tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:a9:d6:54:13:de:69:6f:26:6b:6d:f2:56:ed:ed:d3:ef was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:a9:d6:54:13:de:69:6f:26:6b:6d:f2:56:ed:ed:d3:ef
Serial Number (int): 296271411609328415377563290535328138253295
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:a1:76:39:e4:ce:44:42:02:d0:c9:15:a5:48:f0:9e:89:80:64:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:65:fb:0b:9f:73:fc:46:74:b6:f5:55:45:a9:c4:27:ef:ee:50:89
Fingerprint (sha256): 0d:69:78:28:04:87:7e:ab:e1:66:51:a9:22:da:a3:7e:af:ca:d9:f0:09:0a:b0:d1:1a:fe:39:10:f2:e9:88:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

getrealwithgrace.com
gforceplastics.com
gforcespeed.com
gfostlouis.com
gfrealfood.com
gfreeadventures.com
gfreeandvegan.com
gfreebythesea.me
gfreekid.com
gfreewanderer.com
gfricardo.com
gfscorner.com
gftradioshow.com
gfvegaquarian.com
gfvermont.com
gfvwoman.com
gfwcantiochwomansclub.com
gfwevents.com
gfwinecountryliving.com
gfwlacrosse.com
gfymtl.com
ggallerys.com
ggardnerpaintingservices.com
ggcburnabymountaindistrict.com
thejword.game.blog
tls.automattic.com
www.getrealwithgrace.com
www.gforceplastics.com
www.gforcespeed.com
www.gfostlouis.com
www.gfrealfood.com
www.gfreeadventures.com
www.gfreeandvegan.com
www.gfreebythesea.me
www.gfreekid.com
www.gfreewanderer.com
www.gfricardo.com
www.gfscorner.com
www.gftradioshow.com
www.gfvegaquarian.com
www.gfvermont.com
www.gfvwoman.com
www.gfwcantiochwomansclub.com
www.gfwevents.com
www.gfwinecountryliving.com
www.gfwlacrosse.com
www.gfymtl.com
www.ggallerys.com
www.ggardnerpaintingservices.com
www.ggcburnabymountaindistrict.com
www.thejword.game.blog

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs1NqdoOscyoXMHYmkym
BXDuT/Gv3d4CogHbG3y9jxCKlH9XxFpKXSPUGr1X4nLpN/Kv3EfZV1NahJGqORI1
ih0fnIB0pg690GmZxNpnwgO35d8+zr7M0Ny3N1qEV5ROBTU+nlm4wPloKfWThp7W
EP5uIAA/DuJtcrzcQxnjN7V+Pj2u/XuAqtMDo0cNX9dOCFDEAvCc4UrLCUn2e6xa
ALFn80Bo6VnoGuy0dcvR8h+hXdGBByivmLOk7zQ+kCey3RliPisXKjrFU/XzPHkB
st8qAvdQSQ63P1UdkOOiv+rF+OocX3lwqQY/Vgn36v4LZo/xsggfkWcBzOqenNQF
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296271411609328415377563290535328138253295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-10 23:05:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 23:05:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26106329689450014092298485797543558861167657005382168270370315407010209483711112605594119360323361467205780149878933595012375296279014465062435307127410739647760347423549854652504803810546066122798212969424088225848398161988797135502228140953373605148825754138307248645604226848677621007023171608239094894359391114126756974490859432874133379358369330722226748435418786931220927440581592963056718519710970101905733134165059624283862346249555278446226699496058643209484411493563525851813042754459160421570121403839416983518050301050422656849442864446929460525878600096027038639938950126347115199116318028415669776942407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0a17639e4ce444202d0c915a548f09e8980649f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1066 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getrealwithgrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gforceplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gforcespeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfostlouis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfrealfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreeadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreeandvegan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreebythesea.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreekid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreewanderer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfricardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfscorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gftradioshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfvegaquarian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfvwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfwcantiochwomansclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfwevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfwinecountryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfwlacrosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfymtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggallerys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggardnerpaintingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggcburnabymountaindistrict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thejword.game.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getrealwithgrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gforceplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gforcespeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfostlouis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfrealfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreeadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreeandvegan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreebythesea.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreekid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreewanderer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfricardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfscorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gftradioshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfvegaquarian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfvwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfwcantiochwomansclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfwevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfwinecountryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfwlacrosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfymtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggallerys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggardnerpaintingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggcburnabymountaindistrict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thejword.game.blog'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aa435dd7b0000040300473045022100f8a6b76c728349344b304ec532e390ff86b1776512b961bfc5c628d7ab06691902200489185f310581d895dc5687658d63a09948567b2bc6dd4c9e640b7859edda8200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aa435dd5d000004030046304402204cb984ad043c3396cee82dccc3c505f5c93a847ef43da4dc0797b7f855690fca022023de1778311d5d1ede80bc7820de3a2b2b95a99254e10ae670f0e3d34fe3f7ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00778bfb910f895f868a6cdcfbb6062a1f1e72dbcfecad1a951bad20f2bbe2bdd8be71d86c95e87596cca5e586a223bee9ddcb5fb3ccf8323f7dd4997c6fbb58f24f55191b7b688305b809f6f58eccfcd13666669e64eb8749859a08d385784f6e906b2b9d921a64f8e92971dca0ffd300d74652ba039e9c20bb54b1da0a87d7ef1c3816e5fb0d3fd36e1b3062b97a66811931b3451b54fff4ec3adfcaf4bcf8f60f70d41787dd323fd9b1a6cd4a9a38e3ff3e44a0d2bdd623ae750af72c8a138a4f1eb33ee0332692e55b0b245d3e45205fc2a2676abbff0d0ff929146d75af1d5c95f626188636dc31e0f2365489ce6d9aaba93bae801012ba9bbd0afa8c717b