tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:26:ec:4f:3d:6c:6b:57:59:16:20:de:98:e0:60:e4:75:e0 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:ec:4f:3d:6c:6b:57:59:16:20:de:98:e0:60:e4:75:e0
Serial Number (int): 274581696982550313816456334524981717530080
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:76:14:96:f3:e2:4a:f8:d3:b9:6c:30:d5:2c:05:1e:20:d5:37:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:e1:26:f6:43:d0:9d:94:7a:7b:ef:80:9d:b1:ac:16:47:08:e9:7c
Fingerprint (sha256): 17:df:d6:2f:93:0f:7e:76:5d:6e:27:bf:7a:62:61:d5:e5:f8:39:79:96:10:8b:ae:4c:a9:04:7f:eb:32:c7:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.clubsinthecity.org
clubrugzak.net
clubsailor.com
clubsangines.info
clubschadenfreude.com
clubsds.com
clubsiambrettabsas.org
clubtaurindeparis.com
clubtfs.com
clubtracts.com
clubtriatlonalmendralejo.com
clubtriatlontritondelpardo.com
clubtrotters.me
clubuac.com
clubulvirtutilor.ro
clubunescoancona.org
clubvbdrakkar.com
clubvi.com
clubvilladealgetefs.com
clubvino1.com
clubwitsend.net
cluck-cluck-coops.com
cluckyhenfarm.com
clue-x.com
cluecompany.no
clueddown.com
tls.automattic.com
www.clubrugzak.net
www.clubsailor.com
www.clubsangines.info
www.clubschadenfreude.com
www.clubsds.com
www.clubsiambrettabsas.org
www.clubtaurindeparis.com
www.clubtfs.com
www.clubtracts.com
www.clubtriatlonalmendralejo.com
www.clubtriatlontritondelpardo.com
www.clubtrotters.me
www.clubuac.com
www.clubulvirtutilor.ro
www.clubunescoancona.org
www.clubvbdrakkar.com
www.clubvi.com
www.clubvilladealgetefs.com
www.clubvino1.com
www.clubwitsend.net
www.cluck-cluck-coops.com
www.cluckyhenfarm.com
www.clue-x.com
www.cluecompany.no

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQyN5u5hQwvWOIKNzDEl
3jEZIoFjRPn3mdpcM0tSvfmjooyjc8RvfgKtzPixzPXSfIo5tRLDae4cLCnXQDMO
D4Mz3zS1Mvhiq2SMoSXrZ39bUy7++CKIWzpsR5fzOPNFwW3E7fnplWYLICaUa4FE
TRxwBRkRVdxMEk2CA9YovexhC49qc7Y/9BlLfvuoVKMhhW906GdpZEG2s7zRvXmA
DpPojizDM6S8V+iJ4+t4RJLC3TO0LEU1yG1jYZNJoWaKDb3eD6eyJiw9Na6pk/EU
4A4NHo6VYBtExSn7apIbmvT8fCKiwZ3T9LSNver60p1hcBX/UYSeCnAjFkLwYu/3
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274581696982550313816456334524981717530080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 08:56:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-03 08:56:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21845417517646526867585976159373033420082804673337139015354835904350233643269812608993748036282306637921960414692384685034020982359884786270023429447961245865551672467007122158220334566068254733358823076312758663101450737809556948868750561104309124318309784527717735618313894898439763163301695531158833989890726769906029007250982323923206957069739480169633710965682477643436364167665605625623937073067799082129510043414864610803426594853789544347341622508059435556203083908916800212521641708181964649588092365065066803609719509174893996989600479456174519338032395901956684428828012950332577901047658676994128621860641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e761496f3e24af8d3b96c30d52c051e20d537f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1072 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.clubsinthecity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubrugzak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsailor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsangines.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubschadenfreude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsiambrettabsas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtaurindeparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtracts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtriatlonalmendralejo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtriatlontritondelpardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubtrotters.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubuac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubulvirtutilor.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubunescoancona.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubvbdrakkar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubvilladealgetefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubvino1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubwitsend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluck-cluck-coops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluckyhenfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clue-x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluecompany.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clueddown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubrugzak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsailor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsangines.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubschadenfreude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsiambrettabsas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtaurindeparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtracts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtriatlonalmendralejo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtriatlontritondelpardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubtrotters.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubuac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubulvirtutilor.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubunescoancona.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubvbdrakkar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubvilladealgetefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubvino1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubwitsend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluck-cluck-coops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluckyhenfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clue-x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cluecompany.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001694d481f72000004030047304502206f71c9e2ff27a145edab69032fb7ab46f5ab1be96d152f805801cb81b72340a6022100dd88ebab85b4ab7d40f938ec8bd95809d46a727d0f32af050e55fe670b3d279d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001694d481fc600000403004630440220041ff775f4ebfbd91a3f96a8c4aa67dfb1166e4d446d53a865f18897d008e3b002201b7e470c1001972432490fc74020f9b69f79e9a0cff272d214ba4c950d2ff426
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a69107940084518cd47f2495e92d2cbe35600c53d13d41955f501b2c649b22c464f2b445f4cc2d138eea7d7405150b6ded18c390376445f6d82e29c6362514e866692093d9a78ca3936c814adb075c65896bade6819dfd6dccaefdf74e8479c79df14e8a8f4140268b199aad2517842a04d829d8eb1d3bb0508b96e82cbc743079395451b4ef9a43fe0beef9c2724165ac3d1d16030335787de6dc293a421290d28a185f4276f12344fc5103615b305d0a325679d9c9ccc815ebe9aae75deb78d0459b00463923571ee5ae11e0343c08079a92d8b336d491426db2516ec9c4709f1952f701ae09daf48966e9ea0b0242de192b8126ea49d066fba58678b24f9