sli.ziffdavis.com
Issued by R3
About this certificate
This digital certificate with serial number 03:8e:be:d8:76:48:93:02:64:54:59:fd:4c:a0:88:21:1d:da was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sli.ziffdavis.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8e:be:d8:76:48:93:02:64:54:59:fd:4c:a0:88:21:1d:daSerial Number (int): 309910631152448837410302557190888127274458
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: df:72:ed:b0:d9:8f:88:98:ef:83:c3:b2:a1:b8:e1:53:dc:0d:24:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ea:86:29:29:29:fe:68:99:da:82:7f:05:97:0d:89:d0:d4:15:8e:bc
Fingerprint (sha256): 46:74:75:27:28:57:12:09:e4:f3:de:96:c8:c0:12:8a:ca:11:ac:4d:76:78:6f:53:fc:f6:a3:d7:58:be:27:98
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sli.ziffdavis.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sli.ziffdavis.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sli.askmen.com
sli.blackfriday.com
sli.ign.com
sli.mashable.com
sli.offers.com
sli.pcmag.com
sli.techbargains.com
sli.ziffdavis.com
sli.blackfriday.com
sli.ign.com
sli.mashable.com
sli.offers.com
sli.pcmag.com
sli.techbargains.com
sli.ziffdavis.com
Other certificates including the domain name ziffdavis.com
(limited to 100 certificates)
ziffdavis.com
ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
*.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
vpneast.ziffdavis.com
*.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
*.ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
dev.signals.ziffdavis.com
*.ziffdavis.com
vpn-eu.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
vpneast.ziffdavis.com
ziffdavis.com
webmail.ziffdavis.com
sli.ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
*.ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
team.ziffdavis.com
*.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
shoppinginsights.ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
ziffdavis.com
*.ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
webmail.ziffdavis.com
ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
*.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
vpneast.ziffdavis.com
*.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
*.ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
dev.signals.ziffdavis.com
*.ziffdavis.com
vpn-eu.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
vpneast.ziffdavis.com
ziffdavis.com
webmail.ziffdavis.com
sli.ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
*.ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
ziffdavis.com
team.ziffdavis.com
*.ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
vpn-eu.ziffdavis.com
ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
shoppinginsights.ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
sli.ziffdavis.com
ziffdavis.com
ziffdavis.com
*.ziffdavis.com
vpn-usw1.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
ziffdavis.com
ziffdavis.com
sli.ziffdavis.com
www.ziffdavis.com
ziffdavis.com
www.ziffdavis.com
www.ziffdavis.com
webmail.ziffdavis.com
Certificate
The complete raw certificate details for sli.ziffdavis.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEsTCCA5mgAwIBAgISA46+2HZIkwJkVFn9TKCIIR3aMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAzMjgxMzI3NDdaFw0yMzA2MjYxMzI3NDZaMBwxGjAYBgNVBAMT EXNsaS56aWZmZGF2aXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKHw3VwGnbm7ZcIzZXI9NyQHwwGpqzjHnnwtfslqWWt0OlvB4Ics8kiURLI/ DM3KAHRadaJAbCFEGT2s4Q0UW/foW/tGaAXHY2BzMxkczyhz0hNZSzLOSx/WmJJb U+aEweZW06cfnHUMhkd2BVbAFw3oa0Lf/XmsRUpJduUdORBd6S6El8RdgGS38AMV 5QLQT9PRI74AA8l6LAWmwTyLeo4o4YQoEmilr6W4R9WZ9Lw3pCqOwj0pU0tGEUSE Rh0th02krRjN1sdFuIP3Rn9EGZlAlx9cLdE50U2xGI6eRRhnJlO9BN9xG15+tYNZ bY7AXyHAay3v4uJjmQqOk6QxdwIDAQABo4IB1TCCAdEwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBTfcu2w2Y+ImO+Dw7KhuOFT3A0k9jAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCBlwYDVR0RBIGPMIGMgg5zbGkuYXNrbWVuLmNvbYITc2xpLmJsYWNrZnJp ZGF5LmNvbYILc2xpLmlnbi5jb22CEHNsaS5tYXNoYWJsZS5jb22CDnNsaS5vZmZl cnMuY29tgg1zbGkucGNtYWcuY29tghRzbGkudGVjaGJhcmdhaW5zLmNvbYIRc2xp LnppZmZkYXZpcy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYK KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAFuYNMZXC7NhLm6U uOcr0DAseU7rXX4XFdGX7J+zEEbWKVSORL+SOM0w3XpHTjUgfcqrIxlGwJd7t3cR f89R22QGVNurg1DJmqP4RePzelQudpGEJPtwpTacJ/Leq/UY4KgW+ZyJZKmmx7ID bi3h71Zg/RNx4uMlOT4gh+Yom8yEUEVPImx+F6ZuBsqRwrQwDTOa6JZgdkErraDs k/wRq/65iCNL7ToZ2zZmEMoGx1ST2vSXWJ7Onj7aZhraXDFajOu0b7FE8FNv1gff YdXv2q3tmxCEHd5Bss05jJk8afmOdRlMcZgM+XGv0VO32XBduwgheZnHg8PYHW2o cvq75wg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKHw3VwGnbm7ZcIzZXI9 NyQHwwGpqzjHnnwtfslqWWt0OlvB4Ics8kiURLI/DM3KAHRadaJAbCFEGT2s4Q0U W/foW/tGaAXHY2BzMxkczyhz0hNZSzLOSx/WmJJbU+aEweZW06cfnHUMhkd2BVbA Fw3oa0Lf/XmsRUpJduUdORBd6S6El8RdgGS38AMV5QLQT9PRI74AA8l6LAWmwTyL eo4o4YQoEmilr6W4R9WZ9Lw3pCqOwj0pU0tGEUSERh0th02krRjN1sdFuIP3Rn9E GZlAlx9cLdE50U2xGI6eRRhnJlO9BN9xG15+tYNZbY7AXyHAay3v4uJjmQqOk6Qx dwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 309910631152448837410302557190888127274458 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-28 13:27:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 13:27:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sli.ziffdavis.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24822563796405028337780941854025002709654237011476640087281294378736245974045040039468126985851803382875424139895282349656972845528229345632764784880447542710042362265727544899367308202757523378601319420974216499846582019415003042541267048183013895762742154360167911624464970626948162046057212640003330171830020658656521992268374260351723361231296840773254474561005533206841198689365548747033876773395971577341164224137940374820888211685890478539638974997607999252854885496098101287132450172981999955652964167624393643127084841100080008933738549425956272731518420339335067671865071609713027411703582822715818116395383 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) df72edb0d98f8898ef83c3b2a1b8e153dc0d24f6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.askmen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.blackfriday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.ign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.mashable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.offers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.pcmag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.techbargains.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sli.ziffdavis.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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