tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3f:5b:da:4c:20:88:65:60:3a:0d:af:73:40:2e:b0:3e:12 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:5b:da:4c:20:88:65:60:3a:0d:af:73:40:2e:b0:3e:12
Serial Number (int): 282896740123672094670166539541686395092498
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:c5:8c:8b:95:39:d3:2c:a3:85:1c:5e:b9:e0:34:4d:47:1a:1e:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:57:89:f7:7d:96:a0:df:5d:4b:18:53:c4:02:40:7a:a2:b7:89:22
Fingerprint (sha256): 12:12:cc:22:f3:9e:84:22:60:ba:d1:73:a4:6a:c4:ea:d7:87:31:dc:c8:33:41:d2:5b:de:6a:77:29:89:57:b6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chevalier-wines.com
csernaivilla.hu
decryptdaz.com
eusereia.com
geoffsmusic.com
i3performance.com
inforrm.org
lecrampon.fr
lesfemmes.studio
lethu.blog
maidau.com
melimiam.com
milesandsense.com
moranesaulnier.org
musictherapymixtape.blog
nelson-computing.com
npcgop.org
nushearman.com
oekbtauplitz.at
parceriasolucoes.blog
pensodunquevago.com
serviz.fi
stalwarttravels.com
tls.automattic.com
typingoutloud.blog
ursula-t.com
valerucio.com
www.chevalier-wines.com
www.csernaivilla.hu
www.decryptdaz.com
www.eusereia.com
www.geoffsmusic.com
www.i3performance.com
www.inforrm.org
www.lesfemmes.studio
www.lethu.blog
www.maidau.com
www.melimiam.com
www.milesandsense.com
www.moranesaulnier.org
www.musictherapymixtape.blog
www.nelson-computing.com
www.npcgop.org
www.nushearman.com
www.oekbtauplitz.at
www.parceriasolucoes.blog
www.pensodunquevago.com
www.serviz.fi
www.stalwarttravels.com
www.typingoutloud.blog
www.ursula-t.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtkDqK+fo/YiQsgqGa2L
VDp8V0h2nM2AWMgzaXXjq7LB6tMNeX4WYxBCRC1pjZl4EasWRGbm6xNLmi+IKK/u
GXu/+1gnUR+ar6+Etr9W4KWHmGQWTzAINV6QJF0K2t1nja/UGDvRghhAUAr6vWkR
K9MnykSVvwYSZvxdJ9Gtxqvj2PSOBOwGWBYX1txnteNr7LHFEd9GpiEV5rOpF7Nb
Ye2x4lyG9aNobjGAsCdAerR1EXqRo5NeabGe19W3Lry+pfXOO71rxFATr/uiXSYQ
HJNF+gmjD42GSyNWXzayluaFN9p4FqJ8ZGbqchUXvRcDgcAeHdm4iiTxTWAdFR1R
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282896740123672094670166539541686395092498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-01 05:54:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 05:54:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22072478800278448009654184597664590209662927767757091883604454083221159734202850021224598348777253690101498843649859287858464439257899349814833646867174793304134281717181291946135306505326310668573717461002787781223302063581086216031411628293485562081362244997078265208830287422088028307091089198141524228207545721995617126258129791515209952820102379927083063477130915144290863506738049121915280047866597449807573140644676435706585602876436798393360097269553239079428272157251689985889247614009931963445726459898649444174226514368833979142994989059822731993386162226879807009516352032589283263951830997537336957161847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64c58c8b9539d32ca3851c5eb9e0344d471a1e57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (979 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevalier-wines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csernaivilla.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decryptdaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eusereia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoffsmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i3performance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inforrm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lecrampon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesfemmes.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lethu.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maidau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melimiam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milesandsense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moranesaulnier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musictherapymixtape.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelson-computing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcgop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nushearman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oekbtauplitz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceriasolucoes.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensodunquevago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviz.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stalwarttravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typingoutloud.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ursula-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valerucio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevalier-wines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csernaivilla.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decryptdaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eusereia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geoffsmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i3performance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inforrm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesfemmes.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lethu.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maidau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melimiam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milesandsense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moranesaulnier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musictherapymixtape.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelson-computing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npcgop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nushearman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oekbtauplitz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parceriasolucoes.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pensodunquevago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviz.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stalwarttravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.typingoutloud.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ursula-t.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000164f44498eb0000040300483046022100c7c82a02b6d8907d98a060cfb03230e6e3a1f669006b025633c1471c949a259c022100ce12fe4aeb5b38ab552073307c055ae472342ec3d09d09f1b8513439ea8a8a3e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164f444992200000403004830460221008e3fa8b69206fa06771ce90ac24683ec5a45bc045566daf03c39f2c3107f7a42022100b6d1f5211e085511545dde31b3bd3f41721b89b89b351b9a73a2de0d8c659f07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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