blog.streamspot.com
- CloudFlare, Inc. -
Issued by CloudFlare Inc Compatibility CA-3
About this certificate
This digital certificate with serial number 05:1b:74:c3:77:98:95:5f:c6:2d:7f:ef:62:09:63:38 was issued on by CloudFlare, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs MUST NOT issue any new Subscriber certificates or Subordinate CA certificates using SHA-1 after 1 January 2016 (BRs: 7.1.3)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)
CloudFlare, Inc.
Organization:
CloudFlare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
CloudFlare, Inc.
Organization:
CloudFlare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:1b:74:c3:77:98:95:5f:c6:2d:7f:ef:62:09:63:38Serial Number (int): 6788700240123911878452699376439092024
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ef:80:5f:de:3d:d9:69:fc:c2:83:f5:6f:a5:1b:3d:3d:1d:e4:e4:ae
AuthorityKeyId: 97:49:c5:f6:84:14:73:df:73:ba:cc:a9:66:ba:f9:a6:3c:59:c6:ae
Fingerprint (sha1): aa:ba:98:32:81:a5:78:f0:d5:d8:ad:3a:11:de:1f:e2:8e:a0:31:8e
Fingerprint (sha256): 4c:a5:f1:4f:9c:a3:e9:d9:8c:48:5f:b7:ea:fa:0d:3d:3e:7d:3f:40:8f:6c:67:5d:e7:63:2e:ae:16:9a:21:2a
Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl
Check the revocation status for certificate blog.streamspot.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.streamspot.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.streamspot.com
Other certificates including the domain name streamspot.com
(limited to 100 certificates)
streamspot.com
streamspot.com
portal.streamspot.com
live.streamspot.com
info.streamspot.com
blog.streamspot.com
dvd.streamspot.com
live.streamspot.com
info.streamspot.com
info.streamspot.com
core.stage.subsplash.net
blog.streamspot.com
blog.streamspot.com
info.streamspot.com
blog.streamspot.com
streamspot.com
blog.streamspot.com
info.streamspot.com
dvd.streamspot.com
playback.streamspot.com
*.streamspot.com
info.streamspot.com
status2.streamspot.com
mystreamspot.com
*.streamspot.com
*.streamspot.com
blog.streamspot.com
info.streamspot.com
live.streamspot.com
streamspot.com
info.streamspot.com
blog.streamspot.com
*.streamspot.com
streamspot.com
info.streamspot.com
blog.streamspot.com
*.streamspot.com
*.streamspot.com
blog.streamspot.com
streamspot.com
portal.streamspot.com
live.streamspot.com
info.streamspot.com
blog.streamspot.com
dvd.streamspot.com
live.streamspot.com
info.streamspot.com
info.streamspot.com
core.stage.subsplash.net
blog.streamspot.com
blog.streamspot.com
info.streamspot.com
blog.streamspot.com
streamspot.com
blog.streamspot.com
info.streamspot.com
dvd.streamspot.com
playback.streamspot.com
*.streamspot.com
info.streamspot.com
status2.streamspot.com
mystreamspot.com
*.streamspot.com
*.streamspot.com
blog.streamspot.com
info.streamspot.com
live.streamspot.com
streamspot.com
info.streamspot.com
blog.streamspot.com
*.streamspot.com
streamspot.com
info.streamspot.com
blog.streamspot.com
*.streamspot.com
*.streamspot.com
blog.streamspot.com
Certificate
The complete raw certificate details for blog.streamspot.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIQBRt0w3eYlV/GLX/vYgljODANBgkqhkiG9w0BAQUFADB5 MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lz Y28xGTAXBgNVBAoTEENsb3VkRmxhcmUsIEluYy4xKjAoBgNVBAMTIUNsb3VkRmxh cmUgSW5jIENvbXBhdGliaWxpdHkgQ0EtMzAeFw0xNzEwMTgwMDAwMDBaFw0xODA4 MTAxMjAwMDBaMGsxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJDQTEWMBQGA1UEBxMN U2FuIEZyYW5jaXNjbzEZMBcGA1UEChMQQ2xvdWRGbGFyZSwgSW5jLjEcMBoGA1UE AxMTYmxvZy5zdHJlYW1zcG90LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALwSbFO4ud2DtYuMLPD0LIWcloJvm6W7a9d3p6cDosMUpzjWSN+pxmav E/qxDYhvieWVNtn1Fj93DZKpyC9z+QVbKT55Hv6eOTKP/EaJmW5SznqJ+U5FpJqd aGtNW0Ccb6iXB8rfZOfzNoG9GHHc5D6vBQcwVCPNOmSuh7X4dRHzf3IKwh2UlhEI fetmhrYYSbdxrkZOMmx1Shs/khrLBuPE20tdySFeGoOnbLEIAFF04LTEUIgXbigX 7YZfciyqpPuLyLYfmWvj94yTAmY5QHZkiJGURLwWJIF8rwjZ5e7fYdg7sVAL/CMe NvPjU3+IbIq0q4nX7gDUgT1/z/ZVToMCAwEAAaOCAfowggH2MB8GA1UdIwQYMBaA FJdJxfaEFHPfc7rMqWa6+aY8WcauMB0GA1UdDgQWBBTvgF/ePdlp/MKD9W+lGz09 HeTkrjAeBgNVHREEFzAVghNibG9nLnN0cmVhbXNwb3QuY29tMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCB hDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Nsb3VkRmxhcmVJbmND b21wYXRpYmlsaXR5Q0EzLmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQu Y29tL0Nsb3VkRmxhcmVJbmNDb21wYXRpYmlsaXR5Q0EzLmNybDBCBgNVHSAEOzA5 MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2Vy dC5jb20vQ1BTMIGABggrBgEFBQcBAQR0MHIwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmRpZ2ljZXJ0LmNvbTBKBggrBgEFBQcwAoY+aHR0cDovL2NhY2VydHMuZGln aWNlcnQuY29tL0Nsb3VkRmxhcmVJbmNDb21wYXRpYmlsaXR5Q0EtMy5jcnQwDAYD VR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEARXloGjImMlGJ4wAJ9WTMQzed zqGO7NmIrQVgyp8dqq3aYtQfMqOxTIQvl4Ipm4FGoTGD8vhe3ZZ3tlWbyr/NdyjG ZxUSTaq2JCYVLjUYQnxcbsYpCk5IApYINyEEibTfYLWkKDnUr3V/Qg1ulye1KQw8 lw6XNKVvPSzBf9kFu12DqPk1+S5rOFm4pe+G0MMHsZ3W+qgD4zneMHSY9paRF3Cd auObLQC6Y8mZnQwwYL8RlMamwNMna7mqzsXCNKIHVXgcMbAIi+m8xx+oZ8KRquO5 MwdCc66JttRGv5cYf86oQxq4Q9ZWoIZ6YZRdkaf5n9pf1/4ZfrsbUCP8OwPdPA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBJsU7i53YO1i4ws8PQs hZyWgm+bpbtr13enpwOiwxSnONZI36nGZq8T+rENiG+J5ZU22fUWP3cNkqnIL3P5 BVspPnke/p45Mo/8RomZblLOeon5TkWkmp1oa01bQJxvqJcHyt9k5/M2gb0Ycdzk Pq8FBzBUI806ZK6Htfh1EfN/cgrCHZSWEQh962aGthhJt3GuRk4ybHVKGz+SGssG 48TbS13JIV4ag6dssQgAUXTgtMRQiBduKBfthl9yLKqk+4vIth+Za+P3jJMCZjlA dmSIkZREvBYkgXyvCNnl7t9h2DuxUAv8Ix428+NTf4hsirSridfuANSBPX/P9lVO gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6788700240123911878452699376439092024 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc Compatibility CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.streamspot.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23741886128706800653083975183732135503509504869795752776291903232685238688747803040536674774059578795255868578919319915380914398660952099908478864367509191913674160386717201147152740297125293846995593022066296060792771973161022376063879249694188353861393481984216237863753444020420339934397816238619985915393334952659810661975537256460312609887347429453354060490617228164117187396991381558625115293561742441125628848909820894103627946561386301989675037444331742856737498470749439126669959302248460688558785949648284654007915083905740248971981928388437805908990999443771029611815261446467455978223882425135912543669891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9749c5f6841473df73bacca966baf9a63c59c6ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ef805fde3dd969fcc283f56fa51b3d3d1de4e4ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.streamspot.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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