tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:ba:0b:00:59:04:b5:af:79:c5:48:45:71:d8:50:9a:40 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:ba:0b:00:59:04:b5:af:79:c5:48:45:71:d8:50:9a:40
Serial Number (int): 324196106838267619500639216121381861235264
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:78:98:2d:09:bd:87:27:09:84:7a:39:1d:28:2a:11:21:54:6d:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5e:4f:01:80:bd:52:58:83:f2:04:84:e8:90:e3:75:f8:96:ca:21:af
Fingerprint (sha256): 2c:c6:39:73:f9:62:0d:52:6b:ad:95:76:a3:36:af:dc:0e:bc:9d:82:af:c2:55:08:a9:35:f6:0d:68:f3:e1:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lagatajacob.com
lagatewaypartners.com
lagazettedelhonordecos.com
lagazettedelhonordecos.org
lagazettedesplantes.com
lagazettedessports.com
lagendacattery.com
lagenost.no
lageorna.com
lager-frenzy.com
lagerap.com
lagerfrenzy.com
lagerine.com
lagetnmbu.com
laggingballs.com
laghousinglaw.com
lagigogne.org
lagiliola.com
lagioiadelcuore.com
lagirafeacousmate.org
lagiustadistanza.com
lagneaualabraise.com
lagneaureal.com
lagniappealways.com
lagniappedulcimersociety.com
tls.automattic.com
www.lagatadecheshire.net
www.lagatajacob.com
www.lagatewaypartners.com
www.lagazettedelhonordecos.com
www.lagazettedelhonordecos.org
www.lagazettedesplantes.com
www.lagazettedessports.com
www.lagendacattery.com
www.lagenost.no
www.lageorna.com
www.lager-frenzy.com
www.lagerap.com
www.lagerfrenzy.com
www.lagerine.com
www.lagetnmbu.com
www.laggingballs.com
www.laghousinglaw.com
www.lagigogne.org
www.lagiliola.com
www.lagioiadelcuore.com
www.lagirafeacousmate.org
www.lagiustadistanza.com
www.lagneaualabraise.com
www.lagneaureal.com
www.lagniappealways.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt8j6FLtBQYi4K+D941b
PKtEWhkJbdYQzoUSNXyhO3U4BJf/Tg8yUaCcYD0sEogG8zJDGnNL7RsTQ5ahr4Py
0kJVR7WCBtIsZv3m2k6EnPbgp3liQldg97ArKgdLqdOVALZxadI//QhHiwCvBkkL
/D8Qj9KEXTIr8cAIXL/n5WOnEIvLrtN5RNB5NGp31FQ8K68/iipTzvfBxN3dTJmX
UOw4O6pLMZ5Q/bmxIJ1w089L2KlsiP9HDyoGFQ226k8Q3sT4r5kSeexHecwzlUys
+Qw23CAQayJ3NE7znpyHZP8y3On9w+RnK+UP6EmIsX1AAL2lF7QOmEZrscyDNFg8
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324196106838267619500639216121381861235264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 10:36:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 10:36:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26115125388098643979142347369550149217969415892814000582438042992754797978271719618150292698490369198535264742412412852087253466667308400596165898122251845641875515098300940525097160440332654168452371566810804993005004260428790072279456570512637891125010413668711088287632126115402561521453944090589080309311323556920091545922639630162512281008602048690473707089548809512510270264838104672212410642733700860228246186377910115955364860602156858342625510595234655069254226538075680435264619805416612878966768881131350191395151512503569372727522527384478522391853128284936424130832683169482107649810997365067054465956999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7878982d09bd872709847a391d282a1121546d29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagatajacob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagatewaypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagazettedelhonordecos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagazettedelhonordecos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagazettedesplantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagazettedessports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagendacattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagenost.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lageorna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lager-frenzy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagerap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagerfrenzy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagerine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagetnmbu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laggingballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laghousinglaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagigogne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagiliola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagioiadelcuore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagirafeacousmate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagiustadistanza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagneaualabraise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagneaureal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagniappealways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagniappedulcimersociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagatadecheshire.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagatajacob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagatewaypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagazettedelhonordecos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagazettedelhonordecos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagazettedesplantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagazettedessports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagendacattery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagenost.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lageorna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lager-frenzy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagerap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagerfrenzy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagerine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagetnmbu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laggingballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laghousinglaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagigogne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagiliola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagioiadelcuore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagirafeacousmate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagiustadistanza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagneaualabraise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagneaureal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagniappealways.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001698123c21500000403004630440220225f6f22bbc29177353a231cf9fd025a2b6e60896ef0285608ff925f4639f51a0220492f33347b82a48068d8f12d98cb85f8aeff0cad5a7f2bb3d509588d9ab2cc9f007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001698123c3b10000040300473045022100d26b13abfbea38500cf0cb27f9e4616f5befbe956d706d55bee6fe7721dcc92f02206ec84c32bb263864b08e3f453670795cbede04aadd9371975939501921e52867
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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