tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:13:59:28:78:f1:4c:2a:e9:24:b4:f5:70:ab:96:83:33:8b was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:13:59:28:78:f1:4c:2a:e9:24:b4:f5:70:ab:96:83:33:8b
Serial Number (int): 355033020135044728638850810620374298080139
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:41:cc:ff:49:7a:d3:d3:b6:f2:f7:78:d1:66:33:2a:0d:aa:51:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): df:1c:50:94:1c:c8:af:96:fc:a2:d2:4e:b6:b4:2d:3c:be:a1:45:04
Fingerprint (sha256): 05:af:ea:62:ef:dc:80:ba:b7:ee:92:ef:a4:86:8f:6e:4f:21:c6:4a:64:a8:c8:91:94:fe:dc:07:de:94:a1:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alinahycreativeswak2020.photography
allsearchnet.water.blog
cooperation.car.blog
derickinthecity.com
iceshebreas.water.blog
kidsalesclub.family.blog
landtransportationoffice.water.blog
life-without-brakes.family.blog
margaretriverhaybales.water.blog
margaridaaz.com
material.sport.blog
paradise.water.blog
pompkeen.com
rivers.water.blog
sikh.water.blog
theobsessioncentral.in
tls.automattic.com
turnerlaurenunl.health.blog
vetbizlawyers.com
ville.water.blog
virtualrainbowsummit.org
vixionaries.co
vmcasprl.com
walmsley.blog
wanderlustuncharted.com
www.albert.water.blog
www.alfonsoccernadas.sport.blog
www.alinahycreativeswak2020.photography
www.allsearchnet.water.blog
www.cooperation.car.blog
www.derickinthecity.com
www.dominicvicente.water.blog
www.iceshebreas.water.blog
www.kidsalesclub.family.blog
www.lab.wallarm.com
www.landtransportationoffice.water.blog
www.margaridaaz.com
www.maturidade.water.blog
www.paradise.water.blog
www.pngspiceytales.water.blog
www.pompkeen.com
www.potlood.water.blog
www.rivers.water.blog
www.sikh.water.blog
www.test98234200980.sport.blog
www.theobsessioncentral.in
www.tollevanlaanen.com
www.turnerlaurenunl.health.blog
www.vixionaries.co
www.washburnmillerbots.com
www.yasamifarketicerir.water.blog

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDuB2I6I38GIZT4VWS99
nq4YZCGsXCh27LhMNIB2IWqHp6lvmE4UiF0fcLwt09/P1VaktXImkGO+JnqVAgvp
sb3WnsEIbgXXRqmwryrpm4sjFLMfgUoVaNmfzdT59wurCsLToDpDHZoeBIuRhh+m
C1T85yxO+YWsMze2qHjCPNQVaujxguuHVM1xgAc1Nsc3iWKWRc0YbFfxbAceS91c
NkeIY7hMYr8EWFDRXSV4usmM9AFzF2iHOcDdFJB4Gv0PASVaJVKJKjlHTtPS/UPh
JL19NPRWVzDR8BmaoI6q+5cxx/LAv+eFEWFPyaXXcBmF+wmOe8QolUEGMLQ6e8Ia
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355033020135044728638850810620374298080139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-08 05:35:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-06 05:35:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23762145432857214963021044681644056433692814194673825905468662923743432122905260969020427351924634873765654437244806671035116942582391163435099914605817135174899576176789196779701209079112822485961781462109824607105489391063629004832206142772944943876326792009797954885019382872513723332158491715438015555138800049828030515932256060284688123301079737242177308524028911301385861754472708111656457933866627993464615628418499835631049483172721425415698087376171092203341086450849813036173798811456763148198111907132292835752745835338403286570135902489203041000740666523281293809143561107309881446509605505901956264237721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c41ccff497ad3d3b6f2f778d166332a0daa514d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1296 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alinahycreativeswak2020.photography'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsearchnet.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooperation.car.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derickinthecity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iceshebreas.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsalesclub.family.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landtransportationoffice.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-without-brakes.family.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margaretriverhaybales.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margaridaaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'material.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradise.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pompkeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivers.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikh.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theobsessioncentral.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnerlaurenunl.health.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetbizlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ville.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualrainbowsummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vixionaries.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmcasprl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmsley.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanderlustuncharted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albert.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfonsoccernadas.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alinahycreativeswak2020.photography'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allsearchnet.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperation.car.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derickinthecity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dominicvicente.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iceshebreas.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidsalesclub.family.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lab.wallarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.landtransportationoffice.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.margaridaaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maturidade.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradise.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pngspiceytales.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pompkeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.potlood.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivers.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sikh.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test98234200980.sport.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theobsessioncentral.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tollevanlaanen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turnerlaurenunl.health.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vixionaries.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washburnmillerbots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yasamifarketicerir.water.blog'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000180a261b37f000004030046304402203c00ee76baae437b6bf9c60051b5b1410a5ebf9118313223afaf548a06a8da0002203289a585ef795793f7ed7cbf8b16f227b453066eb5ff955dd71cde83ffa56e2c0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000180a261b37f0000040300473045022100faa2ba5cda99152bc233b4fa80eea02643933c22bee7e28314e267b998b08d6d02200c4ea5a680ca51dbd788fa46a9c518f4db15cd37af163c471fd75b254545fbef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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