tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:08:65:65:d9:22:a2:99:31:46:28:6a:a5:2d:6a:ce:1d:83 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:65:65:d9:22:a2:99:31:46:28:6a:a5:2d:6a:ce:1d:83
Serial Number (int): 264193897584232199456161531941896682610051
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:7a:0d:6b:a0:a0:1a:8b:2f:ae:16:6c:67:c0:28:40:44:3c:d3:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:40:92:55:9c:18:f2:96:d5:0f:c5:fb:4f:2c:b3:9c:a3:f6:63:d1
Fingerprint (sha256): 22:b2:35:6f:dc:98:2c:70:ec:6e:d2:84:60:11:de:ba:12:c6:1a:d8:6f:69:ba:0f:cd:e6:f6:cf:45:59:0c:98

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitkamapping.com
sitkaorbust.com
sitkarocks.com
sitlikealady.com
sitnokglobalbusinessintelligence.com
sitomillan.com
sitorimon.com
sitoxicgaming.com
sitsipnbe.com
sitstaysniffplay.com
sittableside.com
sitte.be
sitterbugs.ch
sittersaruba.com
sittinandwishin.com
sittingatthefootoftheblues.com
sittingbull.edu
sittingbytheriverside.com
sittingcomfortably.org
sittinginspiltink.com
sittinginthewoods.com
sittingonthebaby.com
sittingontheswings.com
sittingonwheels.com
sittingprettyinthequeencity.com
sittingprettyredesign.com
tls.automattic.com
www.sitkamapping.com
www.sitkaorbust.com
www.sitkarocks.com
www.sitlikealady.com
www.sitnokglobalbusinessintelligence.com
www.sitomillan.com
www.sitorimon.com
www.sitoxicgaming.com
www.sitsipnbe.com
www.sitstaysniffplay.com
www.sittableside.com
www.sitte.be
www.sitterbugs.ch
www.sittersaruba.com
www.sittinandwishin.com
www.sittingatthefootoftheblues.com
www.sittingbull.edu
www.sittingbytheriverside.com
www.sittingcomfortably.org
www.sittinginspiltink.com
www.sittinginthewoods.com
www.sittingonthebaby.com
www.sittingontheswings.com
www.sittingonwheels.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBxGyHfK3uFBG2VwWkI3
0LEmOHvzNzQFoVs9igIykW1oG3y+Ucr5vB7152qubTTQgEz/l+LJRbi+SlqZFgM9
aCp4eUPwF+dwaVOebXbmlpvlgM5mVDNAefXJGDShdD+wTOU0typ0/nOADqxNc/bE
yfSkc2qvKEdl959b3RySvxKhgN+LYgyZt8h92G9oXwEkEgybeSoKZrBQwlemuyFG
e2HuXIDqkhesygyBiRtqSQyXCsTp5z0wfYFJ5Xb6SQ76ad30TmPTi/+cRy8HEmzA
z/rPvFiql5NW+R9RyKqSktjD2I8SHddPpmE0QEjPb6TWYuqmmlUcZ9Tkj192/aiN
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264193897584232199456161531941896682610051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 20:35:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 20:35:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25261604653272905499008444533666011812819710346970041163992531416162627668468608993125937793986989273137612556236943374994742449891475155927567305644375441151355634568037261035494117547340447322523605872946653906786780899080673709625561402458087525122574897579009040645203277089308835112219138191328437212886191555033524685567420282095256818003267484949175605565615311879544175500132182204423698658000390410703863432318361777459587844646641195021929089302471504906552339111876919361289355768485310102991347198328417857136492329754906786573369977013790680355133186725313001373640528410877297412381125922101751915777493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a17a0d6ba0a01a8b2fae166c67c02840443cd301
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitkamapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitkaorbust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitkarocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitlikealady.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitnokglobalbusinessintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitomillan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitorimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitoxicgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitsipnbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitstaysniffplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittableside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitterbugs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonthebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingontheswings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingonwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingprettyinthequeencity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sittingprettyredesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitkamapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitkaorbust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitkarocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitlikealady.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitnokglobalbusinessintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitomillan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitorimon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitoxicgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitsipnbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitstaysniffplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittableside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitte.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitterbugs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittersaruba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinandwishin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingatthefootoftheblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbull.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingbytheriverside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingcomfortably.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginspiltink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittinginthewoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingonthebaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingontheswings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sittingonwheels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ffd875ca1000004030047304502206431fbf95642c225eccd562f76176b4263d3eed439a4083d4f99b6fdd39150c6022100a87ecb7417f4999432780ba798f2130379266056a34966396285c0847dbefd790075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ffd875cbe00000403004630440220338c8f9fbed2fca0beb21bf7ba74edda29e9ab3c1060511b24ec29f8bf948203022007f13ab5d31bb59175c3687e9a14536a4c21eec8103d1318e69f0aa0f4f62986
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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