk.bigblack.org
sire.leftfield-entertainment.com
db.leftfield-entertainment.com
www.sirensmedia.com
leftfield-entertainment.com
www.itv-creative.com
www.itv-america.com
mail.itv-entertainment.com
goodcaper.com
www.itv-america.com
cpcontacts.itvorbitprogram-us.com
sire.leftfield-entertainment.com
www.itv-leftfield.leftfield-entertainment.com
itv-creative.com
mail.itv-lfe.com
itv-america.com
leftfield-entertainment.com
leftfieldrentals.leftfield-entertainment.com
autodiscover.itvleftfield.com
www.goodcapercontent.leftfield-entertainment.com
goodcapercontent.com
itv-creative.leftfield-entertainment.com
itv-ent.com
leftfieldrentals.com
mail.itv-entertainment.com
sire.leftfield-entertainment.com
leftfield-entertainment.com
webdb.leftfield-entertainment.com
www.goodcaper.com
Certificate
The complete raw certificate details for tomorrow-studio.leftfield-entertainment.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIoDCCB4igAwIBAgISBBRh5+9Al9yp2uIQI4PPiI4jMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAyMDUxMzA5NTFaFw0yMzA1MDYxMzA5NTBaMDYxNDAyBgNVBAMT K3RvbW9ycm93LXN0dWRpby5sZWZ0ZmllbGQtZW50ZXJ0YWlubWVudC5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jutyJag6FP5PdFXhNW7MzsTa kTHzw5q+L9TyIAtvhuHExO4+8AfhcbQfYu0YNMMSKfa9AQjj0FyzYrOV1g8mxr1r x0OhcKZ5LbXr9khsWNKsSgfS7b2ZXRwjQpbLVWtb0wO1vowW1y6xkdcZQ4bvelnx V8Cxfd7w5UbBW0OlxlMwlW/yotu806DImZQkUwEY4nEUmV19F7SqzhJ3Nb3n2COZ G2KZpLbiO0C/mstCVQH5Mew6Vt4rGpYIECkpPrQb6ACCllOvn9JM5ZTGpGGPT1lX 7eRhsIDuMitatSeuWVr3bUmNdrsaGO9gtmg6kr1ECnYbE+BT4p/ZAnuBovVjAgMB AAGjggWqMIIFpjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFM2k3O2XrFmJMB4UoOpJ x1NJhy6KMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIDeQYDVR0RBIIDcDCCA2yC D2l0di1hbWVyaWNhLmNvbYInaXR2LWFtZXJpY2EubGVmdGZpZWxkLWVudGVydGFp bm1lbnQuY29tghBpdHYtY3JlYXRpdmUuY29tgihpdHYtY3JlYXRpdmUubGVmdGZp ZWxkLWVudGVydGFpbm1lbnQuY29tgippdHZhbWVyaWNhLW5ldC5sZWZ0ZmllbGQt ZW50ZXJ0YWlubWVudC5jb22CDml0dmFtZXJpY2EubmV0gi9sZWZ0ZmllbGQtY3Jl YXRpdmUxLmxlZnRmaWVsZC1lbnRlcnRhaW5tZW50LmNvbYIUbGVmdGZpZWxkcmVu dGFscy5jb22CLGxlZnRmaWVsZHJlbnRhbHMubGVmdGZpZWxkLWVudGVydGFpbm1l bnQuY29tghNtYWlsLml0dmFtZXJpY2EubmV0ghltYWlsLmxlZnRmaWVsZHJlbnRh bHMuY29tgit0b21vcnJvdy1zdHVkaW8ubGVmdGZpZWxkLWVudGVydGFpbm1lbnQu Y29tgjJ0b21vcnJvd3N0dWRpb3NzdGFnaW5nLmxlZnRmaWVsZC1lbnRlcnRhaW5t ZW50LmNvbYITd3d3Lml0di1hbWVyaWNhLmNvbYIrd3d3Lml0di1hbWVyaWNhLmxl ZnRmaWVsZC1lbnRlcnRhaW5tZW50LmNvbYIUd3d3Lml0di1jcmVhdGl2ZS5jb22C LHd3dy5pdHYtY3JlYXRpdmUubGVmdGZpZWxkLWVudGVydGFpbm1lbnQuY29tgi53 d3cuaXR2YW1lcmljYS1uZXQubGVmdGZpZWxkLWVudGVydGFpbm1lbnQuY29tghJ3 d3cuaXR2YW1lcmljYS5uZXSCM3d3dy5sZWZ0ZmllbGQtY3JlYXRpdmUxLmxlZnRm aWVsZC1lbnRlcnRhaW5tZW50LmNvbYIYd3d3LmxlZnRmaWVsZHJlbnRhbHMuY29t gjB3d3cubGVmdGZpZWxkcmVudGFscy5sZWZ0ZmllbGQtZW50ZXJ0YWlubWVudC5j b22CL3d3dy50b21vcnJvdy1zdHVkaW8ubGVmdGZpZWxkLWVudGVydGFpbm1lbnQu Y29tgjZ3d3cudG9tb3Jyb3dzdHVkaW9zc3RhZ2luZy5sZWZ0ZmllbGQtZW50ZXJ0 YWlubWVudC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgor BgEEAdZ5AgQCBIH0BIHxAO8AdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpX o1LrUgAAAYYh6W7CAAAEAwBHMEUCIQC32GhvJbEd+jNgi/V2BtonbODbDw0LQx1v N8YWN9O38QIgHbRRVbzv3AuL36w7jQn+G/9y6F1ldh/uI6R5HTZqaIoAdQDoPtDa PvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYYh6W6jAAAEAwBGMEQCIDba hwbHTf91buARfu3N7XcNpdnSZEJUyIfa0SlhPMH+AiAB/YWxiVhJbueqH6r3dTU5 4TyYwA3t+BKnLmnUtChc4DANBgkqhkiG9w0BAQsFAAOCAQEAZyW0Lm4yDF3fqLnQ V3B7fEE/ym+8laZXLrBq+QS1rERy6ff8NA7h7pxOGrWA39ZCaSccoIUgFJQsWw4w aASa+sOdOKHEFismYTowE2uz3tjeoKnx/UxGB9AyfAzCiEpnEu7BF/lC/d6RwqqP emdilZoVW42Msn9SWG4gNjovmfu3CqGzxBbhRxETAiVKiZVBIj6Uj/yOzMYToFwJ 105pHVfuAi59X52Ex0QmgsSmh124OaGueWeCVyIjOpETMCD2B6VRtpAZXbYghNLO bmgMbBAmzaIh1H25W/bJaVbGYbB5Df28tmxasZPajd/LUMNwSxZww63zpD9VgE7M +ofnyw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv47rciWoOhT+T3RV4TVu zM7E2pEx88Oavi/U8iALb4bhxMTuPvAH4XG0H2LtGDTDEin2vQEI49Bcs2KzldYP Jsa9a8dDoXCmeS216/ZIbFjSrEoH0u29mV0cI0KWy1VrW9MDtb6MFtcusZHXGUOG 73pZ8VfAsX3e8OVGwVtDpcZTMJVv8qLbvNOgyJmUJFMBGOJxFJldfRe0qs4SdzW9 59gjmRtimaS24jtAv5rLQlUB+THsOlbeKxqWCBApKT60G+gAgpZTr5/STOWUxqRh j09ZV+3kYbCA7jIrWrUnrlla921JjXa7GhjvYLZoOpK9RAp2GxPgU+Kf2QJ7gaL1 YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 355384930454238710916560052613380955475491 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-05 13:09:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-06 13:09:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tomorrow-studio.leftfield-entertainment.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24181992584452029422456332855960014547922304224307433490842854001817361766871557538131648003893690962176692465362431307988593569103184367621910051648279104090505910602518900307492514589626598898708531322375133158684878809623157158162788494777030655706186308155320234314506996031563719598219134145352822074144114892181312372506075110408060959455385450125905662266730585506820950305002224426771569736704712419113612355206148442432256853199747539934148531850628111496119102763669356054396703539907371578321261750708701752741379617213527570805249890846863428961169013140256032982648286912534758072388639270329062193821027 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cda4dced97ac5989301e14a0ea49c75349872e8a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (880 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-america.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-america.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-creative.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-creative.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itvamerica-net.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itvamerica.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftfield-creative1.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftfieldrentals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftfieldrentals.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.itvamerica.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.leftfieldrentals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomorrow-studio.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomorrowstudiosstaging.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-america.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-america.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-creative.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-creative.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itvamerica-net.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itvamerica.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftfield-creative1.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftfieldrentals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftfieldrentals.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomorrow-studio.leftfield-entertainment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomorrowstudiosstaging.leftfield-entertainment.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018621e96ec20000040300473045022100b7d8686f25b11dfa33608bf57606da276ce0db0f0d0b431d6f37c61637d3b7f102201db45155bcefdc0b8bdfac3b8d09fe1bff72e85d65761fee23a4791d366a688a007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018621e96ea30000040300463044022036da8706c74dff756ee0117eedcded770da5d9d2644254c887dad129613cc1fe022001fd85b18958496ee7aa1faaf7753539e13c98c00dedf812a72e69d4b4285ce0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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