tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:aa:f4:bf:75:09:10:53:5c:0b:1b:ca:ec:a0:f6:a5:6a was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:aa:f4:bf:75:09:10:53:5c:0b:1b:ca:ec:a0:f6:a5:6a
Serial Number (int): 342211018318472808390220292511772278433130
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:dc:47:80:1c:da:2c:2e:f9:80:ea:9b:cd:86:e1:32:6a:b9:d8:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7f:df:f9:72:a6:59:3d:58:98:cb:6b:a4:5e:e0:62:01:e6:c7:7e:b6
Fingerprint (sha256): 12:1f:50:33:72:29:d1:56:41:96:ee:3b:9c:6a:fe:b3:a2:ce:d3:d4:c5:93:de:2c:3d:f9:86:5c:a5:d2:bc:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

architecture.uic.es
coursedesign.uidaho.edu
dualcredit.uidaho.edu
obalemba-lab.uidaho.edu
tls.automattic.com
uhhuhok.com
uhill62.ca
uhjazz.com
uhkapeli-ilmastolla.net
uhlenhof2.de
uhlnc.org
uhmagazine.com
uhmprettymonika.com
uhnwinvestors.com
uhochdrei.de
uholneskladymatis.com
uhoortnogvanons.org
uhort.net
uhrbert.com
uhrginc.com
uhriginal.com
uhsswordandshield.com
uianthropocene.org
uibk-hbi-hypoxia-research.org
uicatoronto.com
uidahoalphagammarho.com
webauthoring.uidaho.edu
www.coursedesign.uidaho.edu
www.dualcredit.uidaho.edu
www.obalemba-lab.uidaho.edu
www.uhhuhok.com
www.uhill62.ca
www.uhjazz.com
www.uhkapeli-ilmastolla.net
www.uhlenhof2.de
www.uhlnc.org
www.uhmagazine.com
www.uhmprettymonika.com
www.uhnwinvestors.com
www.uhochdrei.de
www.uholneskladymatis.com
www.uhoortnogvanons.org
www.uhort.net
www.uhrbert.com
www.uhrginc.com
www.uhriginal.com
www.uhsswordandshield.com
www.uianthropocene.org
www.uibk-hbi-hypoxia-research.org
www.uicatoronto.com
www.uidahoalphagammarho.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyhrF4/i6eAZUOCClF6W
Ci3fpc+eeFaWKGJiyv+3sQiwODYDh7uUiURKo3Jg7VxWXUIjnbL8uwoZFVRnJsqy
Pr6Ihce7fyXogKjnJnqVRyjXLWWxF0EXw5s+Zf0niE+dOrNE/Xipy4XoJcfZF/v0
7RPDkZUIG1GivxrGgS6DSdQpzEsSPaifxW3Ullw5exuKuzodmmyJfb0q+tpG0z9Q
njdlEhSKb+ET15+hwX5FNSQRGhQTs8T3eyN/gHJYGo9qOon3t9UJ6SNqWLKixo2a
vx/YE7qAxqedsN6LMxKgD3ydtRmwhVaOA/NZJm7+23zJWHcMxxBHm0dKC2Ok0MBL
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342211018318472808390220292511772278433130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 13:14:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-25 13:14:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22616587609437902059735149235247203432188275169930813479891700293777084892774680518450332679576647398487778698001050840200004550094781077396348877941608296279455106111421797026401091500071416001447969938671259303235641811957086730933815129212509953197462312469213899124736000630171403974225070360854800877588356321176141835714253557190166785414019091432964965407710218099499318688631156679273345325608709982071196474146955104809087901948546371085047712197841719176102539985903143196212571405423582358886967645234600913135075625823467708217478135376182311694757445289111865081716139675138961350772074781829911627713483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cdc47801cda2c2ef980ea9bcd86e1326ab9d859
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architecture.uic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursedesign.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dualcredit.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obalemba-lab.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhhuhok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhill62.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhkapeli-ilmastolla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhlenhof2.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhlnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhmprettymonika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhnwinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhochdrei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uholneskladymatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhoortnogvanons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhort.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhrbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhrginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhriginal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhsswordandshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uianthropocene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uibk-hbi-hypoxia-research.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uicatoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uidahoalphagammarho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webauthoring.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coursedesign.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dualcredit.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obalemba-lab.uidaho.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhhuhok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhill62.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhkapeli-ilmastolla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhlenhof2.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhlnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhmprettymonika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhnwinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhochdrei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uholneskladymatis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhoortnogvanons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhort.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhrbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhrginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhriginal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhsswordandshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uianthropocene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uibk-hbi-hypoxia-research.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uicatoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uidahoalphagammarho.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166163ada4d00000403004630440220442920fa3cb5122c033360d196e8ddb5f29aa1bdab74f1099b6022d0a7785dc1022067cc54f5e19daa40799e065ced9f19411ae18c7678cd3139b0ac3813f68bc7470077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166163adcf70000040300483046022100a1baf5624ddca34a87ee14a387d6e28c755c012199115e039a6583b7631e5f9d0221008161891e25cd6c4a4a98dcaf6292733139bbab5dd7f7f3a6ecbcc32dbae9683f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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