tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:6c:27:80:80:12:80:bd:42:d4:32:62:bb:0f:b2:51:15 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:6c:27:80:80:12:80:bd:42:d4:32:62:bb:0f:b2:51:15
Serial Number (int): 331919069477332616085022751222302535471381
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:7c:07:bd:10:61:bf:9a:95:f1:7c:e4:7e:11:1b:07:0c:a3:ce:4d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:e9:53:ed:f2:ec:d1:ac:53:c4:31:fc:3e:1f:80:d1:b4:ec:97:b9
Fingerprint (sha256): 0b:36:e4:d0:4c:aa:5a:d7:f5:ce:fc:92:ea:3d:d7:89:86:e7:c7:dd:4d:6d:7c:04:06:87:4e:df:fa:ab:f6:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reconciliacioncubana.com
recondent.ro
reconditionarepardoseli.com
reconditiontech.com
reconectacuritiba.com
reconentertainmentnews.com
reconevent.com
reconexaocuritiba.com
reconfiguredartjewelry.com
reconfiguremyhome.com
reconnected-place.org
reconnectingarts.com
reconnectingproject.org
reconnomics.com
reconquerirsonexcomment.com
reconquest.net
reconstructingchristina.com
reconstructionarytales.blog
recordbreakerschi.com
recordcollectornews.org
recordcratesunited.com
recordjack.org
recordofm.org
recorrelo.com
recorremoselmundo.com
recorridosdelainfancia.com
tls.automattic.com
www.reconciliacioncubana.com
www.reconciliationpoetry.com
www.reconectandocoaching.com
www.reconectarbrasil.com
www.reconnected-place.org
www.reconnectingarts.com
www.reconnectingproject.org
www.reconnomics.com
www.reconquest.net
www.reconstructingchristina.com
www.reconstructingeconomics.com
www.reconstructionarytales.blog
www.recopilacionlegal.com
www.recordcollectornews.org
www.recordcratesunited.com
www.recordforjack.com
www.recordgroove.net
www.recording-economics.org
www.recordingthelight.com
www.recordlivinglab.org
www.recordofm.org
www.recordsoftheohanzee.com
www.recorrelo.com
www.recorremoselmundo.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKw+R0yl4OQdevetln9I
YxkUfA53hpE51QK7LeahcyJKhxn8qSA8lUuvZhJQ9yz5JB7tXBNIpX0QlqA//HfA
HOsBfaMY64q/NJabgiAwpVPpP4mobLcZsVdkmz0FQIVGcztrayH8GsU5JWJlE83e
EvI8zKr4codOsaB5LRILBZ3MPC+Xlo/CIKwPxaiIUFsCyuystfKww+QFgsMCehLh
j8XE33F/oz4Tv0fRPQZWmWXLLf+Rbo1XEigwACfMLT35vxF6W7edQk8yNd+n1ga6
GB7MXDKibYFNEBbflGAdXaj1dLUUMWpfDly8WYNS+3WYBPVCTwEikgFVFMJn7NwR
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331919069477332616085022751222302535471381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 08:28:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 08:28:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20283065119310299588411701690939623367483737273889802441283216258964471045436758490557894716210609999763961464649309100545967285319039790199733085368425293835474245310430675770470641821545699823882774168954764553601578223595361719178368152837877264339668190905156097626808285747836370429108994323155488010879342369389518952077527330756032779001975445999304365103863690183514655879096459257176878451387524430082400608894828614780830186959127037555967195069106493582237579210222774812222167444037642745554716450891924602313671721836941666671463078202262553977785650392217100719346065478943489431844335390482685270692137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f67c07bd1061bf9a95f17ce47e111b070ca3ce4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1256 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconciliacioncubana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recondent.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconditionarepardoseli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconditiontech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconectacuritiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconentertainmentnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconexaocuritiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconfiguredartjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconfiguremyhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconnected-place.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconnectingarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconnectingproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconnomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconquerirsonexcomment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconquest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconstructingchristina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconstructionarytales.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordbreakerschi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordcollectornews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordcratesunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordjack.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recordofm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recorrelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recorremoselmundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recorridosdelainfancia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconciliacioncubana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconciliationpoetry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconectandocoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconectarbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconnected-place.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconnectingarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconnectingproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconnomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconquest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconstructingchristina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconstructingeconomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reconstructionarytales.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recopilacionlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordcollectornews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordcratesunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordforjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordgroove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recording-economics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordingthelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordlivinglab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordofm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recordsoftheohanzee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recorrelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recorremoselmundo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001687a0a00ae00000403004730450221008d9e35c2f6bbddd5fca95e7da19c681c6c706852bd726f3c77440ffd15a03260022067563aa899aac34548b900723b3bac38f9b9bb7e0f8cdcb36f08b29b885572d5007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001687a0a00b3000004030046304402202b59d040d5acf8753b0134b9d8541e021b17e8cf0596d5a567cf405c81bde0de022043d74bce16c315057eed08ed357afd0719d8d7f2855f0443a19a997b64f83d0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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