tls.automattic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:f8:14:cc:b7:1e:36:d3:b7:60:9d:1f:6c:92:32:23:dd was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:f8:14:cc:b7:1e:36:d3:b7:60:9d:1f:6c:92:32:23:dd
Serial Number (int): 286507227121520741322872843224022300894173
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:5b:a3:b6:bb:c0:75:79:98:01:86:1d:9c:73:75:6c:9b:f8:ad:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:75:06:54:e8:e0:ee:61:1d:b2:99:91:aa:24:bf:d4:16:a4:af:b2
Fingerprint (sha256): 46:7a:f8:27:ac:b9:30:8d:53:90:64:b0:53:2a:cf:1b:8b:3e:9e:94:37:91:f2:91:a3:e2:ca:20:da:85:15:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tls.automattic.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aesthetix.co.in
aucklandmtb.co.nz
blog.olta.co.jp
blog.solidthinking.co.kr
corp.k-zone.co.jp
designartist.co.kr
ds.freee.co.jp
empoweryourbusiness.co.nz
golfstudio.co.kr
handpan.co.kr
hastudio.co.kr
interfacemagazine.co.nz
labs.efficient.co.jp
mobitize.co.jp
mylawyer.co.nz
oliverbooks.co.kr
oogywawa.co.nz
projectresearch.co.kr
rajat.co.in
returnhome.co.kr
sec.tky.esm.co.jp
simongore.co.no
soulstrokes.co.in
thehubatmorija.co.ls
therunwayjournal.co.in
tls.automattic.com
wfclubbridge.world-family.co.jp
www.aesthetix.co.in
www.designartist.co.kr
www.dunedinflatnames.co.nz
www.ecoconstruct.co.nz
www.golfstudio.co.kr
www.handpan.co.kr
www.hastudio.co.kr
www.mobitize.co.jp
www.musicreel.co.nz
www.oliverbooks.co.kr
www.projectresearch.co.kr
www.rajat.co.in
www.returnhome.co.kr
www.simongore.co.no
www.soulstrokes.co.in
www.tavishskitchen.co.nz
www.thehubatmorija.co.ls
www.therunwayjournal.co.in
www.tonylewis.co.nz
www.vridhi.co.in
www.yeonhapsystem.co.kr
www.yhsbearing.co.kr
yeonhapsystem.co.kr
yhsbearing.co.kr

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqymhNT2kEbFmZxgYRsME
XGN56jHN1ys8HYTH3fnUSuvAGL8oHXWN5X+6K38lR2d17uBV2C08EPA0ocNjoibm
IjSMwfVZiLQ+YlaTDTG/EBwP78z2gP9Gt4mv7um/R65vGTwGK5f9RoiAMJ7ZqULi
Sjmrev9w/lGqbKrvICaqEub1HUAmQdttM6oRFwQsVjw0Ua41ZYvQiWdgfDsshsJv
NMtGa0F/+F2rGeipnKqUio1zyxw+Ar3ZVLJpcCOyVj+7J9obuANrC79WKCAGilkp
jJMUdurrTUfc+rTumbHA+2NI+5rjtRbbgVeqxMfNFKMuffJRxsy2ypYrx3MacgkG
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286507227121520741322872843224022300894173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-07 07:29:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-05 07:29:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21607278528560537733667606435678574912768313314655064582505703797049543331236890780344793628371903682768510154494979973083415863174751174732450019566870067425590206893736743674722368517151014683503952092876325836728528548340320845025437301441577591078179184048008621295791400434343170897799731056487030562650328057130502007493929062590631901900208396803850660389707388390089789597300196069765100960822569393589758305523975960372944455424466960196943293362047135827165344806516939821618382483800767462178211416673005113458190478052179273790745184396425830159243886930738260261976000513788236081976987656393763739731473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							295ba3b6bbc075799801861d9c73756c9bf8ade5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1073 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesthetix.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmtb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.olta.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.solidthinking.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.k-zone.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designartist.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.freee.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empoweryourbusiness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfstudio.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handpan.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastudio.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interfacemagazine.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.efficient.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobitize.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylawyer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oliverbooks.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oogywawa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectresearch.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rajat.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returnhome.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.tky.esm.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simongore.co.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulstrokes.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehubatmorija.co.ls'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therunwayjournal.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfclubbridge.world-family.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesthetix.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designartist.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunedinflatnames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecoconstruct.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfstudio.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handpan.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastudio.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobitize.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musicreel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliverbooks.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectresearch.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rajat.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.returnhome.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simongore.co.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soulstrokes.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tavishskitchen.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehubatmorija.co.ls'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therunwayjournal.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonylewis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vridhi.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yeonhapsystem.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yhsbearing.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeonhapsystem.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yhsbearing.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bcb8d9d9f000004030047304502203ae45edccf2ed68e22e4465f285fc9ac6d714f8cce98125910968bd5f7e3b4dd022100b48ec4c7ac1bc8f2647e36f23d91694bcb00d7f466b0d426c5ba54a152b859ac00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bcb8d9d930000040300483046022100a1f81549a52f3718cd101a046b3928822e108327252a30d221315f37b53a8d5a022100a69e2b8ca595f8ee9f1e61a1586d26310a2971fdd2c8b98abee9db8f63bb37c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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