tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:5f:bf:27:72:6c:f6:15:f7:8c:ea:72:9a:9d:fb:b1:39 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:5f:bf:27:72:6c:f6:15:f7:8c:ea:72:9a:9d:fb:b1:39
Serial Number (int): 327478906166322055961359090811479667749177
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:7c:c1:f0:44:ca:a9:41:9c:f6:5d:98:0d:f9:45:57:4a:8c:8c:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:c5:43:58:3f:2d:17:96:f0:0b:56:ce:f5:52:20:fd:14:45:9c:54
Fingerprint (sha256): 41:aa:db:39:fb:5a:ac:30:a0:49:50:35:1d:21:b1:b2:c2:e1:fa:f8:56:71:df:0b:e1:6e:e4:f0:1d:f2:13:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pravospain.com
pravposebno.com
prawainwestora.pl
prawastronakobiety.com
prawdziwezycie.com
prawnbush.com
praworeklamy.pl
prawoslawie-kedzierzyn-kozle.info
prawowanglii.org
praxeology.org
praxes-group.com
praxis-birgel.com
praxis-dr-rambeck.com
praxis-drgoerne.com
praxis-fink-rester.com
praxis-fuer-hebammenkunst.com
praxis-gallmann.ch
praxis-gendolla.com
praxis-haberhauer.com
praxis-laimbacher.ch
praxis-rajabi.de
praxis-sarottihoefe.com
praxis-schumacher.ch
praxis-seidel.info
praxis-sg.ch
tls.automattic.com
www.pravniodkazy.com
www.pravospain.com
www.pravposebno.com
www.prawainwestora.pl
www.prawastronakobiety.com
www.prawdziwezycie.com
www.prawnbush.com
www.praworeklamy.pl
www.prawoslawie-kedzierzyn-kozle.info
www.prawowanglii.org
www.praxeology.org
www.praxes-group.com
www.praxis-birgel.com
www.praxis-dr-rambeck.com
www.praxis-drgoerne.com
www.praxis-fink-rester.com
www.praxis-fuer-hebammenkunst.com
www.praxis-gallmann.ch
www.praxis-gendolla.com
www.praxis-haberhauer.com
www.praxis-laimbacher.ch
www.praxis-rajabi.de
www.praxis-sarottihoefe.com
www.praxis-schumacher.ch
www.praxis-seidel.info

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU/z8sl0nqBRFaEZB+wP
w4t9dgYWE+roRc/gy3xs0d5+ADX+1ivkjseVp4nc6v8coimEsQpTlDjYP/Fe7lET
7XIK1tq3TgqvlhVMVT/PTEV2jXlMHA60sE4CDzveyMJT9c2YsgczccSdtsyZE4Ix
IncDrZUC92ofBog56uD5Gxwj9TVT6w4PcTJK9qwespWMxeF8Pvq/pC38yFLb1cFb
6V2frL47EZ4zl8kg6Lx6A/HAcIMlDTC1AaMsyDHzjD5MsqkWzmGDIQtc+WjY3olc
cX+8DWkTXUP2JEjtZpDWRhufiVLOvmOmeRepKeuHhXxo3KTjnf20QBXA3IWwNW/+
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327478906166322055961359090811479667749177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 16:54:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 16:54:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23393512674678493643528255714377139609980333602590108352702044042110635858321180839394682627140265293588163053155021533354366819751624860156028059481836915160337474070024870516301406077085510844479752722132645662023082210889403341423676644911209340130616110036219713588923042253003156119612481604544197636842528547504062408042932898982695908376262496976754568091322612236546663891290694963831578558614954020936180931789128333198910320673363517544547062641097616119984733196542498060985741649597449506693801537234456857940406928852259132355172092729391556319953714857759490917209253495473570708000329135121775698378377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							777cc1f044caa9419cf65d980df945574a8c8c34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pravospain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pravposebno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prawainwestora.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prawastronakobiety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prawdziwezycie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prawnbush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praworeklamy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prawoslawie-kedzierzyn-kozle.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prawowanglii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxeology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxes-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-birgel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-dr-rambeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-drgoerne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-fink-rester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-fuer-hebammenkunst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-gallmann.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-gendolla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-haberhauer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-laimbacher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-rajabi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-sarottihoefe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-schumacher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-seidel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praxis-sg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pravniodkazy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pravospain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pravposebno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prawainwestora.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prawastronakobiety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prawdziwezycie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prawnbush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praworeklamy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prawoslawie-kedzierzyn-kozle.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prawowanglii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxeology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxes-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-birgel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-dr-rambeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-drgoerne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-fink-rester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-fuer-hebammenkunst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-gallmann.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-gendolla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-haberhauer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-laimbacher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-rajabi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-sarottihoefe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-schumacher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praxis-seidel.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000164b8d3d6680000040300483046022100a54e06415d01ac1ef830b4e7b6874657af4b45ee4582051cfb4469827572b0fa02210092793d2e02eb9751ebbaf847d01b26f167df9fd69dfafd417df8a9f4166866f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164b8d3d8610000040300473045022002871aa53b2ab2cea2a0f45cb53f8213c82bd9b5eea31e635459312db0d44070022100cc95c55c13e4704a49c070a37db36c2a024821f913575222b7cdc4fd7fa382ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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