tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:88:5c:b8:6a:6f:dd:62:51:49:78:b6:5f:a1:71:44:69 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:88:5c:b8:6a:6f:dd:62:51:49:78:b6:5f:a1:71:44:69
Serial Number (int): 345227576496965508486125672201638862996585
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:9c:99:da:00:21:a2:66:7a:05:7a:90:85:ae:c1:85:57:31:42:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:35:e6:f8:6e:36:f0:be:7f:57:9f:0a:3b:c5:7b:64:81:71:98:b5
Fingerprint (sha256): 3c:2f:b7:aa:f0:d7:66:f3:b3:fa:dc:c4:89:b2:6b:b1:9c:9b:67:c0:c7:f1:32:07:17:2f:de:d6:34:d0:11:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

macorrections.com
macosamidicimai.org
macouinc.org
macoutdoors.com
macpariadka.org
macparks.org
macphersonbldrs.com
macpowerpc.com
macqliberalclub.com
macraebell.com
macraftbeer.com
macraftbeerpartnership.com
macramegardens.com
macramepurse.com
macraph.com
macrinacrawfordgolf.com
macroadventures.com
macroafricaintelligence.com
macroathart.com
macroatonce.com
macrobienestar.com
macrobioticamediterranea.com
macrocentral.com
macrocentrics.com
macrochristian.com
macrocosmonaut.com
tls.automattic.com
www.macosamidicimai.org
www.macouinc.org
www.macoutdoors.com
www.macpariadka.org
www.macparks.org
www.macphersonbldrs.com
www.macpowerpc.com
www.macqliberalclub.com
www.macraebell.com
www.macraftbeer.com
www.macraftbeerpartnership.com
www.macramegardens.com
www.macramepurse.com
www.macraph.com
www.macrinacrawfordgolf.com
www.macroadventures.com
www.macroafricaintelligence.com
www.macroathart.com
www.macroatonce.com
www.macrobienestar.com
www.macrobioticamediterranea.com
www.macrocentral.com
www.macrocentrics.com
www.macrochristian.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB5F1xo+iXf/xJCaFPn3
731X08NYE6vQX2IDyD6/0vNbnptkjK874Aic8kt9kB+VoBtsaE5RMYvtHqKoKcXh
3eirLIl4pzzJI0buxfmCO1kGkiErIvRpv+wFcucUjvq99M/ciZVgQmL0AeNJssAO
I8W90W19QQhkiJi/KRgnNFGdtFGDzHjZ0cYrVCjSPgC1MXFIQFOlfrPNwxqjfj3G
n4pv9H8TeS1Bc/Brp+U36rMv5BZCrZBufXPnbBwJ7hkYvppNWTwFvpCmYfT7uoAZ
wPhEQGHphOCdCWUIZVBhCWpcfwcY/90ayICnFXZc3F131N8k01p56oJygsky0GMX
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345227576496965508486125672201638862996585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-16 18:32:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-14 18:32:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24757635854038809431559523208522811236271154958568253619536346460496442096481931797227976031761164760007509129130134468569855511994106990175436582229264175069141663572183133489679461586235996024677868469660479091350155068042850682454248050814226011716661001987189145648011818494729727537426610770498348414358191319903259469099304479335370251413680216241148802150974733539399434685763922265136507637204410259590259754789645859614483113146485099121871542966769558501685444196476052689101837150124046604479803824780634051054147244125848812219553782518645326750917946912378866448623820591248103792585474647366013957642043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae9c99da0021a2667a057a9085aec1855731421e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1097 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macorrections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macosamidicimai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macouinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macpariadka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macphersonbldrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macpowerpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macqliberalclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macraebell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macraftbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macraftbeerpartnership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macramegardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macramepurse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrinacrawfordgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macroadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macroafricaintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macroathart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macroatonce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrobienestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrobioticamediterranea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrocentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrocentrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrochristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrocosmonaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macosamidicimai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macouinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macpariadka.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macphersonbldrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macpowerpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macqliberalclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macraebell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macraftbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macraftbeerpartnership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macramegardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macramepurse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macraph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrinacrawfordgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macroadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macroafricaintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macroathart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macroatonce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrobienestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrobioticamediterranea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrocentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrocentrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macrochristian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016987fd58c4000004030046304402200349489c5e71d21fc25577ee1d2139b01d61c333ad905f8def6e0203c32f809602200e157dbc3a5391b4eef0eb3b3c2ad2ca7d5e17e7b2ac2c7182a3792d12ca3110007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016987fd5ab9000004030047304502206b92c1a32203e45e1677e9a9207e6461e926bc8229c49984ebac6dfecabada98022100f27ffbfff8fdc2040b0a0472345547a1dbf245b01239b7489ec5504ad224cb92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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