tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:bb:bf:9f:be:4b:22:db:52:3a:72:e3:37:50:14:36:0e was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:bb:bf:9f:be:4b:22:db:52:3a:72:e3:37:50:14:36:0e
Serial Number (int): 269753195205274753856558144099889068652046
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:18:1c:87:91:5e:c4:51:32:23:33:4d:2c:99:20:ca:a7:b5:4f:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:b8:b3:cb:ec:85:9b:4e:82:f9:be:f8:33:10:ee:ee:41:b4:ce:3e
Fingerprint (sha256): 21:09:14:36:1b:fe:70:de:a7:c7:45:4b:f0:b1:2e:46:78:fc:d2:da:93:5d:d5:48:d4:ee:bc:2e:ea:53:3d:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mag.sacredheart.edu
sacredharpbochum.com
sacredheartacademynews.net
sacredheartbaudette.org
sacredheartmagazine.com
sacredheartmessenger.com
sacredheartofkoreausa.org
sacredheartoxford.com
sacredjourneytomore.com
sacredkindness.org
sacredkinkstress.blog
sacredknowledge.org
sacredlandproject.org
sacredlead.com
sacredless.com
sacredlifeskills.com
sacredmargins.com
sacredmedicinals.org
sacredmomentsphotographyaustralia.com
sacredmoonsbirth.com
sacredmothers.org
sacrednatureretreats.com
sacrednaturetravels.com
sacrednavigator.com
sacredneurology.com
sacredpath.blog
tls.automattic.com
www.sacredharpbochum.com
www.sacredheartacademynews.net
www.sacredheartbaudette.org
www.sacredheartmagazine.com
www.sacredheartmessenger.com
www.sacredheartofkoreausa.org
www.sacredheartoxford.com
www.sacredjourneytomore.com
www.sacredkindness.org
www.sacredkinkstress.blog
www.sacredknowledge.org
www.sacredlandproject.org
www.sacredlead.com
www.sacredless.com
www.sacredlifeskills.com
www.sacredmargins.com
www.sacredmedicinals.org
www.sacredmomentsphotographyaustralia.com
www.sacredmoonsbirth.com
www.sacredmothers.org
www.sacrednatureretreats.com
www.sacrednaturetravels.com
www.sacrednavigator.com
www.sacredneurology.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gJ+9yHwOdSF1+E2N7p3
VIEU0Q6rIxLKxhC95XYGzTo2oTHA4MAIf5WXrS5SsRk6DCjCUaeVIPXLm1YALv1z
w2yj3kxy4p5A9V/MxDzadgk436b61cCR6F+dC/FOwpETHeZLh+VVm3WclOIk4gy1
o6EVnTFKRlx64wxh7a7Zihc4xYEjKnoiFbv32e4cmIk7tJQljFsapcqOpUOcY+HL
tfzqX3noq4hzt/ldqYC0Nop8R2nlZ5rtwXKGN1NkTDn2uR512gmYjIOchpyN4aWt
dt2A7CPz/qSf5PRQgLUatHFDkVpJQy6sDVEga5+vF2IiMVbqXHjaVFmeTwSKa2tV
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269753195205274753856558144099889068652046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 03:52:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 03:52:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30045947384903237144759831864229404902678457003760956769779955012424557669315543526124604072939601428016240777729967358444160928390608916566372013734917207746570196828870033133323231563533292743094381363458147029085729679194742018601594622772418373688846144073972362222312382583892053487701115131829085038736824874344522864722798663804706727276542077708954023031757099263465403267193630690140491645580627583332924618562344253477467609913670232148088043358153135358825344155853227248761771570811552403304602839703806005165745795308637668442591827154673605512898569394700302179881745613145481711233032307205625690674487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3181c87915ec4513223334d2c9920caa7b54f54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.sacredheart.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredharpbochum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartacademynews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartbaudette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartofkoreausa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartoxford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredjourneytomore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredkindness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredkinkstress.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredknowledge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredlandproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredlead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredlifeskills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredmargins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredmedicinals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredmomentsphotographyaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredmoonsbirth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredmothers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacrednatureretreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacrednaturetravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacrednavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredneurology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredpath.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredharpbochum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartacademynews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartbaudette.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartofkoreausa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredheartoxford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredjourneytomore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredkindness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredkinkstress.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredknowledge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredlandproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredlead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredlifeskills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredmargins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredmedicinals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredmomentsphotographyaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredmoonsbirth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredmothers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacrednatureretreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacrednaturetravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacrednavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacredneurology.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001687e33ef5b0000040300473045022100f2c6ffbb253a27a63ddfaaa28fe90490871e3563277bf73c393b4ed5d1317458022050dc05bac68c5c5be6faf62fc706934f67ae51965e3965cd7be20a8d45ca7fd300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001687e33ef5e0000040300483046022100815035b18374c8d770016ab6c514c184575d35f8ee8848edc9eb7a4f7d6dddd3022100920c47936b729d008c425287367b24725601d49f4cf55f0140202727e904a74b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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