www.itv-creative.com

Issued by R3

About this certificate

This digital certificate with serial number 03:77:bd:a5:06:e0:59:a8:ff:78:29:a9:28:c5:bb:06:23:dc was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.itv-creative.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:bd:a5:06:e0:59:a8:ff:78:29:a9:28:c5:bb:06:23:dc
Serial Number (int): 302082540418526738935487897387781924987868
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:76:35:49:a5:0c:c8:db:18:ec:55:14:e4:55:ce:48:cf:69:61:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:23:fb:d9:0e:25:df:9a:bd:e5:34:1c:39:19:f5:e5:ba:31:ce:76
Fingerprint (sha256): 97:7a:f5:fb:c7:30:52:c3:1e:99:69:fb:70:e3:e6:ed:b0:f1:e7:01:89:c9:0f:11:30:fc:72:76:83:e4:76:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.itv-creative.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.itv-creative.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itv-america.com
itv-america.leftfield-entertainment.com
itv-creative.com
itv-creative.leftfield-entertainment.com
itv-leftfield.com
itv-leftfield.leftfield-entertainment.com
mail.itv-leftfield.com
tomorrow-studio.leftfield-entertainment.com
tomorrowstudiosstaging.leftfield-entertainment.com
www.itv-america.com
www.itv-america.leftfield-entertainment.com
www.itv-creative.com
www.itv-creative.leftfield-entertainment.com
www.itv-leftfield.com
www.itv-leftfield.leftfield-entertainment.com
www.tomorrow-studio.leftfield-entertainment.com
www.tomorrowstudiosstaging.leftfield-entertainment.com

Other certificates including the domain name itv-creative.com

(limited to 100 certificates)
*.itv-creative.com
www.itv-creative.com
tomorrow-studio.leftfield-entertainment.com
itv-creative.com
www.itv-creative.leftfield-entertainment.com
itv-creative.com
itv-creative.com
itv-creative.com
www.itv-creative.com
itv-creative.com
itv-creative.com
itv-creative.leftfield-entertainment.com

Certificate

The complete raw certificate details for www.itv-creative.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHgDCCBmigAwIBAgISA3e9pQbgWaj/eCmpKMW7BiPcMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjEyMDYxMzA4MTlaFw0yMzAzMDYxMzA4MThaMB8xHTAbBgNVBAMT
FHd3dy5pdHYtY3JlYXRpdmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuAde5ks1/4Jgl2ZGH9NmMu2PTwjvh4P9CNgSljUcCbVBTRsiQslDDEQD
Og0z24jtdnADY/EmKmbeNTi8TS+Vh/ipdptg9x04ACsHFsPODiaZ7kwQNHheoDSG
qXmo8Ief09Ssyj3GtQozdXDQBKcm0wKOl0GTHpT/aLDcxADvz4Q2tPGlk4NHkkX1
LPkfolNHv+dn5LFBxJxJNDzm0kte/Vm4pSooML8XT6CKMJhWXvoq7dD6By4eGrnn
DKQADrKWxHvn0Ua/EFcdVP0SucldZSjKKf8IU1fVg11BfTv+FqQVKU5NZk4QU8Jv
oqNxGr8OnqKjUEOcefnx+3tmDD0dSQIDAQABo4IEoTCCBJ0wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBT9djVJpQzI2xjsVRTkVc5Iz2lhcjAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCAm8GA1UdEQSCAmYwggJigg9pdHYtYW1lcmljYS5jb22CJ2l0di1h
bWVyaWNhLmxlZnRmaWVsZC1lbnRlcnRhaW5tZW50LmNvbYIQaXR2LWNyZWF0aXZl
LmNvbYIoaXR2LWNyZWF0aXZlLmxlZnRmaWVsZC1lbnRlcnRhaW5tZW50LmNvbYIR
aXR2LWxlZnRmaWVsZC5jb22CKWl0di1sZWZ0ZmllbGQubGVmdGZpZWxkLWVudGVy
dGFpbm1lbnQuY29tghZtYWlsLml0di1sZWZ0ZmllbGQuY29tgit0b21vcnJvdy1z
dHVkaW8ubGVmdGZpZWxkLWVudGVydGFpbm1lbnQuY29tgjJ0b21vcnJvd3N0dWRp
b3NzdGFnaW5nLmxlZnRmaWVsZC1lbnRlcnRhaW5tZW50LmNvbYITd3d3Lml0di1h
bWVyaWNhLmNvbYIrd3d3Lml0di1hbWVyaWNhLmxlZnRmaWVsZC1lbnRlcnRhaW5t
ZW50LmNvbYIUd3d3Lml0di1jcmVhdGl2ZS5jb22CLHd3dy5pdHYtY3JlYXRpdmUu
bGVmdGZpZWxkLWVudGVydGFpbm1lbnQuY29tghV3d3cuaXR2LWxlZnRmaWVsZC5j
b22CLXd3dy5pdHYtbGVmdGZpZWxkLmxlZnRmaWVsZC1lbnRlcnRhaW5tZW50LmNv
bYIvd3d3LnRvbW9ycm93LXN0dWRpby5sZWZ0ZmllbGQtZW50ZXJ0YWlubWVudC5j
b22CNnd3dy50b21vcnJvd3N0dWRpb3NzdGFnaW5nLmxlZnRmaWVsZC1lbnRlcnRh
aW5tZW50LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlej
UutSAAABhOfEGqUAAAQDAEcwRQIhAJFYPTo8c8c4pTfKUiigalZ24gDP/Et74XWv
e28WRPOaAiBPXoPQOcosb///BU3mJ4FOckUO8oCSlPSzLsMSKIrWTgB2ALc++yTf
nE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhOfEHIMAAAQDAEcwRQIgdGYB
5QhNh0g+GDyFsbuH+p0ZhCotMbbk4SCt6l5WKYgCIQDAW/fWXD/MUPLhZ+27M6lv
BCnADRnXFAodm+OZX6uIajANBgkqhkiG9w0BAQsFAAOCAQEAD47LNRjxDp89q6u+
80lO2J+TEnsvotY91DzLBQ3kpDVcKWpzdiRJ0s4DrybgghIs+r7jssLNJ+uRhiFp
NzWFbD64AG1YNv8LSAfpWDfccse0nsZ0iCt7i2nXb1nDC6PegUhophLmdv6b8dI6
7zGsB/hEuh7Xz2b1pTo4RVapQIWpQVlbILZCRjSZDl4IDbGDOOcuW3c/IOmCkBew
uITBrENh2tJ9sgXifdG34VM0g+q+pwv1bZ2S5c6nY2lG9UGKLCFhA9OwqZVXswNN
55QWD/gtjdamzHwlC4QmhPzgD5N+dXQ3NTZXrXQdj41wmEy0+BtmHinjxNMDUHRf
CVOqtw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAde5ks1/4Jgl2ZGH9Nm
Mu2PTwjvh4P9CNgSljUcCbVBTRsiQslDDEQDOg0z24jtdnADY/EmKmbeNTi8TS+V
h/ipdptg9x04ACsHFsPODiaZ7kwQNHheoDSGqXmo8Ief09Ssyj3GtQozdXDQBKcm
0wKOl0GTHpT/aLDcxADvz4Q2tPGlk4NHkkX1LPkfolNHv+dn5LFBxJxJNDzm0kte
/Vm4pSooML8XT6CKMJhWXvoq7dD6By4eGrnnDKQADrKWxHvn0Ua/EFcdVP0Sucld
ZSjKKf8IU1fVg11BfTv+FqQVKU5NZk4QU8JvoqNxGr8OnqKjUEOcefnx+3tmDD0d
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302082540418526738935487897387781924987868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 13:08:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-06 13:08:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.itv-creative.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23231482742131063385460081183977889156861233643827746436576174129790126466361290538952805200394575075313580505453753484363967276360004153970427548655574113023501118386801949218144598618193323510704511316745918767387918003621403817182156935643917809221325064666254608833484252999883186972787315339670415450563146685554520132509881149649429736795995434146144054639985587000517961678218923139193042888214210710389065449041843293570488937447206260599791293870013843070820371380944469121630085480746164102125416024279775416287030063738044432711844232012651484271346269529670100713735885021767769896374587593401210685431113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd763549a50cc8db18ec5514e455ce48cf696172
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-america.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-creative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-creative.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-leftfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itv-leftfield.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.itv-leftfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomorrow-studio.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomorrowstudiosstaging.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-america.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-creative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-creative.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-leftfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itv-leftfield.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomorrow-studio.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tomorrowstudiosstaging.leftfield-entertainment.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184e7c41aa5000004030047304502210091583d3a3c73c738a537ca5228a06a5676e200cffc4b7be175af7b6f1644f39a02204f5e83d039ca2c6fffff054de627814e72450ef2809294f4b32ec312288ad64e007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184e7c41c8300000403004730450220746601e5084d87483e183c85b1bb87fa9d19842a2d31b6e4e120adea5e562988022100c05bf7d65c3fcc50f2e167edbb33a96f0429c00d19d7140a1d9be3995fab886a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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