tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:61:3e:9f:86:b5:46:0b:ae:24:d3:b4:52:21:a7:a9:5d:68 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:3e:9f:86:b5:46:0b:ae:24:d3:b4:52:21:a7:a9:5d:68
Serial Number (int): 294427487829755805093180305358342136094056
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:21:20:2c:e0:b4:b6:03:74:a0:d7:14:cb:52:79:e7:b2:a1:cf:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:1f:e6:f9:02:69:c8:b0:0a:b7:5d:73:bb:17:31:d7:e8:1d:41:82
Fingerprint (sha256): 17:7c:7d:67:86:5f:3e:a5:5e:08:f6:36:55:13:1d:3e:c2:4e:9a:8a:ec:3a:21:87:56:7e:9b:c0:08:07:65:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.legacy.com
blog.legacyislepublishing.net
leftwoods.com
leftyhooligan.com
leftylex.com
leftysmudges.com
lefutur.net
lefuturdestartup.com
lefuturewave.com
lefuturistedailynews.com
legabollate.com
legaciclismoprof.org
legacy-blog.com
legacybarn.com
legacyblog.org
legacycoachingnow.com
legacydefensesystems.com
legacyinitiative.org
legacyinternationalchristiancenter.com
legacyjrotc.com
legacyknitz.com
legacylivingwithlynds.com
legacymoto.com
legacymotorwerks.com
legacymusicglobal.com
legacynation.com
tls.automattic.com
www.leftwoods.com
www.leftyhooligan.com
www.leftylex.com
www.leftysmudges.com
www.lefutur.net
www.lefuturdestartup.com
www.lefuturewave.com
www.lefuturistedailynews.com
www.legabollate.com
www.legaciclismoprof.org
www.legacy-blog.com
www.legacybarn.com
www.legacyblog.org
www.legacycoachingnow.com
www.legacydefensesystems.com
www.legacyinitiative.org
www.legacyinternationalchristiancenter.com
www.legacyjrotc.com
www.legacyknitz.com
www.legacylivingwithlynds.com
www.legacymoto.com
www.legacymotorwerks.com
www.legacymusicglobal.com
www.legacynation.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KxGkfzziw3z3p0sua5w
FtSXw3TKsgeJxAxDqOjPYBrPATTl/K5gwCPpAyZnjt3yUR3WDxsixdYuBSoGZpqb
PZfFuFn12HBuN8TYN6gIcD8h+o9h9vQuybcUAwkGkVpAWnAPH5kaIuX5+aG+lxAh
TiZEo4cKJBb9AuEBV1IzRNGV5aTyy05T4jbU8RV7ruEWM8rH3xIGJdJkMNpjBEtV
qMYnM4eldt3KDIm+YmCFqTuahEK+DA+y+3Ig6C50dPhCQksMY9iJmPsXNssP44r6
V0ILwAU/3uJPzQtI42XVt7/utPB8Rlyl9D3MZtc3V4MyfDl7lP8qQjXeGxJTl3Hm
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294427487829755805093180305358342136094056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 19:13:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 19:13:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26847472949481429223430224421277457741453216252052795750792989207739004299009234090429894487144427400143659776599534800369816143043721976845245380629592365718469959386111063393786082788010092644394068437872789049678764527194355877988753269064416618826831640417654864896031193257359781402181444399494975018259402624249910359926078790679809439996447960375031756212163326463267944012023091370843582671584053909483363881159418267793233391055935640087141691029440247632506117683891117219696928629834540188424809288633145855538296968675220616321878023441169709674846969260237430902748623796484057963303100282820325455029993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c21202ce0b4b60374a0d714cb5279e7b2a1cf31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.legacyislepublishing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftyhooligan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftylex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftysmudges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefutur.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefuturdestartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefuturewave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefuturistedailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legabollate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legaciclismoprof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacybarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyblog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacycoachingnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacydefensesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyinternationalchristiancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyjrotc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyknitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacylivingwithlynds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacymoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacymotorwerks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacymusicglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacynation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftwoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftyhooligan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftylex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftysmudges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefutur.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefuturdestartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefuturewave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefuturistedailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legabollate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legaciclismoprof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacy-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacybarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyblog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacycoachingnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacydefensesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyinternationalchristiancenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyjrotc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyknitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacylivingwithlynds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacymoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacymotorwerks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacymusicglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacynation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016982fd2a200000040300473045022060f31028b6b3c11ab657fea5d1add10a0c1be0ec2f9c0696fc85b18c4127518b022100a91367f0e2af4c5ad4db1664cadf1d66435943183ccc215243989a30179b116f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016982fd2a6b0000040300473045022003bf9c40720a0eb4a0c63938636ff9feccb78c15370ea9c9381d3cc0df775551022100a26458a77229b7523c4f7b33dcc92fab3d77532055770139040eb223064c96e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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