tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 03:56:f8:ff:50:b4:9d:80:af:0a:ba:0d:15:29:6a:2e:eb:b1 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:f8:ff:50:b4:9d:80:af:0a:ba:0d:15:29:6a:2e:eb:b1
Serial Number (int): 290932115566037615575607419043044075170737
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:21:e4:07:35:24:65:c1:5b:13:04:46:17:a4:b4:09:1d:6e:ce:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:21:fc:2c:b4:18:b6:19:79:90:3d:a2:a4:eb:ec:cf:9a:09:7d:ab
Fingerprint (sha256): 34:75:c6:be:76:3f:14:4c:94:e6:f1:ed:b3:5e:82:49:1b:ba:1b:b6:32:8b:9f:c0:29:0d:9e:c3:ff:c3:5c:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stclaresatthecathedral.org
stdominicsweb.com
stdotr.com
steadfastdisciple.com
stedwardandstpaul.org
stefanalbrektssonspoesi.com
stefaniamarrara.com
stephentaylorhistorian.com
stephentheard.com
sterlingimageworks.com
sterlingmanorhomes.com
sterlingranchusa.com
sternerochsterner.se
stettlerlandwirtschaft.com
steunfondscawzwvl.com
steve-official.com
steve-r-hayes.info
steve-stewart.org
steve949.com
steveadrehel.com
steveandmeegs.com
steveballandassociates.com
stevebensema.com
stevenpotratz.com
stevenrealife.com
tls.automattic.com
www.breakfasts.fashion.blog
www.go.steadyhq.com
www.stclaresatthecathedral.org
www.stdominicsweb.com
www.stdotr.com
www.steadfastdisciple.com
www.sted.world
www.stefanalbrektssonspoesi.com
www.stephentavani.com
www.stephentaylorhistorian.com
www.stephentheard.com
www.sterlingimageworks.com
www.sterlingmanorhomes.com
www.sterlingranchusa.com
www.sternerochsterner.se
www.stettlerlandwirtschaft.com
www.steunfondscawzwvl.com
www.steve-official.com
www.steve-r-hayes.info
www.steve949.com
www.steveadrehel.com
www.steveandmeegs.com
www.steveballandassociates.com
www.stevebensema.com
www.stevenpotratz.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI53CwDpAU8whVBlB1Y6
IBi6w1C3fC2rBgMlF2zRhdufk7U/cCyPeyWnH5gpZRkoe6gjn7lFJEOiNrpSqB5c
JQ0g3Rl7OagurmDa3zUj3Pb+gsQ5OEkWFnx0bCBeLVrmk1ywOeqw16NCEfwNwhJT
5EI03J0HuiwuWIcKxYd3k5vJHdjJgqd0EBmGZ5HX8qbcEWStBYdS9rO4/PtlM80o
m63eeXRy/ICKZcK6flzNJQMiglmP/znb9OQ1N5rFJUXBgeKVJnGBPBHXB4F9mi13
WecYO4VTL6zEIdDrMRffWp7/EP6dTtiJ+279s3MoahdXJkAyDhxQwx8s9IZqieO3
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290932115566037615575607419043044075170737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-20 16:28:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-18 16:28:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24308006669060533791573788369287682948589251933788825924370355862802575060174864082878843288668696664149305759008287965182621659131008325286474766840916024049871048447734890484255961708462359061521516087640550299332313968548399777845788933927432628533165274706114150219732338949039150427584171713222526895259141140393883940974307712777104996505413418692263299640081358359025158544051129054530152484209410702363230063260036085674420707284546709726280725454850662617316056061358583193740731549246439377663151509972389913226899366917655702802356240093989450232464332630895233001673120040208754778545122454585502819661577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e21e407352465c15b13044617a4b4091d6ecedb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stclaresatthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stdominicsweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stdotr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steadfastdisciple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stedwardandstpaul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefanalbrektssonspoesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefaniamarrara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephentaylorhistorian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephentheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingimageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingmanorhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sterlingranchusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sternerochsterner.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stettlerlandwirtschaft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steunfondscawzwvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steve-official.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steve-r-hayes.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steve-stewart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steve949.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steveadrehel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steveandmeegs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steveballandassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevebensema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenpotratz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenrealife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakfasts.fashion.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.go.steadyhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stclaresatthecathedral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stdominicsweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stdotr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steadfastdisciple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sted.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stefanalbrektssonspoesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephentavani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephentaylorhistorian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephentheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterlingimageworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterlingmanorhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sterlingranchusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sternerochsterner.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stettlerlandwirtschaft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steunfondscawzwvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steve-official.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steve-r-hayes.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steve949.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steveadrehel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steveandmeegs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steveballandassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevebensema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevenpotratz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001849615a5d7000004030048304602210090501b1761bc5832c9b9c7695c29f9e511ebb1812f272cb17d498619471ea76f0221008714848464c503b7a8fab58c290453086314c16811b798e827a52bafd5781456007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001849615a7ec0000040300483046022100eac8d7542d0363e0de2d87c9cd697a490dcac77199d582c136dab897ae8487be022100e4d19430c3056a277bea9db768689a7007c07452bc049722a356daebd711e9a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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