tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:4b:34:3d:e0:39:09:26:31:43:01:3a:45:6d:63:fb:f6 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:4b:34:3d:e0:39:09:26:31:43:01:3a:45:6d:63:fb:f6
Serial Number (int): 270964727423179275350548602326337366260726
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:87:75:80:46:a1:4b:f7:a5:eb:1b:1a:4a:e3:05:c1:9e:e3:8e:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:d6:cc:d3:9b:21:2b:9c:31:17:ec:c0:95:55:62:af:e3:ba:ad:e9
Fingerprint (sha256): 25:17:c4:3f:cc:4b:bb:d3:ff:cb:4c:72:a2:dd:f2:68:3e:f8:bd:04:c0:d1:91:87:c6:70:9a:74:85:33:38:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.gforgegroup.com
gforcespeed.com
gfostlouis.com
gfrealfood.com
gfreeadventures.com
gfreeandvegan.com
gfreebythesea.me
gfreekid.com
gfreewanderer.com
gfricardo.com
gfscorner.com
gftradioshow.com
gfvegaquarian.com
gfvermont.com
gfvwoman.com
gfwcantiochwomansclub.com
gfwevents.com
gfwinecountryliving.com
gfwlacrosse.com
gfycards.com
gfymtl.com
ggallerys.com
ggardnerpaintingservices.com
ggcburnabymountaindistrict.com
ggeerpinesed.com
tls.automattic.com
www.gforceplastics.com
www.gforcespeed.com
www.gfostlouis.com
www.gfrealfood.com
www.gfreeadventures.com
www.gfreeandvegan.com
www.gfreebythesea.me
www.gfreekid.com
www.gfreewanderer.com
www.gfricardo.com
www.gfscorner.com
www.gftradioshow.com
www.gfvegaquarian.com
www.gfvermont.com
www.gfvwoman.com
www.gfwcantiochwomansclub.com
www.gfwevents.com
www.gfwinecountryliving.com
www.gfwlacrosse.com
www.gfycards.com
www.gfymtl.com
www.ggallerys.com
www.ggardnerpaintingservices.com
www.ggcburnabymountaindistrict.com
www.ggeerpinesed.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve35k82FkPpRUo+vEygl
mLjCv8tpsgfml5uqeWQf9yvSj1F0r9mPI0b7+/xMj0C/kBX5769tJ/kCDckkafbn
kLh0NDUQfWXuYbzjBn7YU3mZwjiVKpiqk1ktfJLXIgj9lLKdfbY4MJIMdkivXO3o
0KZqWCBosqut3lucApP+2AyrMsJ/6OaYdPCtZnOG0CA/j013QHw8tgx5UROQXLll
xEnPF1xlQnLqHAMCGobxLCEKnxoMfj3mnxJ+b1AJ92cQ3RWaBeT1i1VFj4MB1XFA
uesT9sZsu4Zzungqfg5Hy5SjUjUAe1tkfimz8I98FJKfH0Ow+y7dslktF7+dqcll
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270964727423179275350548602326337366260726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 00:49:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 00:49:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23976389441153498398364672855051051149440915143287765226486581657897960404598985053238372441468811650393476128089959943641521077591976629801753361442900474781564708726405356288575112503914849636134383728772794091776033351156159748672859521975135350068863950315530093562501984258270502340637735688097158643892549793153303462192179298888198236584839800888819033122982023332003826028826224210051222158810749467635991941030954966499817484513119221764113108571066631018349002187577827132733381436988901149361507637419902714003424843831866676508568499428417891951492442530033353627280774096299888079504226104620882500085029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9287758046a14bf7a5eb1b1a4ae305c19ee38e54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1048 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.gforgegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gforcespeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfostlouis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfrealfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreeadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreeandvegan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreebythesea.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreekid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfreewanderer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfricardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfscorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gftradioshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfvegaquarian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfvwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfwcantiochwomansclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfwevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfwinecountryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfwlacrosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfycards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfymtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggallerys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggardnerpaintingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggcburnabymountaindistrict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggeerpinesed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gforceplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gforcespeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfostlouis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfrealfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreeadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreeandvegan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreebythesea.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreekid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfreewanderer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfricardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfscorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gftradioshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfvegaquarian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfvwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfwcantiochwomansclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfwevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfwinecountryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfwlacrosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfycards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfymtl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggallerys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggardnerpaintingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggcburnabymountaindistrict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggeerpinesed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016825ffcda200000403004630440220267dcde2d5a16d4f410d88a5aa4d2161c0b412bff732aa06a0f686eb8263272c0220101b7ecb29754ba67907e0c4026b73083152c86fd066e55fb37689af1933260d007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016825ffcdc10000040300483046022100c69da217012982327bf094b3baf67892d47af3e57895db2249ab1938ab88deef022100ce5fc394781235c65e093503ae2b129c9bf5468f8f8eda6de41328762cd42dc4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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