tampa.cbslocal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:d9:4a:d0:55:a3:36:99:96:aa:6d:d7:12:6c:9a:3a:cb was issued on by Let's Encrypt.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tampa.cbslocal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:d9:4a:d0:55:a3:36:99:96:aa:6d:d7:12:6c:9a:3a:cb
Serial Number (int): 317772279267814548170149565633651206142667
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:34:f2:17:8f:42:9c:f3:90:d9:8c:b7:5f:0f:db:27:54:a9:25:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:e7:f4:9b:28:b3:21:26:fc:66:22:d6:99:e7:34:13:83:cf:ef:bb
Fingerprint (sha256): 2f:27:e7:33:d3:64:ee:5f:c9:68:b1:9b:08:96:11:3e:6a:24:c5:19:c3:6f:f9:35:65:06:8f:16:25:0c:14:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tampa.cbslocal.com

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tampa.cbslocal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adtest.cbslocal.com
atlanta.cbslocal.com
baltimore.cbslocal.com
boston.cbslocal.com
cbslocal.com
chicago.cbslocal.com
cleveland.cbslocal.com
connecticut.cbslocal.com
cwatlanta.cbslocal.com
cwbayarea.cbslocal.com
cwdetroit.cbslocal.com
cwphilly.cbslocal.com
cwpittsburgh.cbslocal.com
cwsacramento.cbslocal.com
cwsanfrancisco.cbslocal.com
cwseattle.cbslocal.com
cwtampa.cbslocal.com
dallasbracketchallenge.cbslocal.com
denver.cbslocal.com
detroit.cbslocal.com
dfw.cbslocal.com
gooddaysacramento.cbslocal.com
hartford.cbslocal.com
hazard.cbslocal.com
houston.cbslocal.com
lasvegas.cbslocal.com
losangeles.cbslocal.com
miami.cbslocal.com
minnesota.cbslocal.com
newyork.cbslocal.com
now.preprod.cbslocal.com
philadelphia.cbslocal.com
pittsburgh.cbslocal.com
preprod.cbslocal.com
sacramento.cbslocal.com
sanfrancisco.cbslocal.com
seattle.cbslocal.com
smallbusinesscenter.cbslocal.com
sports.cbslocal.com
staging.cbslocal.com
stlouis.cbslocal.com
tampa.cbslocal.com
washington.cbslocal.com
www.cbslocal.com

Other certificates including the domain name cbslocal.com

(limited to 100 certificates)
kezk.cbslocal.com
cbslocal.com
enewsadmin.cbslocal.com
viacomcbs.com
offers.cbslocal.com
br.bikeradar.com
sacramento.cbslocal.com
device-feeds.cbslocal.com
enewsscrape.cbslocal.com
mobileapi.cbslocal.com
br.bikeradar.com
jira.cbslocal.com
detroit.cbslocal.com
newyork.cbslocal.com
*.cbslocal.com
cleveland.cbslocal.com
dfw.cbslocal.com
connecticut.cbslocal.com
cwtampa.cbslocal.com
preprod.mobileapi.cbslocal.com
cwatlanta.cbslocal.com
viacomcbs.com
chicago.cbslocal.com
*.cbslocal.com
dfw.cbslocal.com
enewsadmin.cbslocal.com
tampa.cbslocal.com
br.bikeradar.com
www.gfrealfood.com
viacomcbs.com
wsivideofeed.cbslocal.com
937thefan.cbslocal.com
*.cbslocal.com
offers.cbslocal.com
*.cbslocal.com
jira.cbslocal.com
atlanta.cbslocal.com
cwseattle.cbslocal.com
dallas.cbslocal.com
enewsscrape.cbslocal.com
cwsanfrancisco.cbslocal.com
br.bikeradar.com
miami.cbslocal.com
mms.cbslocal.com
device-feeds.cbslocal.com
enewsscrape.cbslocal.com
br.bikeradar.com
br.bikeradar.com
enewsscrape.cbslocal.com
*.cbslocal.com
*.cbslocal.com
enewsadmin.cbslocal.com
tampa.cbslocal.com
enewsscrape.cbslocal.com
device-feeds.cbslocal.com
*.cbslocal.com
tls.automattic.com
cwdetroit.cbslocal.com
viacomcbs.com
cwdetroit.cbslocal.com
echo-feeds.cbslocal.com
viacomcbs.com
tampa.cbslocal.com
mms.cbslocal.com
stlouis.cbslocal.com
mms.cbslocal.com
my.cbslocal.com
br.bikeradar.com
viacomcbs.com
gooddaysacramento.cbslocal.com
tampa.cbslocal.com
br.bikeradar.com
viacomcbs.com
tampa.cbslocal.com
preprod.yourday.cbslocal.com
tampa.cbslocal.com
br.bikeradar.com
br.bikeradar.com
admin.groupcommerce.com
stlouis.cbslocal.com
*.cbslocal.com
cbslocal.com
philadelphia.cbslocal.com
br.bikeradar.com
device-feeds.cbslocal.com
lasvegas.cbslocal.com
cdn.audioadcenter.com
cwatlanta.cbslocal.com
mms.cbslocal.com
cwsacramento.cbslocal.com
preprod.cbslocal.com
br.bikeradar.com
device-feeds.cbslocal.com
viacomcbs.com
device-feeds.cbslocal.com
dfw.cbslocal.com
washington.cbslocal.com
denver.cbslocal.com
*.cbslocal.com
mobileapi.cbslocal.com

Certificate

The complete raw certificate details for tampa.cbslocal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJYjCCCEqgAwIBAgISA6XZStBVozaZlqpt1xJsmjrLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjIwNjMzMjNaFw0y
MDAxMjAwNjMzMjNaMB0xGzAZBgNVBAMTEnRhbXBhLmNic2xvY2FsLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJQkhrHtHvBji2WGZ58DlSOk1Hm
5VaVjVfbpKPoVRJDArAfM5FjkH+Gui0kzM7ytiRFMW3riZ2dgCQvJeINKvV8itSs
41AFYOIfWUr1JEDtnLiSkWJxrOAMJl5cOP8vxOIzNdbdjHX7poab6DgVcaw1OBHS
oSserJBrYSBpsrUQYWDau3sFqbJoOG6oJcLWJ3E4pY5rHZgvIhb0Lb/D77c5Pw4q
dvCuSJ6v6PmHrzCOpGQ/+kPMy/cRhhCakhaQ8/6jYTwn9O88VsoVY73mMdKGQDPF
zhrQhHd2wjmB+GMYqBzXg7Y2mNw5AToYGsbOGeXn+Pwx7iLXcpnx8tiRfhkCAwEA
AaOCBm0wggZpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUYDTyF49CnPOQ2Yy3Xw/b
J1SpJY4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBCEGA1UdEQSCBBgwggQUghNhZHRlc3QuY2JzbG9jYWwuY29tghRh
dGxhbnRhLmNic2xvY2FsLmNvbYIWYmFsdGltb3JlLmNic2xvY2FsLmNvbYITYm9z
dG9uLmNic2xvY2FsLmNvbYIMY2JzbG9jYWwuY29tghRjaGljYWdvLmNic2xvY2Fs
LmNvbYIWY2xldmVsYW5kLmNic2xvY2FsLmNvbYIYY29ubmVjdGljdXQuY2JzbG9j
YWwuY29tghZjd2F0bGFudGEuY2JzbG9jYWwuY29tghZjd2JheWFyZWEuY2JzbG9j
YWwuY29tghZjd2RldHJvaXQuY2JzbG9jYWwuY29tghVjd3BoaWxseS5jYnNsb2Nh
bC5jb22CGWN3cGl0dHNidXJnaC5jYnNsb2NhbC5jb22CGWN3c2FjcmFtZW50by5j
YnNsb2NhbC5jb22CG2N3c2FuZnJhbmNpc2NvLmNic2xvY2FsLmNvbYIWY3dzZWF0
dGxlLmNic2xvY2FsLmNvbYIUY3d0YW1wYS5jYnNsb2NhbC5jb22CI2RhbGxhc2Jy
YWNrZXRjaGFsbGVuZ2UuY2JzbG9jYWwuY29tghNkZW52ZXIuY2JzbG9jYWwuY29t
ghRkZXRyb2l0LmNic2xvY2FsLmNvbYIQZGZ3LmNic2xvY2FsLmNvbYIeZ29vZGRh
eXNhY3JhbWVudG8uY2JzbG9jYWwuY29tghVoYXJ0Zm9yZC5jYnNsb2NhbC5jb22C
E2hhemFyZC5jYnNsb2NhbC5jb22CFGhvdXN0b24uY2JzbG9jYWwuY29tghVsYXN2
ZWdhcy5jYnNsb2NhbC5jb22CF2xvc2FuZ2VsZXMuY2JzbG9jYWwuY29tghJtaWFt
aS5jYnNsb2NhbC5jb22CFm1pbm5lc290YS5jYnNsb2NhbC5jb22CFG5ld3lvcmsu
Y2JzbG9jYWwuY29tghhub3cucHJlcHJvZC5jYnNsb2NhbC5jb22CGXBoaWxhZGVs
cGhpYS5jYnNsb2NhbC5jb22CF3BpdHRzYnVyZ2guY2JzbG9jYWwuY29tghRwcmVw
cm9kLmNic2xvY2FsLmNvbYIXc2FjcmFtZW50by5jYnNsb2NhbC5jb22CGXNhbmZy
YW5jaXNjby5jYnNsb2NhbC5jb22CFHNlYXR0bGUuY2JzbG9jYWwuY29tgiBzbWFs
bGJ1c2luZXNzY2VudGVyLmNic2xvY2FsLmNvbYITc3BvcnRzLmNic2xvY2FsLmNv
bYIUc3RhZ2luZy5jYnNsb2NhbC5jb22CFHN0bG91aXMuY2JzbG9jYWwuY29tghJ0
YW1wYS5jYnNsb2NhbC5jb22CF3dhc2hpbmd0b24uY2JzbG9jYWwuY29tghB3d3cu
Y2JzbG9jYWwuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1
loFxRVgAAAFt8mJ8WQAABAMARzBFAiB+2y8+UncT35lW+Roe35wO/uOUSLWGpxSM
ZEgQ6eBFewIhAJU1dcQQChJHxWhPNrOay9lDGGjA2W3Agc4xH6NHC/3qAHYAsh4F
zIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFt8mJ8XQAABAMARzBFAiBm
r6ZqEwiYozK9hnTgoC1py1QKk3Mfj9hIkrykz0SK/AIhAJLVC4OExR16G2l9Rl+N
IItb5B3oonMJXM6nl76coBCRMA0GCSqGSIb3DQEBCwUAA4IBAQApe+TFfc4JUq3q
uo9KvwiJJ6AA3hPPQQ8Ziz3AMpv9OnFjkQ/3bswfrdLG0YoR70o6TbF5TzN2cPyL
7eRoH+uJb+BEO25V5cG2cc8EplAhJTwEZpVjbN5Pq/O+TuDOAWZAdUpcEoyu8t0E
3g3ciakhPLLr9yVYJUoal+28tc8M2JrF8XzPxPGK+6SHjl4Irku8/+m0zATOTOcV
dkF9AfQAdwRWuxOm/yG3pbh+pOaU3war/Mx1bL3vlQ8CoNNwa1k0xRoJU75FJ3a5
sbTNsCoYAkNWKgNRgu3rmycnu5cgGeFRLF9UwxwxDeWHoL0fv2R7FbkGb1By10yk
0nV1B4sp
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlCSGse0e8GOLZYZnnwO
VI6TUeblVpWNV9uko+hVEkMCsB8zkWOQf4a6LSTMzvK2JEUxbeuJnZ2AJC8l4g0q
9XyK1KzjUAVg4h9ZSvUkQO2cuJKRYnGs4AwmXlw4/y/E4jM11t2MdfumhpvoOBVx
rDU4EdKhKx6skGthIGmytRBhYNq7ewWpsmg4bqglwtYncTiljmsdmC8iFvQtv8Pv
tzk/Dip28K5Inq/o+YevMI6kZD/6Q8zL9xGGEJqSFpDz/qNhPCf07zxWyhVjveYx
0oZAM8XOGtCEd3bCOYH4YxioHNeDtjaY3DkBOhgaxs4Z5ef4/DHuItdymfHy2JF+
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317772279267814548170149565633651206142667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 06:33:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 06:33:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tampa.cbslocal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24529962066796541704190414000461630612614789817244358679842080099999120760071581598680071828369863226421679686296823267088592638544290345499143119766064301814306483038845376952708471878049960753073108643846573914025231969073853505537432085784498057260316414765105447731713785390361796930824586761705451487529981965556269438658688798340138848777134335266926773576671369808819081367787779524125578918143220482719411259184585773251121043230001929540051671701261845408062322173342768408876004168270955470005895582534948907375379698517968237049675509100474636845659044843002131700754900941961826109738427619580095774162457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6034f2178f429cf390d98cb75f0fdb2754a9258e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1048 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtest.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltimore.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boston.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleveland.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticut.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwatlanta.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwbayarea.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwdetroit.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwphilly.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwpittsburgh.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwsacramento.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwsanfrancisco.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwseattle.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwtampa.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasbracketchallenge.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detroit.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfw.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gooddaysacramento.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartford.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazard.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houston.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegas.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangeles.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miami.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesota.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyork.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.preprod.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philadelphia.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittsburgh.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacramento.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfrancisco.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattle.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallbusinesscenter.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sports.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouis.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tampa.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbslocal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016df2627c59000004030047304502207edb2f3e527713df9956f91a1edf9c0efee39448b586a7148c644810e9e0457b022100953575c4100a1247c5684f36b39acbd9431868c0d96dc081ce311fa3470bfdea007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016df2627c5d0000040300473045022066afa66a130898a332bd8674e0a02d69cb540a93731f8fd84892bca4cf448afc02210092d50b8384c51d7a1b697d465f8d208b5be41de8a273095ccea797be9ca01091
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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