tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:92:21:e4:53:4c:16:8a:f3:d0:92:6e:db:85:80:f2:36:79 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:21:e4:53:4c:16:8a:f3:d0:92:6e:db:85:80:f2:36:79
Serial Number (int): 311063133422750717877563962750856500229753
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:7d:66:62:3a:d0:d3:f5:a4:79:f3:d3:02:62:7b:b2:2d:e7:a7:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:09:92:f7:e6:4d:98:1e:60:e8:ad:57:04:78:76:a7:16:1c:5f:d2
Fingerprint (sha256): 14:0b:18:1e:86:08:a7:73:6e:99:2c:6d:e7:e5:55:b0:8a:1a:e4:60:88:19:5a:21:7d:30:77:ee:2d:3c:dd:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

humblewalker.com
humblewarriorslacrosse.org
humbleworks.org
humblyfumbled.com
humblyhappy.com
humboldtcountykids.com
humboldtcx.com
humboldtopenhouses.co
humboldtpermaculture.com
humboldtseasalt.com
humboldtseasaltco.com
humboldtunderground.com
humboldtvisual.com
humboldtvisuals.com
humboldtz.ch
humbolicious.com
humbugmarina.com
humbugsandhandbags.com
humbugvineyards.com
humdrumblog.com
humdrumhippies.com
humedales-construidos.cl
humedalnuevocortijo.com
humeprojects.com
humerusrobot.com
tls.automattic.com
www.humbletribe.com
www.humblewalker.com
www.humblewarriorslacrosse.org
www.humbleworks.org
www.humblyfumbled.com
www.humblyhappy.com
www.humboldtcountykids.com
www.humboldtcx.com
www.humboldtopenhouses.co
www.humboldtpermaculture.com
www.humboldtseasalt.com
www.humboldtseasaltco.com
www.humboldtunderground.com
www.humboldtvisual.com
www.humboldtvisuals.com
www.humboldtz.ch
www.humbolicious.com
www.humbugmarina.com
www.humbugsandhandbags.com
www.humbugvineyards.com
www.humdrumblog.com
www.humdrumhippies.com
www.humedales-construidos.cl
www.humedalnuevocortijo.com
www.humeprojects.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jfh4R9723vHAIm0A/hi
8xSE86/c3MeviDkCOXxBzt8WXNiBYoVXM1U2Q3z59hk0dcW79ztDjEkYGqAYO7/x
HOcaEemV4x0NHN9TqHpv3xRFZrsSAtydCcFeAPPFt3+pbt47J344iaXM/UKPKZ3B
iSRiosKD1AVjehdesLJtH4jxyFEceysJU249Q0/tL37aIH9uWd46DLaF24fYomqB
eWKbcr3eX2lQME10zbCcirlkYR9655OtN+OX90hFMPqOwRYzZxEr0pwwwSFXuID+
usYrk/pEJIsHawUzQ91nw0kLTAdm+jC+xqdekbclJmbpj4bJDGoZEmAThf19XcOh
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311063133422750717877563962750856500229753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 10:10:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 10:10:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26332463406873086101891723963517714921538439553994265491179495018281806193233527434221413492328343909471253881014045329953551465435948282119521325595057636996082370717789621653077133257821473043611348990257814781352478020570982331728281593992911337244826177085739505890289633107796877205767334509134812892036828888673086173481916179071098500735927424395672045651020782956953487328782355596698257587259948159785189631202469681718633723376020852826459663935250732933607189331760488194387648410915984977556297464731691313309714017085479837033539222277807874751689084547945909526302568043742051227670809189189569562779951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef7d66623ad0d3f5a479f3d302627bb22de7a7ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humblewalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humblewarriorslacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humbleworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humblyfumbled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humblyhappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtcountykids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtcx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtopenhouses.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtpermaculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtseasalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtseasaltco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtunderground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtvisuals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humboldtz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humbolicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humbugmarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humbugsandhandbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humbugvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humdrumblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humdrumhippies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humedales-construidos.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humedalnuevocortijo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humeprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humerusrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humbletribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humblewalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humblewarriorslacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humbleworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humblyfumbled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humblyhappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtcountykids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtcx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtopenhouses.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtpermaculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtseasalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtseasaltco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtunderground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtvisuals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humboldtz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humbolicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humbugmarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humbugsandhandbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humbugvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humdrumblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humdrumhippies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humedales-construidos.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humedalnuevocortijo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humeprojects.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166edddd52b0000040300463044022004fee05a81ca117e156c1f279ec3d0f7c6a143ec5a0c60db76ac6679e549d02602201e5f2454a6de231a3a8aa84853c78b4917e769b3ca61f73dde88d5a929afe72a007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166edddd6b50000040300483046022100852c777d7222ef9e0fb88fc764faf8ee5e81310ee5bcdacb2b0d8d14713a0ce5022100a939fe05fa07cfe7abeae650c4f1ec635c8d93e2f283f67255425fe15b508c42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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